$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5ced4be-541d-33d4-b816-472ff18e3a67.roa File: d5ced4be-541d-33d4-b816-472ff18e3a67.roa (raw, json) Hash identifier: MaPLAdchz5ZWoukdlDV1qUtP35gFflzwbqP1eDgrQW0= Subject key identifier: EC:D4:0D:5F:48:41:B6:F1:11:6B:67:A0:3F:F4:23:58:71:4F:1F:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4D1D12F15F498FE8D2FA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5ced4be-541d-33d4-b816-472ff18e3a67.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396616 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d1:d1:2f:15:f4:98:fe:8d:2f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=c6d63022-f097-4099-abb8-37903b974f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:47:ed:36:b0:4e:a1:a2:12:4f:33:d0:ba:ab: ff:8f:d7:12:7e:a1:cb:9a:90:bf:c9:eb:36:af:c0: 35:cf:48:1b:a8:34:a0:df:f4:3c:a0:ef:23:75:1e: a4:55:1b:27:5a:f7:7c:70:41:0f:ca:a6:38:8f:b5: 61:fc:01:e3:68:f4:ea:ca:16:d0:aa:46:78:d9:f8: b2:df:78:00:5e:b0:d9:1b:ca:f9:63:2a:03:7b:75: a8:40:55:06:e3:ee:ae:82:ef:06:7d:1c:9a:41:e4: 39:02:a0:a3:4d:fd:ec:23:f1:bc:a8:6d:a2:69:e8: 85:53:be:f1:a1:14:07:73:20:5f:9f:5e:d3:2b:a8: 21:ec:8e:12:61:09:39:a3:11:7e:3d:41:ee:b3:ff: f6:88:3c:cc:9b:73:2b:b5:43:9a:3a:f9:57:a1:6b: a4:6b:2c:19:6b:c4:e8:84:71:4d:d5:54:c9:6b:07: 68:99:2f:4f:e8:93:d9:62:91:e8:dc:83:c9:e9:f8: 46:fb:37:a7:f6:bd:da:83:b5:83:23:d3:c4:ef:eb: f7:45:05:47:43:77:02:70:76:dc:4d:83:be:1d:ac: 48:df:55:70:06:17:ad:77:02:40:36:50:8d:e2:0d: cf:5a:d3:47:ee:6e:75:2a:ff:16:7d:a2:0d:a3:da: d1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D4:0D:5F:48:41:B6:F1:11:6B:67:A0:3F:F4:23:58:71:4F:1F:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5ced4be-541d-33d4-b816-472ff18e3a67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ac:c5:dd:2a:3d:cc:35:f3:90:b1:1b:58:83:21:82:10:24: a0:70:a4:eb:9a:55:ac:a0:5f:73:aa:b2:d0:eb:91:7e:cb:5a: 89:87:65:12:69:1c:2d:0c:d1:6c:02:0f:7d:b6:c1:1b:c3:f5: 9c:0e:56:ed:fe:9b:36:92:3e:f5:12:d4:b8:73:07:54:15:22: 60:b7:0e:d8:b6:86:51:a8:68:ab:22:05:9d:a1:1d:ff:20:be: 9e:5b:61:d1:83:fe:84:7b:6a:29:fb:62:3c:79:bb:ba:c4:2a: 73:56:63:70:79:76:62:2e:0a:7b:d2:ba:76:c1:59:15:ef:dc: 90:09:49:36:60:bc:d0:f2:10:c2:80:0a:93:6b:70:47:6b:00: 74:43:f2:5c:35:ad:1c:d1:63:b3:c1:a8:d0:87:f1:92:ea:a0: ee:9a:0f:70:91:13:dd:2a:11:e7:b7:d0:65:e6:cf:ca:5d:4c: 66:21:17:7b:3f:49:34:da:a2:58:98:da:b9:3d:4d:72:c1:64: 2d:80:4f:df:79:24:79:1b:12:af:9b:3a:79:b4:fd:65:e7:f8: c6:bc:fc:4f:70:e3:c2:58:0a:5b:a0:7b:21:75:3a:7e:f6:2c: c5:81:5d:70:a1:82:e8:00:b8:60:18:9f:c8:11:d5:ac:d8:3d: 8b:7a:0d:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNHRLxX0mP6NL6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YzZkNjMwMjItZjA5Ny00MDk5LWFiYjgtMzc5MDNiOTc0ZjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0ftNrBOoaISTzPQuqv/j9cSfqHLmpC/yes2 r8A1z0gbqDSg3/Q8oO8jdR6kVRsnWvd8cEEPyqY4j7Vh/AHjaPTqyhbQqkZ42fiy 33gAXrDZG8r5YyoDe3WoQFUG4+6ugu8GfRyaQeQ5AqCjTf3sI/G8qG2iaeiFU77x oRQHcyBfn17TK6gh7I4SYQk5oxF+PUHus//2iDzMm3MrtUOaOvlXoWukaywZa8To hHFN1VTJawdomS9P6JPZYpHo3IPJ6fhG+zen9r3ag7WDI9PE7+v3RQVHQ3cCcHbc TYO+HaxI31VwBhetdwJANlCN4g3PWtNH7m51Kv8WfaINo9rRzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzUDV9IQbbxEWtnoD/0I1hxTx/JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDVjZWQ0YmUtNTQxZC0z M2Q0LWI4MTYtNDcyZmYxOGUzYTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2sxd0qPcw185CxG1iDIYIQJKBwpOuaVaygX3OqstDrkX7LWomHZRJp HC0M0WwCD322wRvD9ZwOVu3+mzaSPvUS1LhzB1QVImC3Dti2hlGoaKsiBZ2hHf8g vp5bYdGD/oR7ain7Yjx5u7rEKnNWY3B5dmIuCnvSunbBWRXv3JAJSTZgvNDyEMKA CpNrcEdrAHRD8lw1rRzRY7PBqNCH8ZLqoO6aD3CRE90qEee30GXmz8pdTGYhF3s/ STTaoliY2rk9TXLBZC2AT995JHkbEq+bOnm0/WXn+Ma8/E9w48JYClugeyF1On72 LMWBXXChgugAuGAYn8gR1azYPYt6DQs= -----END CERTIFICATE-----Generated at Thu Mar 26 18:48:27 2026 by rpki-client