$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d99a1a8e-8070-330f-870d-379bea3a53c5.roa File: d99a1a8e-8070-330f-870d-379bea3a53c5.roa (raw, json) Hash identifier: bS9k5Wzx4EQ/5PqLY8MGqLOXrYLnI32I53CaHhH+zpA= Subject key identifier: 97:C6:BE:34:AB:4A:1B:10:4F:49:06:69:F9:CA:B4:B4:37:04:17:59 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4D8259057814FB6871600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d99a1a8e-8070-330f-870d-379bea3a53c5.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396549 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d8:25:90:57:81:4f:b6:87:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=dc69a6d6-495a-4b19-9ba9-dc18a1fd762f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:65:1c:2d:be:44:33:eb:8f:fd:df:9d:a1:fd: 42:dc:91:49:8b:86:25:2e:38:53:3e:51:be:55:08: 07:4d:52:e6:82:e6:8d:c1:d6:17:52:bf:65:fa:66: 1c:15:10:69:fd:4d:af:0b:38:a0:1e:cc:cc:a1:70: 13:a0:80:c9:a3:49:22:12:61:6f:69:da:fe:f8:40: 5d:7f:7f:5e:70:b3:e7:da:a7:9a:62:0d:14:c2:fa: 95:8e:c6:ee:0d:5f:92:c2:eb:2b:26:ac:f1:c8:8a: 36:8e:c1:91:2b:50:53:46:7d:fd:8e:aa:b9:1a:82: de:72:21:02:8a:ea:7e:4e:c8:a3:4d:b6:96:8b:4c: d4:0e:15:8a:fd:b4:f7:fb:f9:67:3f:01:38:bb:25: 0e:91:0e:a6:de:7d:bc:8e:5c:d3:e2:a0:b7:ec:1c: 17:b5:ec:c1:f2:77:2d:b7:83:e8:b4:22:97:a3:ce: 19:48:d8:e1:e0:8f:d4:b2:87:13:c8:30:05:66:59: 7f:19:c2:a1:26:fc:c1:6d:3d:84:a0:9e:a3:f0:a6: 4e:e5:51:d1:56:bf:b1:70:42:cb:1c:6c:5d:b4:8a: 63:05:c0:84:40:01:23:71:1a:23:10:6a:26:19:66: 42:6c:b9:50:d8:55:bf:27:be:39:8b:e2:17:4f:32: 76:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C6:BE:34:AB:4A:1B:10:4F:49:06:69:F9:CA:B4:B4:37:04:17:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d99a1a8e-8070-330f-870d-379bea3a53c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:fa:fc:8a:2b:cb:0d:4c:f1:29:b6:f5:95:61:cc:e2:53:d8: 26:ee:4c:cd:10:e6:40:ec:25:e9:a3:25:50:4b:2c:c7:46:11: f4:e0:6f:3c:55:de:3d:80:57:18:b5:81:ca:fe:2a:dc:c1:84: 3c:b1:46:5f:4f:03:96:aa:0c:64:5c:f9:4f:f5:1b:b9:ea:21: 10:3f:db:37:d9:bc:32:98:29:d8:2e:4b:4d:1f:fd:97:d5:d6: 2a:b2:36:98:cd:f1:66:3a:25:d6:b3:ae:ca:9f:c6:10:81:dd: 30:33:71:4e:bd:7e:c4:ca:17:c5:50:27:22:28:c8:8b:78:65: cb:a0:92:31:a9:ba:b6:ae:19:17:e6:5e:c8:0e:6c:bb:02:8e: 0c:65:29:61:99:80:47:91:27:b8:59:b3:5d:2d:d4:20:8f:2c: 75:b6:cd:0a:64:2e:98:d5:92:55:95:48:00:69:7e:98:98:35: fe:33:f9:5b:19:08:99:b5:38:00:86:3d:60:18:8c:fd:ac:39: e3:1a:c4:95:71:ba:3b:ab:6b:db:e5:51:3f:ce:1e:34:53:df: ad:c2:4b:eb:f3:24:97:6d:c0:0e:51:47:82:cc:75:b1:5e:9e: 39:cf:78:5e:b7:89:bd:7a:e8:8d:5d:55:0f:24:4f:e1:7f:25: a7:93:0b:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNglkFeBT7aHFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZGM2OWE2ZDYtNDk1YS00YjE5LTliYTktZGMxOGExZmQ3NjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGUcLb5EM+uP/d+dof1C3JFJi4YlLjhTPlG+ VQgHTVLmguaNwdYXUr9l+mYcFRBp/U2vCzigHszMoXAToIDJo0kiEmFvadr++EBd f39ecLPn2qeaYg0UwvqVjsbuDV+SwusrJqzxyIo2jsGRK1BTRn39jqq5GoLeciEC iup+TsijTbaWi0zUDhWK/bT3+/lnPwE4uyUOkQ6m3n28jlzT4qC37BwXtezB8nct t4PotCKXo84ZSNjh4I/UsocTyDAFZll/GcKhJvzBbT2EoJ6j8KZO5VHRVr+xcELL HGxdtIpjBcCEQAEjcRojEGomGWZCbLlQ2FW/J745i+IXTzJ2uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfGvjSrShsQT0kGafnKtLQ3BBdZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDk5YTFhOGUtODA3MC0z MzBmLTg3MGQtMzc5YmVhM2E1M2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH6/Ioryw1M8Sm29ZVhzOJT2CbuTM0Q5kDsJemjJVBLLMdGEfTgbzxV 3j2AVxi1gcr+KtzBhDyxRl9PA5aqDGRc+U/1G7nqIRA/2zfZvDKYKdguS00f/ZfV 1iqyNpjN8WY6JdazrsqfxhCB3TAzcU69fsTKF8VQJyIoyIt4ZcugkjGpurauGRfm XsgObLsCjgxlKWGZgEeRJ7hZs10t1CCPLHW2zQpkLpjVklWVSABpfpiYNf4z+VsZ CJm1OACGPWAYjP2sOeMaxJVxujura9vlUT/OHjRT363CS+vzJJdtwA5RR4LMdbFe njnPeF63ib166I1dVQ8kT+F/JaeTC7k= -----END CERTIFICATE-----Generated at Thu Mar 26 11:16:08 2026 by rpki-client