$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db4907d4-5102-3d7b-ae8d-36027fe4ea0d.roa File: db4907d4-5102-3d7b-ae8d-36027fe4ea0d.roa (raw, json) Hash identifier: HcAiWy9qQbyE8bb74c/cUegRLoUzHfbtjhV7yv9NTLU= Subject key identifier: D5:3A:25:89:EC:AF:4F:98:C2:9D:47:3E:AB:25:A4:F1:5E:F2:B8:3D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4B24EC1A374D6B5252B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db4907d4-5102-3d7b-ae8d-36027fe4ea0d.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396596 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:b2:4e:c1:a3:74:d6:b5:25:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=46456b62-b329-4c61-94a8-358d0a2c5d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:be:95:54:6c:b1:6c:11:55:92:83:4f:c3:15: cd:b7:0b:a1:63:65:dc:89:86:e1:21:88:69:07:30: fb:ed:26:cf:a7:93:60:1c:3b:28:d3:34:91:42:6f: 58:da:35:00:ed:71:74:71:29:3e:16:74:1a:9e:e1: 51:73:9f:63:4d:36:ba:90:8f:1e:09:ea:87:f9:6d: ec:53:ac:3e:88:5f:00:af:4f:15:6d:a7:81:5c:09: f9:f1:ae:7f:29:43:73:c7:d7:0b:2d:d1:e5:55:d4: 09:ce:47:90:ad:3a:e9:95:b3:2e:57:b6:a0:07:7d: fd:8f:ae:a0:a1:0f:28:1a:d5:09:40:ac:34:50:7c: e1:09:04:fd:7a:42:be:93:d6:13:2f:fc:c1:01:54: 2c:af:05:0c:6d:47:cf:3a:23:01:4d:79:46:45:89: 2c:bb:3c:31:e7:6f:ad:39:75:39:7f:50:d4:86:72: bf:c7:0d:a3:87:06:96:be:2c:33:76:57:f7:12:c2: 15:fc:cf:50:fb:54:b8:87:52:fb:19:6a:22:cd:b6: 28:19:b1:37:45:61:be:2d:03:1e:43:20:d0:98:34: ec:cd:63:e7:b6:01:42:a1:96:5a:d3:93:b3:5c:d3: d1:96:5a:48:b6:0f:11:da:f5:08:3f:b5:a1:1a:11: f4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3A:25:89:EC:AF:4F:98:C2:9D:47:3E:AB:25:A4:F1:5E:F2:B8:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db4907d4-5102-3d7b-ae8d-36027fe4ea0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f4:73:de:78:ea:15:1f:16:dd:f7:0b:3e:da:5b:d5:cc:2b: 36:71:e6:16:95:27:52:17:db:83:24:88:a7:33:87:30:50:66: 64:f6:88:13:2c:3a:1a:6e:73:64:18:d8:9b:c6:fa:fc:56:ba: ef:77:88:f4:69:0f:b9:03:9d:e3:82:77:4e:0f:4d:b8:18:c4: 88:76:a1:61:69:e9:6b:1f:4a:d3:b2:fa:df:d4:86:3b:f4:f4: eb:3d:46:98:34:11:01:97:8a:1d:ff:02:4f:da:3b:af:ee:55: 12:8a:cf:fc:b8:68:ba:ef:02:b8:6a:87:1b:17:95:6a:10:55: 9a:e2:d9:af:bd:69:5b:8e:e3:f2:54:cb:c9:d2:9d:f8:fa:02: 80:06:3f:d6:89:d1:e0:e5:95:e4:2c:a0:7b:64:97:e2:00:0d: 19:92:26:b9:f4:af:41:e1:b8:b3:d3:67:62:5e:61:b6:83:04: ee:bc:01:64:31:b1:52:43:4a:fd:92:36:6b:60:e8:0e:9b:15: ef:11:de:ec:ed:3c:62:ed:a9:e0:3e:4e:02:5c:2a:ed:45:88: c7:bc:68:77:d7:dd:14:f3:ef:02:7f:5b:1a:b5:64:13:b1:68: de:52:ff:97:c1:61:8a:6f:36:77:3d:8f:3f:d4:c1:6e:81:45: ea:43:3c:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtLJOwaN01rUlK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NDY0NTZiNjItYjMyOS00YzYxLTk0YTgtMzU4ZDBhMmM1ZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL6VVGyxbBFVkoNPwxXNtwuhY2XciYbhIYhp BzD77SbPp5NgHDso0zSRQm9Y2jUA7XF0cSk+FnQanuFRc59jTTa6kI8eCeqH+W3s U6w+iF8Ar08VbaeBXAn58a5/KUNzx9cLLdHlVdQJzkeQrTrplbMuV7agB339j66g oQ8oGtUJQKw0UHzhCQT9ekK+k9YTL/zBAVQsrwUMbUfPOiMBTXlGRYksuzwx52+t OXU5f1DUhnK/xw2jhwaWviwzdlf3EsIV/M9Q+1S4h1L7GWoizbYoGbE3RWG+LQMe QyDQmDTszWPntgFCoZZa05OzXNPRllpItg8R2vUIP7WhGhH0gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNU6JYnsr0+Ywp1HPqslpPFe8rg9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGI0OTA3ZDQtNTEwMi0z ZDdiLWFlOGQtMzYwMjdmZTRlYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX0c9546hUfFt33Cz7aW9XMKzZx5haVJ1IX24MkiKczhzBQZmT2iBMs Ohpuc2QY2JvG+vxWuu93iPRpD7kDneOCd04PTbgYxIh2oWFp6WsfStOy+t/Uhjv0 9Os9Rpg0EQGXih3/Ak/aO6/uVRKKz/y4aLrvArhqhxsXlWoQVZri2a+9aVuO4/JU y8nSnfj6AoAGP9aJ0eDlleQsoHtkl+IADRmSJrn0r0HhuLPTZ2JeYbaDBO68AWQx sVJDSv2SNmtg6A6bFe8R3uztPGLtqeA+TgJcKu1FiMe8aHfX3RTz7wJ/Wxq1ZBOx aN5S/5fBYYpvNnc9jz/UwW6BRepDPF0= -----END CERTIFICATE-----Generated at Thu Mar 26 12:56:23 2026 by rpki-client