$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e0462824-661e-310a-ab34-4a776414d653.roa File: e0462824-661e-310a-ab34-4a776414d653.roa (raw, json) Hash identifier: 2bp4wmZqTdioNn7WSmXFFLsM7dOlDoGKEuNOqxwFTp0= Subject key identifier: A3:F4:69:67:66:48:57:D0:21:7B:F2:C4:30:44:8B:03:CA:1C:E9:02 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B49CA0B13C44768B8CC4E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e0462824-661e-310a-ab34-4a776414d653.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 20362 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:9c:a0:b1:3c:44:76:8b:8c:c4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=be6486cd-2a9a-461b-baf0-0179a7a056e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b5:94:91:b1:79:0a:03:26:6b:4a:12:90:e5: 75:f6:78:00:a3:0a:c6:dd:d5:c0:04:46:41:24:ab: 97:1e:76:43:f8:0d:aa:04:eb:e3:c8:08:22:40:b8: 42:98:e6:3a:dd:2c:60:84:c3:1f:bb:3d:11:e8:70: 46:32:b3:67:74:6b:b2:a3:7f:67:c8:9e:09:ee:20: 38:3d:24:df:24:1c:9b:1b:eb:7f:5a:b7:9b:f9:4b: c3:ea:f4:5a:14:8b:2a:69:c2:c7:0d:fb:d0:00:93: ab:ab:af:ab:c9:da:2f:73:0a:83:ad:15:1f:6a:7d: 51:ce:d5:5d:49:41:70:30:11:12:26:d3:6c:44:5f: a5:32:4e:06:fe:02:57:8b:bf:2e:4f:fb:9c:fc:98: 10:bc:e0:eb:90:ed:b5:c0:66:7a:b7:8f:b3:b8:88: af:41:92:ee:3b:bc:64:97:78:86:95:97:ce:69:c3: b2:21:b9:10:99:0e:9f:24:d3:64:d6:f8:54:95:6c: 67:b3:91:26:e2:80:14:2b:e5:69:83:b9:22:9b:0e: b9:b3:4f:39:38:cf:1c:fe:a1:5d:eb:0d:cb:03:d5: b8:57:1b:6d:18:7c:ae:32:bb:af:11:e4:ea:e0:db: 98:60:19:a9:4f:bb:53:68:71:ea:9a:12:7b:5e:82: 6d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F4:69:67:66:48:57:D0:21:7B:F2:C4:30:44:8B:03:CA:1C:E9:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e0462824-661e-310a-ab34-4a776414d653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:95:ca:5f:de:bf:a5:1b:73:9a:4a:58:e6:04:0b:bb:ae:b6: 2e:7a:fe:f7:a7:9b:e5:e6:c6:10:07:b3:03:65:30:33:14:3c: c7:9d:47:bf:92:9c:da:d4:41:06:18:50:7e:27:04:f1:05:88: 30:f9:fe:ad:9a:27:52:fa:c6:0f:b8:0c:bf:35:04:e3:b6:4d: 09:44:4b:e0:b6:6b:ee:20:a3:d5:61:76:93:a7:e0:3a:d7:74: ef:b4:d6:76:4f:e9:c9:64:24:8b:a5:5e:23:00:86:a3:09:36: b0:f6:f8:1d:21:9c:d6:f7:ba:df:03:7e:d5:0d:4d:24:b4:79: 35:3b:b0:4a:94:02:f6:f3:ca:ca:0f:13:d2:ef:00:38:70:07: 47:8a:54:2c:7d:e4:48:2c:fd:97:6e:6c:8f:d2:ea:c4:fb:69: 6b:b8:ea:56:53:c8:db:7a:f8:ab:3e:0c:47:3f:d4:4d:d7:6e: 47:a9:6e:24:0c:f1:ae:ab:b5:73:fd:19:e5:0a:75:ba:b7:20: 3e:a6:19:ce:7c:f5:1f:0c:14:23:eb:5d:97:50:76:18:cf:bf: fe:19:8f:76:60:b2:86:35:bc:c4:25:0d:d2:d4:11:bc:86:5e: 53:1e:70:82:5f:92:a5:91:ed:6e:7a:31:7e:12:d9:d2:98:91: 5d:04:df:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtJygsTxEdouMxOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YmU2NDg2Y2QtMmE5YS00NjFiLWJhZjAtMDE3OWE3YTA1NmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLWUkbF5CgMma0oSkOV19ngAowrG3dXABEZB JKuXHnZD+A2qBOvjyAgiQLhCmOY63SxghMMfuz0R6HBGMrNndGuyo39nyJ4J7iA4 PSTfJBybG+t/Wreb+UvD6vRaFIsqacLHDfvQAJOrq6+rydovcwqDrRUfan1RztVd SUFwMBESJtNsRF+lMk4G/gJXi78uT/uc/JgQvODrkO21wGZ6t4+zuIivQZLuO7xk l3iGlZfOacOyIbkQmQ6fJNNk1vhUlWxns5Em4oAUK+Vpg7kimw65s085OM8c/qFd 6w3LA9W4VxttGHyuMruvEeTq4NuYYBmpT7tTaHHqmhJ7XoJt4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKP0aWdmSFfQIXvyxDBEiwPKHOkCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTA0NjI4MjQtNjYxZS0z MTBhLWFiMzQtNGE3NzY0MTRkNjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKVyl/ev6Ubc5pKWOYEC7uuti56/venm+XmxhAHswNlMDMUPMedR7+S nNrUQQYYUH4nBPEFiDD5/q2aJ1L6xg+4DL81BOO2TQlES+C2a+4go9VhdpOn4DrX dO+01nZP6clkJIulXiMAhqMJNrD2+B0hnNb3ut8DftUNTSS0eTU7sEqUAvbzysoP E9LvADhwB0eKVCx95Egs/ZdubI/S6sT7aWu46lZTyNt6+Ks+DEc/1E3XbkepbiQM 8a6rtXP9GeUKdbq3ID6mGc589R8MFCPrXZdQdhjPv/4Zj3ZgsoY1vMQlDdLUEbyG XlMecIJfkqWR7W56MX4S2dKYkV0E3+Q= -----END CERTIFICATE-----Generated at Thu Mar 26 19:33:08 2026 by rpki-client