$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e1a7d0ab-8e5e-36b5-9842-d0f173f53be5.roa File: e1a7d0ab-8e5e-36b5-9842-d0f173f53be5.roa (raw, json) Hash identifier: 0S99lJ5qGjAgQWJCSxWDXVlkiMPkahqXSwAV62zzunI= Subject key identifier: 96:4C:FA:FD:5D:F9:C1:4A:42:6C:5E:C4:93:D7:4E:C6:DE:A2:A3:19 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B49F26DF9B73DB075B2300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e1a7d0ab-8e5e-36b5-9842-d0f173f53be5.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 20431 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:9f:26:df:9b:73:db:07:5b:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=d0be70d3-8592-4280-86b9-94793fd62a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ce:85:66:d7:80:8b:ab:a8:b4:71:09:e8:82: 7a:f3:67:40:1b:63:e7:37:c8:e8:16:66:60:bc:71: 2c:10:c0:19:32:13:d4:dc:e3:6d:d0:35:b4:73:65: 45:5c:de:7b:48:06:a4:09:39:b6:87:c8:f6:2b:81: 25:35:04:42:65:04:09:30:fe:9a:8f:26:fa:ef:25: e5:24:24:7d:9a:65:7c:8d:53:22:0d:6a:59:45:bf: 42:40:92:4d:20:39:75:97:be:ef:8b:e6:9f:c5:a8: 42:d3:1a:24:fb:db:53:66:98:67:f0:27:13:72:be: 6b:bf:17:3f:c8:71:3c:72:c1:56:b6:24:03:2c:f2: ae:9a:d3:cf:6f:58:c4:14:32:8c:72:4c:fc:7e:16: 03:3c:74:26:a7:fa:3a:36:64:ee:68:29:73:a1:c9: bf:68:77:5f:ef:e0:49:09:f3:6b:af:a0:70:78:76: e6:e5:72:60:7e:e8:cb:21:df:6c:04:6a:1b:aa:78: 30:76:52:18:bf:c5:8f:0a:c5:ae:05:62:87:25:26: 01:68:f7:aa:d4:d5:96:c8:53:de:b0:c2:8f:50:b2: 26:8a:96:70:00:d2:43:ee:69:e1:28:e4:da:e5:ce: 15:d0:f1:6f:d4:5d:2b:cb:55:19:c4:4a:46:2c:dc: da:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4C:FA:FD:5D:F9:C1:4A:42:6C:5E:C4:93:D7:4E:C6:DE:A2:A3:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e1a7d0ab-8e5e-36b5-9842-d0f173f53be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:cd:06:d8:03:81:cf:94:be:ec:40:1a:18:6f:b5:af:23:ac: d8:71:48:65:ee:e7:db:01:81:d8:72:e5:ad:a3:1f:b0:1d:80: 65:bb:a7:d1:a2:a4:17:f7:8e:6f:b4:96:5d:2d:4a:ad:c9:93: 6e:f9:ab:8d:c8:60:60:e3:77:0a:56:01:56:83:f8:ab:fa:20: 23:8d:86:ae:5c:ad:d0:0c:96:6d:a4:76:c0:8d:59:3f:e4:ce: 59:d3:78:b1:6e:f5:8e:c1:e4:42:a4:57:c8:42:85:37:55:a1: 72:05:ac:27:35:bd:bd:94:26:aa:17:0e:e4:06:53:36:74:c9: c4:a7:13:66:90:42:e2:c7:12:02:cd:1c:33:35:39:0b:12:53: 09:22:d8:30:3f:13:7c:cf:9f:89:9b:0f:67:51:48:1b:b2:de: 77:f3:7f:27:30:6d:0a:f4:1b:d4:c5:e8:72:40:52:8b:5d:19: d5:d8:ee:3f:b4:4b:87:57:2e:d4:e7:72:43:33:1e:89:4d:99: 9a:ea:6d:8d:5f:5c:5e:e4:d6:2a:26:2b:84:97:01:22:e6:4e: 60:06:73:54:da:df:09:22:b2:61:42:73:0c:25:8f:b5:68:8f: c8:5b:35:f6:2a:7c:e3:79:82:7c:8b:a5:16:80:ae:0a:65:98: 77:8f:00:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtJ8m35tz2wdbIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZDBiZTcwZDMtODU5Mi00MjgwLTg2YjktOTQ3OTNmZDYyYTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc6FZteAi6uotHEJ6IJ682dAG2PnN8joFmZg vHEsEMAZMhPU3ONt0DW0c2VFXN57SAakCTm2h8j2K4ElNQRCZQQJMP6ajyb67yXl JCR9mmV8jVMiDWpZRb9CQJJNIDl1l77vi+afxahC0xok+9tTZphn8CcTcr5rvxc/ yHE8csFWtiQDLPKumtPPb1jEFDKMckz8fhYDPHQmp/o6NmTuaClzocm/aHdf7+BJ CfNrr6BweHbm5XJgfujLId9sBGobqngwdlIYv8WPCsWuBWKHJSYBaPeq1NWWyFPe sMKPULImipZwANJD7mnhKOTa5c4V0PFv1F0ry1UZxEpGLNzaiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZM+v1d+cFKQmxexJPXTsbeoqMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTFhN2QwYWItOGU1ZS0z NmI1LTk4NDItZDBmMTczZjUzYmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLNBtgDgc+UvuxAGhhvta8jrNhxSGXu59sBgdhy5a2jH7AdgGW7p9Gi pBf3jm+0ll0tSq3Jk275q43IYGDjdwpWAVaD+Kv6ICONhq5crdAMlm2kdsCNWT/k zlnTeLFu9Y7B5EKkV8hChTdVoXIFrCc1vb2UJqoXDuQGUzZ0ycSnE2aQQuLHEgLN HDM1OQsSUwki2DA/E3zPn4mbD2dRSBuy3nfzfycwbQr0G9TF6HJAUotdGdXY7j+0 S4dXLtTnckMzHolNmZrqbY1fXF7k1iomK4SXASLmTmAGc1Ta3wkismFCcwwlj7Vo j8hbNfYqfON5gnyLpRaArgplmHePACs= -----END CERTIFICATE-----Generated at Thu Mar 26 21:48:53 2026 by rpki-client