$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee721044-6240-36b3-be7a-30a26339031b.roa File: ee721044-6240-36b3-be7a-30a26339031b.roa (raw, json) Hash identifier: QcKPfgTiIOGn+bRGuElN8F/YOtxPcaqzo+3tRI+5Yx4= Subject key identifier: DB:EF:62:10:33:35:80:8B:1D:5C:91:8B:F5:3E:61:61:04:34:19:07 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4D4553D942D3C4E069000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee721044-6240-36b3-be7a-30a26339031b.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396560 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d4:55:3d:94:2d:3c:4e:06:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=d8daeb65-c1cc-4ce1-b9f9-460de0006a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a8:e9:ca:45:ce:f4:6d:f9:c8:09:b7:0b:95: 67:41:a7:62:79:49:69:52:d4:3e:67:cd:94:2c:6a: 17:cf:d0:e0:9d:f4:44:25:30:48:5f:7b:6f:7b:4b: d3:c6:ce:e7:e9:8b:08:11:0a:58:8e:61:20:3d:5e: 19:8b:c2:2a:b3:4e:43:1b:59:d3:9c:07:6c:04:8a: 8b:e3:34:47:ae:f7:5f:b1:0d:2c:25:8a:5c:70:fb: 62:bc:ed:e5:7f:d8:7e:16:ce:08:95:e3:34:68:85: b5:2e:44:4d:c9:52:15:c3:48:84:47:d0:6d:b8:e5: 9b:16:e6:12:85:59:f5:fa:d1:4f:d7:80:0e:23:ae: 21:6a:c3:fb:9b:aa:66:30:82:d5:ff:43:cd:89:cc: 91:65:4e:70:aa:93:8b:12:21:93:05:69:7b:b0:65: 7a:cd:c2:28:2c:fd:67:2a:48:83:38:17:51:69:5c: d4:61:0d:49:42:1c:d5:2b:58:04:11:48:80:48:22: 0e:d0:1d:8a:80:b1:bc:3f:c2:43:9b:41:19:22:0a: 26:92:de:9a:a6:60:f1:b1:be:6e:48:0f:b5:44:21: 41:2c:e6:76:be:b5:8a:15:94:06:b3:9f:2f:b3:e8: 28:3d:f5:ef:8e:d5:74:0b:0d:19:95:0c:ca:36:42: 88:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EF:62:10:33:35:80:8B:1D:5C:91:8B:F5:3E:61:61:04:34:19:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee721044-6240-36b3-be7a-30a26339031b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:03:da:63:cb:02:b2:9a:5c:4c:ec:09:ee:07:1e:56:23:0c: 56:2b:af:98:57:e0:fd:1c:ea:e4:66:d9:0b:fb:4b:19:14:74: b7:49:34:05:ab:20:1a:dc:a4:b4:09:2e:10:9c:0d:95:dc:59: b4:f5:c4:57:9a:74:1d:b8:3c:38:0d:83:b4:b0:35:20:00:2e: 75:71:73:f0:72:d0:71:e2:51:78:45:bc:0f:f6:2b:cc:54:d5: 65:0f:8d:a8:49:51:e5:02:4a:c8:80:cb:b2:36:b2:e8:f4:b8: 6b:5a:17:c0:c8:ce:b3:64:c3:ee:da:76:6a:b3:14:86:54:b3: a9:05:6e:16:76:bc:8b:8d:6a:b5:10:13:5a:7a:be:c5:2e:0d: da:9e:9e:68:7b:34:ec:0d:ef:f3:3f:13:f0:9b:93:44:63:64: eb:9b:32:e4:09:01:24:53:90:c4:9a:9f:64:e6:cf:3b:36:9d: e1:a6:4c:a1:6b:07:39:5a:5c:07:57:17:f2:ee:cb:f5:fc:a9: 1b:15:9a:72:10:7a:e6:65:db:e0:04:9f:53:be:93:38:d1:48: e3:4b:5e:65:22:f2:7f:b8:18:b6:cf:b7:70:23:2e:77:8b:7b: 22:3f:f4:ce:d5:3d:96:ca:26:81:7c:a1:d6:e8:b1:a8:f1:fc: 23:46:43:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNRVPZQtPE4GkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZDhkYWViNjUtYzFjYy00Y2UxLWI5ZjktNDYwZGUwMDA2YTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoajpykXO9G35yAm3C5VnQadieUlpUtQ+Z82U LGoXz9DgnfREJTBIX3tve0vTxs7n6YsIEQpYjmEgPV4Zi8Iqs05DG1nTnAdsBIqL 4zRHrvdfsQ0sJYpccPtivO3lf9h+Fs4IleM0aIW1LkRNyVIVw0iER9BtuOWbFuYS hVn1+tFP14AOI64hasP7m6pmMILV/0PNicyRZU5wqpOLEiGTBWl7sGV6zcIoLP1n KkiDOBdRaVzUYQ1JQhzVK1gEEUiASCIO0B2KgLG8P8JDm0EZIgomkt6apmDxsb5u SA+1RCFBLOZ2vrWKFZQGs58vs+goPfXvjtV0Cw0ZlQzKNkKI8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvvYhAzNYCLHVyRi/U+YWEENBkHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWU3MjEwNDQtNjI0MC0z NmIzLWJlN2EtMzBhMjYzMzkwMzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQD2mPLArKaXEzsCe4HHlYjDFYrr5hX4P0c6uRm2Qv7SxkUdLdJNAWr IBrcpLQJLhCcDZXcWbT1xFeadB24PDgNg7SwNSAALnVxc/By0HHiUXhFvA/2K8xU 1WUPjahJUeUCSsiAy7I2suj0uGtaF8DIzrNkw+7admqzFIZUs6kFbhZ2vIuNarUQ E1p6vsUuDdqenmh7NOwN7/M/E/Cbk0RjZOubMuQJASRTkMSan2Tmzzs2neGmTKFr BzlaXAdXF/Luy/X8qRsVmnIQeuZl2+AEn1O+kzjRSONLXmUi8n+4GLbPt3AjLneL eyI/9M7VPZbKJoF8odbosajx/CNGQ78= -----END CERTIFICATE-----Generated at Thu Mar 26 14:28:21 2026 by rpki-client