$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7e514f0-bc85-39e3-9e73-11ebba7a6491.roa File: f7e514f0-bc85-39e3-9e73-11ebba7a6491.roa (raw, json) Hash identifier: BUM0r2ICQ1XPbY3z280SDe3iqvCEtxP9PKaxJLK7GrM= Subject key identifier: 97:30:EA:C4:13:FC:11:28:C4:31:88:7F:2D:84:5D:7C:0E:AD:01:47 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4B000E850AA694E4D23C8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7e514f0-bc85-39e3-9e73-11ebba7a6491.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396572 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:b0:00:e8:50:aa:69:4e:4d:23:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=7749e0a0-43f2-44cd-a181-18b7f2026f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2e:82:ec:5d:3e:f3:30:89:0e:98:13:91:b3: 8d:5b:5d:b4:2d:8b:de:ce:50:93:74:fe:7e:93:2e: b8:af:e4:80:52:ff:eb:27:59:45:96:0f:54:36:6a: 9c:eb:09:61:75:6f:3f:21:1a:5a:f6:6d:e9:e5:93: a9:4f:5a:c7:54:a2:97:84:d8:f4:53:5a:b1:73:5f: de:c5:37:de:ff:b0:01:56:14:73:3d:a8:c1:c4:52: e1:d0:82:8f:a8:91:e0:7e:c8:0c:11:d3:94:84:5e: 92:9f:40:67:ec:a7:ee:c0:43:6d:be:9e:b6:4f:29: 8f:03:62:1e:a4:69:76:a2:7f:03:80:1a:5f:48:c7: a0:67:e8:01:0f:a1:47:12:06:78:4a:0a:cc:bf:df: e0:28:aa:68:18:04:07:9e:12:8a:1a:f3:a4:38:e5: fd:ee:b1:d6:5d:ec:ae:a0:ea:ef:3f:c7:71:06:23: 0c:f8:2f:1e:d1:06:e4:ce:56:2b:bb:88:83:b6:a8: ad:ef:47:5c:4d:0c:7a:67:ca:48:c5:a3:ac:f9:5a: c2:2b:60:de:66:6e:49:cb:21:f2:74:15:1f:46:3a: 2a:66:38:77:bb:82:f1:66:d2:bc:d2:91:95:67:e1: 96:4f:d7:48:c2:9d:fe:38:a3:68:f3:95:77:e7:c2: f9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:30:EA:C4:13:FC:11:28:C4:31:88:7F:2D:84:5D:7C:0E:AD:01:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7e514f0-bc85-39e3-9e73-11ebba7a6491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:4a:d5:e8:56:58:cb:c8:57:9e:00:d9:44:c6:ef:bc:ad:a5: 1f:87:7a:9f:27:5c:fc:9e:ea:46:1e:11:88:2b:36:6e:31:a0: 71:67:e8:38:19:31:7d:17:e8:14:c9:00:a7:33:46:c5:cc:1e: f7:f5:0d:24:32:bd:81:e2:49:c4:f3:cc:d8:d9:27:58:d9:56: 88:cb:1d:c2:6b:5a:bf:cd:f3:30:88:8a:78:ec:dc:14:73:6f: 2b:fd:f9:74:2a:7b:eb:8b:1a:d0:ba:2c:b7:2f:5f:a5:a4:9b: 61:bb:02:00:10:b0:14:bc:69:44:17:29:15:4f:0d:f2:7e:e4: ce:13:63:76:59:f5:76:ea:0c:6e:bd:83:90:d5:1c:23:44:99: 8f:96:1d:fe:ad:11:fe:3f:0d:63:ad:21:e5:bf:c6:8a:ff:0e: 18:14:28:8b:78:da:22:43:cc:02:14:ac:2f:8d:a0:2e:fb:ee: 14:07:37:b1:3a:1d:1d:42:af:ab:10:11:ef:2b:de:57:6e:87: 82:dc:92:74:40:4d:2d:d8:16:87:e2:65:3c:4a:1e:a2:e2:86: 93:1e:af:31:56:be:9f:70:c9:0b:76:fd:01:b0:4b:25:c0:31: 59:41:e1:af:5b:da:ce:36:a1:3b:03:2b:37:bc:fe:3c:7a:45: b3:c1:1f:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtLAA6FCqaU5NI8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk Nzc0OWUwYTAtNDNmMi00NGNkLWExODEtMThiN2YyMDI2ZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC6C7F0+8zCJDpgTkbONW120LYvezlCTdP5+ ky64r+SAUv/rJ1lFlg9UNmqc6wlhdW8/IRpa9m3p5ZOpT1rHVKKXhNj0U1qxc1/e xTfe/7ABVhRzPajBxFLh0IKPqJHgfsgMEdOUhF6Sn0Bn7KfuwENtvp62TymPA2Ie pGl2on8DgBpfSMegZ+gBD6FHEgZ4SgrMv9/gKKpoGAQHnhKKGvOkOOX97rHWXeyu oOrvP8dxBiMM+C8e0QbkzlYru4iDtqit70dcTQx6Z8pIxaOs+VrCK2DeZm5JyyHy dBUfRjoqZjh3u4LxZtK80pGVZ+GWT9dIwp3+OKNo85V358L5JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcw6sQT/BEoxDGIfy2EXXwOrQFHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjdlNTE0ZjAtYmM4NS0z OWUzLTllNzMtMTFlYmJhN2E2NDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdK1ehWWMvIV54A2UTG77ytpR+Hep8nXPye6kYeEYgrNm4xoHFn6DgZ MX0X6BTJAKczRsXMHvf1DSQyvYHiScTzzNjZJ1jZVojLHcJrWr/N8zCIinjs3BRz byv9+XQqe+uLGtC6LLcvX6Wkm2G7AgAQsBS8aUQXKRVPDfJ+5M4TY3ZZ9XbqDG69 g5DVHCNEmY+WHf6tEf4/DWOtIeW/xor/DhgUKIt42iJDzAIUrC+NoC777hQHN7E6 HR1Cr6sQEe8r3lduh4LcknRATS3YFofiZTxKHqLihpMerzFWvp9wyQt2/QGwSyXA MVlB4a9b2s42oTsDKze8/jx6RbPBHxg= -----END CERTIFICATE-----Generated at Thu Mar 26 18:47:30 2026 by rpki-client