$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc728ca5-fe4f-3879-b3ab-f300a5f0e3a2.roa File: fc728ca5-fe4f-3879-b3ab-f300a5f0e3a2.roa (raw, json) Hash identifier: +6mDWnCoEvn5efO92SPeLl4pea6Gy+Ct+A1mE/CsyL0= Subject key identifier: DC:75:A3:51:52:88:C4:3F:7D:33:F6:BE:76:43:F4:91:FA:37:51:72 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4B15334B866709AF422C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc728ca5-fe4f-3879-b3ab-f300a5f0e3a2.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396573 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:b1:53:34:b8:66:70:9a:f4:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=54d5c437-ec4e-4fe9-86ad-50fdcb489185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:19:ca:e8:ee:27:79:bb:27:e4:01:0c:8c:4f: fb:48:5a:b0:4e:36:6c:98:cf:4e:7b:4f:ed:bb:29: ad:fb:c5:33:79:20:14:9c:3d:54:f2:a7:7b:bf:14: 16:7f:6a:94:2f:dc:08:e8:a5:9a:16:4d:6c:74:ee: 24:36:b6:cd:02:73:89:ea:63:a4:e5:2b:01:2f:3e: 11:ad:78:aa:c1:36:27:0d:cc:5c:ec:27:b8:4d:30: a2:34:a3:fc:81:4b:37:dc:23:21:10:eb:b5:e8:b1: f5:8e:d3:e2:5d:fb:dc:9d:1f:c4:d3:5b:4b:1c:b4: 06:c5:9c:80:35:c2:d2:40:69:02:85:9a:38:91:53: 62:a8:7f:f0:4a:e4:1f:24:0c:67:f3:c0:c1:cc:55: 84:e9:bd:09:b7:a3:f4:f5:ea:e9:2d:9d:64:c8:eb: 1e:df:e7:dc:32:26:3d:13:b5:b4:70:e6:85:45:20: be:a8:7c:fa:e8:67:03:de:b2:ac:07:89:9a:83:38: c8:b3:f5:ef:af:01:6e:07:d0:c8:f0:bc:b9:58:db: bb:0f:72:82:6c:32:39:79:13:82:0c:d9:f1:78:b4: d6:d3:55:01:b4:18:e7:13:7d:34:9b:33:c2:13:76: 4d:81:49:1f:4e:b6:b5:75:9e:fe:5f:1c:4c:88:da: 7f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:75:A3:51:52:88:C4:3F:7D:33:F6:BE:76:43:F4:91:FA:37:51:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc728ca5-fe4f-3879-b3ab-f300a5f0e3a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:56:f7:54:4f:bb:8e:3a:af:6e:42:2f:44:d9:ea:58:61:98: 44:e1:2c:77:d2:3b:0c:79:5c:fd:dc:f2:d4:3f:b5:4e:cc:08: ee:6a:0e:77:b8:32:7b:c6:7b:48:ae:0e:ef:7c:74:b9:5b:87: 16:70:90:a0:88:07:af:62:be:f5:84:3f:cf:b0:e4:eb:27:d9: e7:e4:77:17:64:b6:e8:41:4b:30:95:f7:94:d9:3f:d6:7d:05: 67:87:ff:b0:28:ae:9c:f1:ec:7d:66:fb:24:11:22:9f:bc:5b: dd:90:aa:ca:dc:7c:fd:99:e3:d6:55:a8:b1:a2:e4:f6:6c:28: 96:5a:4e:da:4b:c4:7e:eb:6e:2e:1b:f6:59:f4:3c:24:3d:7a: 3d:91:64:e0:0b:ae:77:ed:25:18:6f:18:de:fe:3a:11:4a:36: 93:2a:b9:0c:d7:eb:fc:48:b1:5d:75:83:d9:f2:2e:57:4f:8d: 34:98:d6:38:af:08:37:24:58:53:81:15:69:7c:2b:f9:c2:63: b8:b6:b0:7f:98:6c:1b:f5:8f:15:44:cd:2f:34:28:e2:68:50: 78:bc:a4:47:97:b2:0f:43:20:1e:06:15:30:ba:77:49:0c:da: ee:10:be:2d:05:4d:c3:43:9f:3a:db:08:c0:97:72:26:f3:d8: 86:2e:c8:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtLFTNLhmcJr0IsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NTRkNWM0MzctZWM0ZS00ZmU5LTg2YWQtNTBmZGNiNDg5MTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBnK6O4nebsn5AEMjE/7SFqwTjZsmM9Oe0/t uymt+8UzeSAUnD1U8qd7vxQWf2qUL9wI6KWaFk1sdO4kNrbNAnOJ6mOk5SsBLz4R rXiqwTYnDcxc7Ce4TTCiNKP8gUs33CMhEOu16LH1jtPiXfvcnR/E01tLHLQGxZyA NcLSQGkChZo4kVNiqH/wSuQfJAxn88DBzFWE6b0Jt6P09erpLZ1kyOse3+fcMiY9 E7W0cOaFRSC+qHz66GcD3rKsB4magzjIs/XvrwFuB9DI8Ly5WNu7D3KCbDI5eROC DNnxeLTW01UBtBjnE300mzPCE3ZNgUkfTra1dZ7+XxxMiNp/fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNx1o1FSiMQ/fTP2vnZD9JH6N1FyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmM3MjhjYTUtZmU0Zi0z ODc5LWIzYWItZjMwMGE1ZjBlM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9W91RPu446r25CL0TZ6lhhmEThLHfSOwx5XP3c8tQ/tU7MCO5qDne4 MnvGe0iuDu98dLlbhxZwkKCIB69ivvWEP8+w5Osn2efkdxdktuhBSzCV95TZP9Z9 BWeH/7Aorpzx7H1m+yQRIp+8W92QqsrcfP2Z49ZVqLGi5PZsKJZaTtpLxH7rbi4b 9ln0PCQ9ej2RZOALrnftJRhvGN7+OhFKNpMquQzX6/xIsV11g9nyLldPjTSY1jiv CDckWFOBFWl8K/nCY7i2sH+YbBv1jxVEzS80KOJoUHi8pEeXsg9DIB4GFTC6d0kM 2u4Qvi0FTcNDnzrbCMCXcibz2IYuyM0= -----END CERTIFICATE-----Generated at Thu Mar 26 14:17:54 2026 by rpki-client