$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa File: 2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa (raw, json) Hash identifier: EQEFJciVixUbFV0fE4IgvLo9746HMQdsrJd4FkU+ufs= Subject key identifier: 69:38:55:3F:83:7D:53:B2:5D:76:A0:55:18:B0:42:79:35:45:C6:78 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DFA70A22BB4ACB1865A052040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 397198 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:a2:2b:b4:ac:b1:86:5a:05:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=57c6dbd2-c16b-459b-a526-9e2db2fa961b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ac:fb:0e:88:74:ff:68:68:b5:41:9a:ce:96: f7:71:55:02:ab:68:55:0d:89:88:30:5d:b4:20:d2: 6b:3d:78:5c:61:1b:b6:ae:a3:b7:e5:d2:6c:f4:56: db:0c:87:61:96:f6:88:a9:eb:dc:ae:13:11:8e:41: bd:4b:72:14:42:6b:3f:ec:10:a5:cc:89:18:2b:eb: 96:ae:6f:18:fb:32:25:82:7e:5c:09:29:eb:ab:cd: 23:6a:09:58:1b:dc:c4:5b:f0:6a:e2:22:da:54:2d: d2:4a:69:7e:66:e4:ec:98:f0:00:91:ce:ce:c0:e8: fb:b2:b7:0f:43:18:ea:1e:05:2c:63:0c:52:78:b6: 51:fb:2a:5e:07:f0:f5:9e:00:a6:b1:f0:a0:cf:fb: 8d:e8:79:a3:c2:d5:01:cc:31:eb:8c:86:2d:52:b3: 42:f2:f0:17:49:00:76:44:66:4f:65:48:61:ed:8a: 76:24:ae:87:1c:2e:d5:1d:56:6a:01:83:0f:bd:42: f9:47:c0:f6:11:f7:e6:d5:76:a8:cd:e9:ae:17:af: 5e:f2:97:e3:62:5c:c8:d8:88:5e:f5:d0:56:1c:3c: 6f:91:98:b5:30:6c:be:d1:94:22:1e:c5:16:8a:b5: b5:47:79:1f:2f:e7:9e:cd:03:66:11:62:37:fd:d0: 59:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:38:55:3F:83:7D:53:B2:5D:76:A0:55:18:B0:42:79:35:45:C6:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:4c:df:f9:c5:dd:de:8f:86:2d:45:b3:7b:3a:5d:17:ad:90: 63:fb:fa:85:82:9e:dd:0f:f9:99:95:6e:5d:d8:9a:9b:fe:c5: 2b:65:96:a4:df:ac:d5:f2:3f:a7:32:46:0c:cd:81:4e:7b:63: b5:b8:a4:9f:f7:3c:94:3b:e4:c0:5a:b1:31:8a:6e:11:10:0a: 12:cd:5f:9b:d3:57:b9:ef:02:68:bb:12:10:66:e6:23:f9:09: df:84:78:ff:49:8f:67:3b:16:6b:07:19:ed:22:66:f9:3a:ca: 48:96:64:87:0c:54:15:3c:53:85:dd:2a:88:b5:e4:22:af:41: e2:aa:bf:48:cb:14:e9:ac:f9:82:02:bf:1f:13:c2:0d:a2:74: a1:d6:7a:f2:58:39:39:3f:ca:8b:04:0a:39:e0:90:f7:75:90: 7e:f4:f6:41:f3:40:9f:c1:1f:d6:af:a5:6a:5b:a0:23:8f:c8: d4:79:1a:01:06:50:f2:dc:a2:36:20:2d:1a:92:06:3f:8f:ba: 93:aa:b1:4e:b4:15:0b:df:6b:32:2d:c3:d8:35:97:44:a8:22: b5:db:d8:87:b7:71:76:17:e8:b9:4c:6f:64:74:bb:0d:2d:29: a9:9e:ad:15:57:36:f9:6c:a2:3d:ed:e5:c2:0d:d2:8f:55:92: 2a:ef:0f:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cKIrtKyxhloFIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk NTdjNmRiZDItYzE2Yi00NTliLWE1MjYtOWUyZGIyZmE5NjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqz7Doh0/2hotUGazpb3cVUCq2hVDYmIMF20 INJrPXhcYRu2rqO35dJs9FbbDIdhlvaIqevcrhMRjkG9S3IUQms/7BClzIkYK+uW rm8Y+zIlgn5cCSnrq80jaglYG9zEW/Bq4iLaVC3SSml+ZuTsmPAAkc7OwOj7srcP QxjqHgUsYwxSeLZR+ypeB/D1ngCmsfCgz/uN6HmjwtUBzDHrjIYtUrNC8vAXSQB2 RGZPZUhh7Yp2JK6HHC7VHVZqAYMPvUL5R8D2Effm1XaozemuF69e8pfjYlzI2Ihe 9dBWHDxvkZi1MGy+0ZQiHsUWirW1R3kfL+eezQNmEWI3/dBZbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGk4VT+DfVOyXXagVRiwQnk1RcZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjQyN2FhN2MtOWNjNS0z YjA1LWEzZjEtM2M0NjZhN2ZlODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9M3/nF3d6Phi1Fs3s6XRetkGP7+oWCnt0P+ZmVbl3Ympv+xStllqTf rNXyP6cyRgzNgU57Y7W4pJ/3PJQ75MBasTGKbhEQChLNX5vTV7nvAmi7EhBm5iP5 Cd+EeP9Jj2c7FmsHGe0iZvk6ykiWZIcMVBU8U4XdKoi15CKvQeKqv0jLFOms+YIC vx8Twg2idKHWevJYOTk/yosECjngkPd1kH709kHzQJ/BH9avpWpboCOPyNR5GgEG UPLcojYgLRqSBj+PupOqsU60FQvfazItw9g1l0SoIrXb2Ie3cXYX6LlMb2R0uw0t KamerRVXNvlsoj3t5cIN0o9VkirvD9g= -----END CERTIFICATE-----Generated at Sat Jun 13 14:29:22 2026 by rpki-client