$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2bb689e0-e6c6-340a-87ec-681e6120f5ee.roa File: 2bb689e0-e6c6-340a-87ec-681e6120f5ee.roa (raw, json) Hash identifier: fXgdhJkuccGmS4poENjpwU1hPRyywPyaK9rbDhgp+nw= Subject key identifier: 4D:B1:C6:E7:53:F7:8A:80:60:94:81:E0:13:10:DB:AB:F7:11:8C:EA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DFA7071CC7A9952BB3F681A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2bb689e0-e6c6-340a-87ec-681e6120f5ee.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 32651 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:71:cc:7a:99:52:bb:3f:68:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=a7d7037d-8468-4646-98d7-8aba6b611d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d7:ee:23:ba:03:d4:f0:5f:3b:94:34:1a:d6: 70:2e:6a:d3:70:31:29:b2:ac:b9:2c:93:55:81:f5: 5d:6a:d9:1a:32:b7:b8:d3:65:13:da:46:4d:9b:f0: c0:a8:56:c6:13:59:cb:4f:26:fe:af:4c:ff:9e:de: 1e:0f:9d:86:4b:90:17:c8:52:fc:ac:56:14:87:e4: ca:cf:4b:2e:e5:09:44:2d:54:e8:83:ec:59:d9:25: df:79:5b:6d:a2:32:d8:c8:e4:bd:b3:91:c2:dc:1b: e1:a2:11:5e:5e:69:14:6a:c0:90:4b:e0:cf:2b:62: 9e:fe:bc:72:12:99:77:e9:55:d6:00:c7:61:0a:e4: 8a:49:10:a8:fc:3d:d1:e2:e0:e8:c3:00:11:93:98: 19:c8:66:bc:e1:ef:33:f2:a8:92:1a:16:c0:fc:63: 3d:91:1d:fe:5c:05:f7:a3:93:96:1c:40:c9:aa:9a: 1c:39:59:f1:8e:7b:6b:98:38:e0:a6:b6:34:f2:29: 42:10:ba:df:6d:81:e6:b5:86:a7:f8:c5:19:24:24: 27:27:6a:c4:43:47:93:4d:bc:9c:d0:9e:48:fe:f4: a9:18:69:49:e0:a0:60:ed:d0:6c:13:b3:ee:b8:43: e0:f6:37:c5:b1:fc:91:f3:68:01:55:3e:35:2a:4a: 79:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B1:C6:E7:53:F7:8A:80:60:94:81:E0:13:10:DB:AB:F7:11:8C:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2bb689e0-e6c6-340a-87ec-681e6120f5ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:29:fc:a2:a7:b0:d3:de:e7:d5:6d:f5:c3:b3:72:1a:71:dd: e7:c5:76:6f:30:d1:26:36:0f:77:bc:2b:2f:77:28:07:7f:2e: 07:5a:15:f1:d7:cd:72:4a:95:00:05:6f:77:8a:c3:f8:41:ec: 88:51:81:9c:7f:74:df:8b:e9:e2:5e:d0:e0:91:7f:af:37:be: ab:00:c9:cc:16:39:07:37:d8:64:cf:b4:a3:27:10:27:1f:5a: 90:61:07:42:95:40:de:83:71:a1:70:29:8b:e6:f7:53:19:bc: 62:cd:70:f9:27:36:63:8a:ef:18:86:40:5a:dd:e0:11:72:a0: a8:9b:06:49:1a:62:00:35:87:f2:d8:18:32:93:38:a2:89:07: 68:35:bb:9c:21:8c:4a:be:4b:41:59:c7:6b:b8:b6:42:6d:99: b5:50:9a:a0:3f:7b:8f:61:9c:4d:8b:9d:56:9e:39:03:3b:a6: b4:21:c8:17:cf:f1:b6:37:67:16:44:59:20:26:56:49:89:92: 09:07:4f:6e:c9:ea:bd:8a:13:49:e9:ed:6a:fd:a7:42:08:39: 27:d3:1a:7f:b5:7f:d3:b3:30:22:61:16:67:ff:b2:1f:c4:cd: e1:81:a3:e8:de:f0:2c:18:41:fd:f0:9a:23:7d:95:79:fb:d9: 76:9c:7f:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cHHMeplSuz9oGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk YTdkNzAzN2QtODQ2OC00NjQ2LTk4ZDctOGFiYTZiNjExZDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NfuI7oD1PBfO5Q0GtZwLmrTcDEpsqy5LJNV gfVdatkaMre402UT2kZNm/DAqFbGE1nLTyb+r0z/nt4eD52GS5AXyFL8rFYUh+TK z0su5QlELVTog+xZ2SXfeVttojLYyOS9s5HC3BvhohFeXmkUasCQS+DPK2Ke/rxy Epl36VXWAMdhCuSKSRCo/D3R4uDowwARk5gZyGa84e8z8qiSGhbA/GM9kR3+XAX3 o5OWHEDJqpocOVnxjntrmDjgprY08ilCELrfbYHmtYan+MUZJCQnJ2rEQ0eTTbyc 0J5I/vSpGGlJ4KBg7dBsE7PuuEPg9jfFsfyR82gBVT41Kkp5wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2xxudT94qAYJSB4BMQ26v3EYzqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmJiNjg5ZTAtZTZjNi0z NDBhLTg3ZWMtNjgxZTYxMjBmNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcp/KKnsNPe59Vt9cOzchpx3efFdm8w0SY2D3e8Ky93KAd/LgdaFfHX zXJKlQAFb3eKw/hB7IhRgZx/dN+L6eJe0OCRf683vqsAycwWOQc32GTPtKMnECcf WpBhB0KVQN6DcaFwKYvm91MZvGLNcPknNmOK7xiGQFrd4BFyoKibBkkaYgA1h/LY GDKTOKKJB2g1u5whjEq+S0FZx2u4tkJtmbVQmqA/e49hnE2LnVaeOQM7prQhyBfP 8bY3ZxZEWSAmVkmJkgkHT27J6r2KE0np7Wr9p0IIOSfTGn+1f9OzMCJhFmf/sh/E zeGBo+je8CwYQf3wmiN9lXn72Xacf0c= -----END CERTIFICATE-----Generated at Sat Jun 13 13:10:20 2026 by rpki-client