$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b069af5-8b25-354c-8d61-259a5210c9bd.roa File: 3b069af5-8b25-354c-8d61-259a5210c9bd.roa (raw, json) Hash identifier: cuTKEQEI38sNUXsJjCYyAfcQZGhkxIW0iQk6mG66wRk= Subject key identifier: 88:D8:E6:F2:37:2F:09:D5:FF:3F:D3:AC:8A:72:6C:C1:63:4F:68:6B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DFA70A657A59A313B70A40E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b069af5-8b25-354c-8d61-259a5210c9bd.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 397199 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:a6:57:a5:9a:31:3b:70:a4:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=2c803360-3803-48c2-ab90-0f6cfabf0ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:26:bd:db:f2:82:90:12:e5:4a:0a:04:d4:0f: 78:c0:bc:19:4f:61:1d:c1:71:91:e1:ec:ad:18:43: 08:e4:5b:54:69:fb:19:9f:4a:75:3d:6e:19:17:68: da:bf:a8:c7:3d:10:44:2d:31:41:24:81:ca:5a:2b: 7f:b2:85:b8:90:f6:ba:65:21:0a:d2:3f:e7:de:80: 12:c8:e2:64:b9:b6:c7:39:61:c6:2d:31:0e:45:1e: fb:37:a2:b2:26:f9:8e:56:f8:b9:67:a2:5e:bc:83: 06:97:7f:ef:fb:c5:c3:62:8f:9a:5c:ad:f8:0f:08: 5a:28:61:fa:0d:11:13:b2:b4:85:94:64:a0:22:e8: cb:f4:66:92:76:18:2b:de:87:08:84:cb:48:aa:d4: 8a:4f:27:3d:5c:85:02:b4:ab:d6:85:59:7a:12:8a: e5:bd:a3:b8:78:2c:3f:8a:d7:96:ae:8d:d5:7d:da: 2b:e3:8c:3f:99:0b:8e:7d:06:50:38:8a:ce:7e:d0: 30:b3:1e:cc:8b:93:67:61:5e:32:36:60:6f:66:4a: 20:f3:d1:62:4f:23:0c:b4:df:93:96:cc:78:9a:8d: 21:ee:0a:cc:1f:4d:91:6f:c6:e3:04:5c:aa:74:85: 11:d2:7a:15:2b:91:7c:6c:04:00:bc:5f:a3:36:f3: 0c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D8:E6:F2:37:2F:09:D5:FF:3F:D3:AC:8A:72:6C:C1:63:4F:68:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b069af5-8b25-354c-8d61-259a5210c9bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:28:19:6d:c6:d6:84:47:a8:c9:97:27:ca:f6:c9:df:7f:99: 93:ef:9f:3c:ca:25:8c:85:32:e4:1a:e4:7c:57:49:0f:58:f0: 69:4c:d1:c9:b5:5e:44:42:65:84:81:bf:93:18:de:eb:9a:32: 2c:87:5d:b5:7f:ee:4d:ad:d7:df:6a:5f:7a:e2:4d:74:71:6e: 83:57:b8:db:06:89:c8:d0:cd:7f:8d:b0:43:05:05:24:b6:df: f2:f0:56:44:15:be:41:5f:5d:b3:6e:2c:04:f9:04:ac:fc:9f: aa:a1:5f:da:1c:2d:46:44:72:67:3c:3f:3b:2b:6e:74:cf:31: e9:dd:b7:46:de:95:73:32:91:4d:6a:9f:ed:57:e4:d9:5c:e4: 5e:22:94:f5:b5:48:19:99:cc:f1:26:03:04:f9:11:f9:cc:e8: 7c:6d:3f:db:61:5f:43:4b:9e:1e:e6:34:4e:53:c6:85:e9:6e: a5:59:13:80:a5:9b:70:e3:01:12:5b:d3:61:1f:4c:b8:55:3f: 7c:e7:99:27:64:24:9d:54:74:3a:82:9b:0c:ca:95:b4:23:79: cd:7e:c1:56:e0:bd:02:1b:54:5d:47:a1:a8:79:67:fd:03:5c: 04:77:b6:fd:2a:01:19:9b:c8:d2:6e:0d:1f:20:80:27:c1:7d: ee:94:c2:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cKZXpZoxO3CkDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk MmM4MDMzNjAtMzgwMy00OGMyLWFiOTAtMGY2Y2ZhYmYwYmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCa92/KCkBLlSgoE1A94wLwZT2EdwXGR4eyt GEMI5FtUafsZn0p1PW4ZF2jav6jHPRBELTFBJIHKWit/soW4kPa6ZSEK0j/n3oAS yOJkubbHOWHGLTEORR77N6KyJvmOVvi5Z6JevIMGl3/v+8XDYo+aXK34DwhaKGH6 DRETsrSFlGSgIujL9GaSdhgr3ocIhMtIqtSKTyc9XIUCtKvWhVl6EorlvaO4eCw/ iteWro3Vfdor44w/mQuOfQZQOIrOftAwsx7Mi5NnYV4yNmBvZkog89FiTyMMtN+T lsx4mo0h7grMH02Rb8bjBFyqdIUR0noVK5F8bAQAvF+jNvMMhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjY5vI3LwnV/z/TrIpybMFjT2hrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2IwNjlhZjUtOGIyNS0z NTRjLThkNjEtMjU5YTUyMTBjOWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8oGW3G1oRHqMmXJ8r2yd9/mZPvnzzKJYyFMuQa5HxXSQ9Y8GlM0cm1 XkRCZYSBv5MY3uuaMiyHXbV/7k2t199qX3riTXRxboNXuNsGicjQzX+NsEMFBSS2 3/LwVkQVvkFfXbNuLAT5BKz8n6qhX9ocLUZEcmc8PzsrbnTPMendt0belXMykU1q n+1X5Nlc5F4ilPW1SBmZzPEmAwT5EfnM6HxtP9thX0NLnh7mNE5TxoXpbqVZE4Cl m3DjARJb02EfTLhVP3znmSdkJJ1UdDqCmwzKlbQjec1+wVbgvQIbVF1Hoah5Z/0D XAR3tv0qARmbyNJuDR8ggCfBfe6UwtY= -----END CERTIFICATE-----Generated at Sat Jun 13 15:38:25 2026 by rpki-client