$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5ca52584-7b11-32cc-94d7-eac837c5a2af.roa File: 5ca52584-7b11-32cc-94d7-eac837c5a2af.roa (raw, json) Hash identifier: /E9LBdO9oiJ4mXKVnNjfTRvQyXyWBVqQ3lJKQOAUoP0= Subject key identifier: 18:63:4A:7E:AC:34:A2:96:40:33:48:1B:5E:A5:EA:FA:7E:06:1E:1C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DFA70705E0D2BC616A2BDF380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5ca52584-7b11-32cc-94d7-eac837c5a2af.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 396604 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:70:5e:0d:2b:c6:16:a2:bd:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=e10afb13-f0ce-47ec-8058-45fb632b30a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:01:95:55:ff:4d:f9:b1:f2:0b:84:aa:69:9a: c4:c2:91:82:84:eb:a2:50:6c:5b:1d:0f:2a:0d:1c: 00:ac:a5:64:57:f2:60:a6:a4:7b:a6:01:f2:47:64: 12:a8:84:c7:5d:29:c7:60:ce:84:88:1e:3c:8d:47: 97:3d:53:b5:6d:5a:bd:f4:50:8e:ad:3f:da:3b:53: 11:92:51:cc:22:d9:4d:f0:5a:1b:6c:ca:91:e8:c6: aa:86:e9:3a:f2:f0:2f:3e:bd:20:10:f3:06:e7:39: c5:1f:24:88:42:8d:72:ec:1a:78:ea:b5:81:f6:58: 12:63:cd:4e:cc:5c:c3:d6:a2:c9:08:a6:c2:63:90: a3:08:41:03:11:53:bd:37:ff:2d:7d:1b:22:da:3e: c6:d6:b3:c1:59:86:53:40:36:ff:40:90:4a:32:47: 1f:29:ce:31:9a:7f:2f:00:a0:66:5a:e8:97:4e:41: d1:86:b0:bd:cb:02:a3:3b:25:ca:4d:51:3d:ff:06: e6:8d:f6:bb:92:80:96:48:e4:09:b4:7c:24:09:f6: be:cf:60:f3:35:a5:16:91:65:ea:13:b5:b5:ef:2d: fd:fb:7d:75:27:d8:ac:a5:60:2f:a2:d8:52:62:90: 7f:76:82:7d:0a:5c:65:77:a9:ea:14:1e:05:f5:8f: 21:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:63:4A:7E:AC:34:A2:96:40:33:48:1B:5E:A5:EA:FA:7E:06:1E:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5ca52584-7b11-32cc-94d7-eac837c5a2af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:02:49:cc:dd:8e:1f:01:eb:7e:64:0b:f8:c0:1f:24:a0:fb: 89:50:be:51:33:74:34:14:2d:3c:ca:8e:47:31:5f:fd:4d:f9: e2:22:f2:b3:38:da:1d:bd:1d:a6:17:52:e4:b6:a2:4b:eb:ef: 06:c4:15:cb:09:e3:83:b5:01:3b:b0:6e:b6:e7:30:a3:da:ba: 03:e2:cc:f6:e5:3d:62:17:c5:ea:dc:c1:c2:03:f7:43:5f:cf: cd:22:17:82:ee:b5:c8:8b:b0:93:c8:2d:db:d4:df:39:0d:84: 45:0f:cd:e5:01:88:fc:50:4c:46:b5:ec:b3:96:aa:18:d3:b7: 40:45:84:ab:12:30:45:4d:00:2b:01:65:01:e3:e5:5c:35:2a: d1:61:82:07:2d:49:b2:c8:75:1b:8c:37:1b:0d:8c:bf:ae:d7: a1:07:14:d4:2e:d7:3e:7b:ae:03:8b:c2:3a:9d:70:d7:9b:02: fc:08:a6:ea:1f:0d:42:33:c2:14:8b:06:2c:4e:d4:03:d1:dd: a0:72:76:a4:d8:fd:8c:43:66:d3:43:91:36:5a:5c:3b:ae:ac: 9a:9a:72:f9:73:95:9a:fc:5f:81:3b:26:37:d4:c0:ea:59:53: ea:fa:c0:c9:d5:28:d7:37:d3:11:8e:11:4a:cd:4c:0c:24:d9: 0f:b4:d1:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cHBeDSvGFqK984AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk ZTEwYWZiMTMtZjBjZS00N2VjLTgwNTgtNDVmYjYzMmIzMGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgGVVf9N+bHyC4SqaZrEwpGChOuiUGxbHQ8q DRwArKVkV/JgpqR7pgHyR2QSqITHXSnHYM6EiB48jUeXPVO1bVq99FCOrT/aO1MR klHMItlN8FobbMqR6Maqhuk68vAvPr0gEPMG5znFHySIQo1y7Bp46rWB9lgSY81O zFzD1qLJCKbCY5CjCEEDEVO9N/8tfRsi2j7G1rPBWYZTQDb/QJBKMkcfKc4xmn8v AKBmWuiXTkHRhrC9ywKjOyXKTVE9/wbmjfa7koCWSOQJtHwkCfa+z2DzNaUWkWXq E7W17y39+311J9ispWAvothSYpB/doJ9Clxld6nqFB4F9Y8h6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhjSn6sNKKWQDNIG16l6vp+Bh4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWNhNTI1ODQtN2IxMS0z MmNjLTk0ZDctZWFjODM3YzVhMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADICSczdjh8B635kC/jAHySg+4lQvlEzdDQULTzKjkcxX/1N+eIi8rM4 2h29HaYXUuS2okvr7wbEFcsJ44O1ATuwbrbnMKPaugPizPblPWIXxercwcID90Nf z80iF4LutciLsJPILdvU3zkNhEUPzeUBiPxQTEa17LOWqhjTt0BFhKsSMEVNACsB ZQHj5Vw1KtFhggctSbLIdRuMNxsNjL+u16EHFNQu1z57rgOLwjqdcNebAvwIpuof DUIzwhSLBixO1APR3aBydqTY/YxDZtNDkTZaXDuurJqacvlzlZr8X4E7JjfUwOpZ U+r6wMnVKNc30xGOEUrNTAwk2Q+00cQ= -----END CERTIFICATE-----Generated at Sat Jun 13 13:14:21 2026 by rpki-client