$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/659f45f4-1930-35f3-bd28-8eec0ba978f8.roa File: 659f45f4-1930-35f3-bd28-8eec0ba978f8.roa (raw, json) Hash identifier: YuPSJGA6BAjp97+CWtxeTeHDLjKZPAvuNcVJCqcS8RE= Subject key identifier: F5:43:18:B9:AC:50:01:B7:D6:9F:BA:64:C4:54:2B:DF:D4:DD:38:1C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DFA70A591C1C0067D26CC2AD0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/659f45f4-1930-35f3-bd28-8eec0ba978f8.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 397202 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:a5:91:c1:c0:06:7d:26:cc:2a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=9cdbb4da-d9cb-4182-9779-4097cd60e3e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:15:c1:84:8d:5c:b5:c3:14:90:57:97:59:1f: 8d:47:66:6f:25:cb:6b:c1:1d:26:7d:20:21:38:14: a5:e7:fc:52:ed:88:b6:65:32:4d:57:69:0f:be:6a: ab:fc:33:29:02:9d:3f:d0:08:a1:bf:25:ca:43:c9: ef:62:01:50:c1:f7:4f:5d:36:4c:72:0c:a4:7e:97: ee:bf:17:0f:5b:11:82:07:1e:da:b7:09:db:a3:55: a2:f8:b1:5b:d0:5e:58:cf:2e:1b:71:bc:20:61:96: c5:92:90:4e:80:87:3f:fb:bc:80:d8:84:ac:26:0f: 2f:c3:18:83:62:47:75:91:c3:26:0a:a9:fe:f9:f2: fb:99:f0:21:aa:ef:9e:88:a0:1a:32:68:82:9f:20: 8f:b5:00:bb:78:1f:84:ba:b2:5d:46:7e:d8:f3:fa: e1:ec:b5:30:06:9a:61:b4:a4:24:95:3b:18:63:e8: e8:e0:13:52:32:67:57:36:df:06:91:2a:db:dc:d5: b1:ee:56:78:33:d4:0f:35:f0:be:cd:85:4a:09:05: a2:fb:c7:ae:c3:1b:c5:cd:7c:de:06:f7:4a:37:c5: d0:a8:cf:fc:10:51:c4:95:a4:f8:ee:74:a3:d3:e4: 90:46:cf:77:99:02:a3:3f:82:e1:ee:95:58:c6:2d: d9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:43:18:B9:AC:50:01:B7:D6:9F:BA:64:C4:54:2B:DF:D4:DD:38:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/659f45f4-1930-35f3-bd28-8eec0ba978f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:72:99:08:e8:d3:78:bf:fa:16:b1:4f:15:c3:ea:0a:1c:04: cb:f2:c4:32:3f:51:af:ac:52:65:3d:ba:5e:e9:9a:1d:b0:8c: 10:4a:b1:4b:bf:c9:52:53:a2:8d:89:cc:94:ef:29:73:6b:79: 31:26:0e:b5:ed:e3:a6:7b:60:e3:a5:3e:99:4f:92:87:db:f8: f1:0f:0c:f9:a8:98:8a:ea:63:9d:ff:fd:6e:dc:77:73:5c:e5: 18:30:7a:01:ab:54:48:ff:16:e4:db:b9:ea:42:23:82:db:ef: 3f:00:3a:43:13:2b:35:f7:eb:8e:9a:21:51:0c:5f:74:9f:98: 34:ac:12:2c:df:a2:ee:86:13:7e:40:57:16:56:9e:79:e1:97: a9:19:90:a9:76:e0:73:d7:29:fc:b1:b6:f1:6e:4c:b4:05:e4: f0:f1:b4:a0:42:5e:6d:ad:3f:40:10:ec:1a:34:ec:d3:d1:08: b1:77:65:b3:37:a7:4c:fd:d7:6d:07:ca:37:37:ce:27:ab:d8: 3f:2c:07:d9:d6:07:fa:2e:99:38:51:5b:aa:ad:7f:9d:90:cc: 9c:b0:71:2b:8d:f6:2c:e0:d5:cf:fe:a5:27:0b:1f:96:a9:57: 1e:19:ae:5f:7c:27:f0:7d:fa:04:27:77:f2:81:08:4f:5b:45: 21:f4:bc:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cKWRwcAGfSbMKtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk OWNkYmI0ZGEtZDljYi00MTgyLTk3NzktNDA5N2NkNjBlM2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBXBhI1ctcMUkFeXWR+NR2ZvJctrwR0mfSAh OBSl5/xS7Yi2ZTJNV2kPvmqr/DMpAp0/0AihvyXKQ8nvYgFQwfdPXTZMcgykfpfu vxcPWxGCBx7atwnbo1Wi+LFb0F5Yzy4bcbwgYZbFkpBOgIc/+7yA2ISsJg8vwxiD Ykd1kcMmCqn++fL7mfAhqu+eiKAaMmiCnyCPtQC7eB+EurJdRn7Y8/rh7LUwBpph tKQklTsYY+jo4BNSMmdXNt8GkSrb3NWx7lZ4M9QPNfC+zYVKCQWi+8euwxvFzXze BvdKN8XQqM/8EFHElaT47nSj0+SQRs93mQKjP4Lh7pVYxi3ZywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVDGLmsUAG31p+6ZMRUK9/U3TgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjU5ZjQ1ZjQtMTkzMC0z NWYzLWJkMjgtOGVlYzBiYTk3OGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFymQjo03i/+haxTxXD6gocBMvyxDI/Ua+sUmU9ul7pmh2wjBBKsUu/ yVJToo2JzJTvKXNreTEmDrXt46Z7YOOlPplPkofb+PEPDPmomIrqY53//W7cd3Nc 5RgwegGrVEj/FuTbuepCI4Lb7z8AOkMTKzX3646aIVEMX3SfmDSsEizfou6GE35A VxZWnnnhl6kZkKl24HPXKfyxtvFuTLQF5PDxtKBCXm2tP0AQ7Bo07NPRCLF3ZbM3 p0z9120Hyjc3zier2D8sB9nWB/oumThRW6qtf52QzJywcSuN9izg1c/+pScLH5ap Vx4Zrl98J/B9+gQnd/KBCE9bRSH0vLg= -----END CERTIFICATE-----Generated at Sat Jun 13 15:52:28 2026 by rpki-client