$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70dcef90-0f98-3238-97eb-8f20ab34ab79.roa File: 70dcef90-0f98-3238-97eb-8f20ab34ab79.roa (raw, json) Hash identifier: mr28t1aBXctW/494wo3jk1Xob11+HentSQ+Z2KObWmQ= Subject key identifier: BB:B4:E5:80:28:0B:2A:7B:0D:88:24:A1:03:8E:A1:22:2B:84:D1:C8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DFA70A07A8FCACA891C07D740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70dcef90-0f98-3238-97eb-8f20ab34ab79.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 396593 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:a0:7a:8f:ca:ca:89:1c:07:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=c4b7770e-83ac-46a2-9886-82c2a2a77751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:85:09:8b:c9:80:1d:a5:cf:24:28:7c:51:58: 6b:00:59:f7:f6:2f:7b:55:e4:34:3e:97:7f:59:a9: fb:7d:e1:8e:6c:ed:c3:2a:5f:32:c8:f1:c1:b3:71: 4c:c2:37:f9:ab:ff:38:3a:01:84:f9:65:d4:8b:0d: 8e:6e:35:83:e0:a2:1c:f6:b3:63:0b:99:1b:3c:c9: 00:4d:84:47:24:de:46:cc:8d:32:08:db:e4:03:76: c5:91:69:4b:72:4e:cc:53:a1:ea:d9:eb:76:7e:14: b0:25:8b:c4:33:48:81:7f:22:f4:05:b5:f5:73:04: b4:d9:e6:86:4e:e8:48:13:b2:68:c5:9d:67:9e:b5: 3b:5a:88:36:df:91:6e:16:86:0f:9b:0f:f5:48:bd: b1:c9:58:8b:ea:4c:0a:21:80:8e:7a:fd:b7:f4:f4: da:c3:ba:63:38:91:74:c2:7c:61:15:fd:dc:01:64: 28:b9:fa:67:d6:1e:03:03:6b:6f:c3:f1:d6:12:11: a6:ff:1c:ac:f0:24:e5:d2:5c:06:97:4c:cf:66:9a: 7a:e0:06:29:d2:d5:0b:40:11:6f:5e:db:a9:fc:35: 2d:49:5a:0a:78:dd:97:f3:21:4b:21:03:d0:c5:92: 56:a8:0d:01:43:49:43:7c:86:79:43:40:94:e4:44: ae:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B4:E5:80:28:0B:2A:7B:0D:88:24:A1:03:8E:A1:22:2B:84:D1:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70dcef90-0f98-3238-97eb-8f20ab34ab79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:ea:ae:c3:56:c5:f8:f6:a9:1c:7e:d8:8b:7b:91:28:5a:d8: ae:52:42:0e:54:dc:6a:ff:88:16:4b:0e:ab:ed:28:7d:ff:8f: a7:86:9b:55:a6:2b:1d:ab:c1:ce:2a:61:7c:47:51:f4:ce:c1: 1c:d6:d9:ec:b3:82:2c:e4:45:1e:01:2c:ea:55:b4:cb:ff:f9: 09:1f:c1:32:50:3d:1c:76:d8:8e:e2:98:03:4c:1e:5a:84:1d: 41:3d:95:0c:11:2b:18:e0:5a:2a:0c:c7:e4:f5:f4:c7:af:b4: 7c:c0:4c:46:cd:bc:2c:85:14:5e:d1:cd:97:ad:db:fe:06:86: d4:b9:c7:6e:d3:de:61:09:60:7e:de:4c:4a:0e:b6:ed:ce:db: 56:0f:00:12:cc:64:9b:00:87:35:95:7d:17:c6:5b:6b:98:ea: 5d:72:40:e8:29:6c:90:a8:24:4a:2b:d6:95:38:83:35:57:6d: 22:bd:58:ca:61:e0:29:e0:72:c5:20:dd:08:63:cd:89:b8:6a: a7:42:dd:7a:e4:ae:2a:14:e6:bc:21:df:d0:5d:d2:85:08:c1: 3f:4f:ac:57:59:d5:b0:2a:ec:53:1e:b1:54:2c:ea:1e:05:a7: b0:53:74:ca:9f:46:58:cf:3d:3d:09:01:4f:67:c6:42:a0:78: de:64:62:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cKB6j8rKiRwH10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk YzRiNzc3MGUtODNhYy00NmEyLTk4ODYtODJjMmEyYTc3NzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoUJi8mAHaXPJCh8UVhrAFn39i97VeQ0Ppd/ Wan7feGObO3DKl8yyPHBs3FMwjf5q/84OgGE+WXUiw2ObjWD4KIc9rNjC5kbPMkA TYRHJN5GzI0yCNvkA3bFkWlLck7MU6Hq2et2fhSwJYvEM0iBfyL0BbX1cwS02eaG TuhIE7JoxZ1nnrU7Wog235FuFoYPmw/1SL2xyViL6kwKIYCOev239PTaw7pjOJF0 wnxhFf3cAWQoufpn1h4DA2tvw/HWEhGm/xys8CTl0lwGl0zPZpp64AYp0tULQBFv Xtup/DUtSVoKeN2X8yFLIQPQxZJWqA0BQ0lDfIZ5Q0CU5ESujwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLu05YAoCyp7DYgkoQOOoSIrhNHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzBkY2VmOTAtMGY5OC0z MjM4LTk3ZWItOGYyMGFiMzRhYjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDqrsNWxfj2qRx+2It7kSha2K5SQg5U3Gr/iBZLDqvtKH3/j6eGm1Wm Kx2rwc4qYXxHUfTOwRzW2eyzgizkRR4BLOpVtMv/+QkfwTJQPRx22I7imANMHlqE HUE9lQwRKxjgWioMx+T19MevtHzATEbNvCyFFF7RzZet2/4GhtS5x27T3mEJYH7e TEoOtu3O21YPABLMZJsAhzWVfRfGW2uY6l1yQOgpbJCoJEor1pU4gzVXbSK9WMph 4CngcsUg3QhjzYm4aqdC3XrkrioU5rwh39Bd0oUIwT9PrFdZ1bAq7FMesVQs6h4F p7BTdMqfRljPPT0JAU9nxkKgeN5kYmY= -----END CERTIFICATE-----Generated at Sat Jun 13 14:42:53 2026 by rpki-client