$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/890f82b4-9a88-3384-8b10-1f2bab75f976.roa File: 890f82b4-9a88-3384-8b10-1f2bab75f976.roa (raw, json) Hash identifier: z9vOxJY/cJQPOyF1mM1M9Be8pRsHlCadDN0Dc9oJ8Qo= Subject key identifier: 77:12:E1:E5:13:ED:D1:F5:F3:64:E6:4D:6F:72:E4:66:4D:99:A9:44 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DFA706FA7E8677A826DC6FB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/890f82b4-9a88-3384-8b10-1f2bab75f976.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 396571 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:6f:a7:e8:67:7a:82:6d:c6:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=6a825277-59cd-49c9-8047-515cd1af6852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e7:20:ef:0c:3e:80:d5:0c:8a:37:e6:89:63: b2:8e:56:21:fb:fb:5a:22:70:df:99:89:14:da:59: 90:8c:a9:cd:c7:c0:76:92:4e:b4:9a:56:f5:9e:d4: fa:8e:2a:e0:e0:c0:dc:6e:3b:53:02:14:5f:d1:a2: 31:33:02:06:73:90:8a:70:83:0b:59:3c:53:27:a2: 4f:e7:73:40:fb:3f:df:37:4c:0d:fd:29:d1:ff:63: d6:46:33:8c:12:c8:48:4f:8b:6b:0f:98:2d:c2:54: c0:02:fd:39:f2:2f:e9:89:4a:69:35:45:61:62:08: 76:ac:1c:72:18:4b:f6:21:1a:cc:2c:1c:e6:08:21: c5:ee:39:a4:80:7c:51:04:5f:b4:e6:73:3a:0b:21: 43:43:4b:56:e9:5b:5f:db:87:16:0b:34:26:3d:16: ee:1f:2d:69:94:af:04:e7:68:88:7a:14:4c:52:3e: ab:05:b9:06:79:de:17:ab:1a:17:9f:b8:40:49:f9: e5:3c:29:06:95:db:fc:dd:65:c9:2d:4b:ce:4f:3d: c6:f7:40:00:a3:22:46:ad:5e:af:7e:a6:76:1b:23: aa:22:61:ad:59:46:a7:f5:15:e5:40:ab:39:17:6b: 0c:65:33:31:12:13:fa:e3:c6:18:55:3a:78:07:c3: cd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:12:E1:E5:13:ED:D1:F5:F3:64:E6:4D:6F:72:E4:66:4D:99:A9:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/890f82b4-9a88-3384-8b10-1f2bab75f976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:6c:18:80:8e:07:06:0f:24:fc:d2:78:b9:39:9d:86:c6:79: f7:37:d1:fc:97:c3:f3:2f:ad:de:19:d0:5e:19:20:b3:9c:9c: 9a:1b:fe:56:59:60:54:ae:5f:ac:dc:fb:05:88:8e:7f:c1:9c: 42:db:fa:e1:40:1c:ab:37:fa:c2:5b:ec:9f:53:7d:98:fa:6d: 26:10:43:15:f4:6e:b8:06:53:d1:2d:74:b4:fa:a8:19:14:cb: c2:a9:c1:95:1f:bb:84:93:21:27:b4:f6:10:05:c0:12:a2:c7: c1:2c:a0:c6:79:b0:31:0c:f7:63:27:4b:ae:23:bc:d4:fe:52: e1:b0:4a:85:10:f3:e5:d6:32:46:8c:88:cb:e8:a9:0d:26:c0: 9c:25:8a:82:72:e9:2d:19:c9:52:9a:95:c1:08:cd:16:ec:ce: d7:6d:77:4e:31:f4:a4:af:21:25:15:7f:bf:f6:72:b8:ba:cd: 74:b7:fb:5f:6a:aa:99:d7:72:c8:7f:04:34:d3:67:71:99:69: ca:67:01:e9:c7:30:4f:30:43:0f:0e:6b:2d:98:72:53:f3:0b: 73:da:c8:c6:12:d5:7f:63:4c:c7:1c:a6:c8:eb:15:2d:47:3f: cc:00:1c:39:08:af:12:ec:51:b7:3a:49:01:11:9a:7a:4e:63: 20:27:06:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cG+n6Gd6gm3G+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk NmE4MjUyNzctNTljZC00OWM5LTgwNDctNTE1Y2QxYWY2ODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+cg7ww+gNUMijfmiWOyjlYh+/taInDfmYkU 2lmQjKnNx8B2kk60mlb1ntT6jirg4MDcbjtTAhRf0aIxMwIGc5CKcIMLWTxTJ6JP 53NA+z/fN0wN/SnR/2PWRjOMEshIT4trD5gtwlTAAv058i/piUppNUVhYgh2rBxy GEv2IRrMLBzmCCHF7jmkgHxRBF+05nM6CyFDQ0tW6Vtf24cWCzQmPRbuHy1plK8E 52iIehRMUj6rBbkGed4XqxoXn7hASfnlPCkGldv83WXJLUvOTz3G90AAoyJGrV6v fqZ2GyOqImGtWUan9RXlQKs5F2sMZTMxEhP648YYVTp4B8PNjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcS4eUT7dH182TmTW9y5GZNmalEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODkwZjgyYjQtOWE4OC0z Mzg0LThiMTAtMWYyYmFiNzVmOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRsGICOBwYPJPzSeLk5nYbGefc30fyXw/Mvrd4Z0F4ZILOcnJob/lZZ YFSuX6zc+wWIjn/BnELb+uFAHKs3+sJb7J9TfZj6bSYQQxX0brgGU9EtdLT6qBkU y8KpwZUfu4STISe09hAFwBKix8EsoMZ5sDEM92MnS64jvNT+UuGwSoUQ8+XWMkaM iMvoqQ0mwJwlioJy6S0ZyVKalcEIzRbsztdtd04x9KSvISUVf7/2cri6zXS3+19q qpnXcsh/BDTTZ3GZacpnAenHME8wQw8Oay2YclPzC3PayMYS1X9jTMccpsjrFS1H P8wAHDkIrxLsUbc6SQERmnpOYyAnBlQ= -----END CERTIFICATE-----Generated at Sat Jun 13 14:31:39 2026 by rpki-client