$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89bd953d-ca92-3d30-a75f-08e12d302671.roa File: 89bd953d-ca92-3d30-a75f-08e12d302671.roa (raw, json) Hash identifier: pdbJNPeiNMXKuAGql1ooBbiTQzYcggZDFrFjaSjnBEE= Subject key identifier: A3:FA:5F:04:E2:37:9C:8C:6F:D3:7A:C1:F9:9F:57:7B:F7:64:93:CF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DFA70A031E7305B58175F6998 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89bd953d-ca92-3d30-a75f-08e12d302671.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 396542 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:a0:31:e7:30:5b:58:17:5f:69:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=b871e4b1-bfc3-418c-bec7-fc844f297caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:43:62:bc:ba:43:30:09:ae:4a:56:0e:dc:c3: 86:13:59:90:5e:ea:c9:f5:85:a7:aa:59:31:9f:98: 07:06:ff:58:b5:e9:6c:91:8e:f1:28:4a:b9:f1:8f: 08:8c:d7:c2:ae:81:5f:11:5b:e1:c2:d5:89:51:a6: 0a:9a:ba:59:85:68:59:12:0c:e8:49:04:18:15:13: 09:a6:33:15:b5:be:49:80:70:44:f4:24:10:88:78: 4d:e7:9d:39:e2:81:ab:a4:35:bd:31:d2:78:58:1c: c0:7d:0b:ed:63:aa:2b:c6:9a:09:22:81:42:e7:b6: 78:2f:77:33:32:fe:e8:b1:18:11:17:38:20:8e:a7: 82:e3:aa:e9:f9:1e:02:c7:f8:f5:0a:81:97:48:21: 49:22:ce:e8:d4:a3:21:7a:c0:59:fa:cf:b5:c0:dc: da:d6:42:61:be:5f:f2:b8:36:62:5f:dd:27:d3:9f: f3:b0:2d:93:68:f9:55:1a:d2:05:19:38:79:e6:45: ca:a9:7c:17:a2:38:98:19:b5:d7:55:7f:05:32:02: ec:11:8b:1f:f1:0a:1c:2a:a0:f2:8f:d8:6a:7d:3b: 0f:d1:d9:3d:4f:1a:7a:0c:7b:0f:d3:40:94:5c:ae: fb:50:29:e7:73:73:e2:d2:99:0e:9f:07:e5:3c:3e: 0f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FA:5F:04:E2:37:9C:8C:6F:D3:7A:C1:F9:9F:57:7B:F7:64:93:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89bd953d-ca92-3d30-a75f-08e12d302671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:d5:94:01:ae:8a:a2:1e:93:42:4b:d2:f7:7e:d2:1e:0b:01: 92:9b:33:71:79:7f:00:f0:97:49:c7:eb:25:79:ca:dc:11:c5: f4:d6:63:31:24:95:c0:07:83:6b:cb:1a:c0:89:c6:c3:e7:f7: 53:7e:79:0e:3b:74:3c:0b:11:0a:7e:0d:40:2a:f7:ec:0f:c0: 1b:60:e6:6d:a5:92:d5:36:e1:8d:ed:a6:0c:41:cb:0b:b0:e2: a7:eb:11:64:47:cb:9a:ff:26:28:41:22:ea:25:dc:3d:43:4b: 03:87:18:18:38:75:4e:59:10:5c:ec:c5:2f:a5:76:c2:77:56: 82:94:8e:3e:6e:da:36:42:53:ae:f3:78:d7:99:1a:44:63:46: 60:3e:43:88:c4:ce:9c:87:88:59:f9:f6:34:fb:ad:7a:ae:fa: ba:b0:d8:28:83:93:d3:62:e3:88:b5:38:5a:f5:26:2f:e8:25: eb:b8:20:32:8e:8b:59:63:bc:51:e6:c5:48:b8:f8:1e:c4:40: fb:bc:b5:fd:7e:56:87:8b:b1:00:b3:1e:27:b3:7d:c8:a9:b0: 05:78:cc:cd:72:e6:33:76:3a:ae:ea:4f:b3:0f:4b:85:ff:08: 6b:6c:04:51:e8:39:2c:eb:a0:93:e4:8c:83:63:83:39:d3:88: 6f:5d:21:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cKAx5zBbWBdfaZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk Yjg3MWU0YjEtYmZjMy00MThjLWJlYzctZmM4NDRmMjk3Y2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtENivLpDMAmuSlYO3MOGE1mQXurJ9YWnqlkx n5gHBv9YtelskY7xKEq58Y8IjNfCroFfEVvhwtWJUaYKmrpZhWhZEgzoSQQYFRMJ pjMVtb5JgHBE9CQQiHhN55054oGrpDW9MdJ4WBzAfQvtY6orxpoJIoFC57Z4L3cz Mv7osRgRFzggjqeC46rp+R4Cx/j1CoGXSCFJIs7o1KMhesBZ+s+1wNza1kJhvl/y uDZiX90n05/zsC2TaPlVGtIFGTh55kXKqXwXojiYGbXXVX8FMgLsEYsf8QocKqDy j9hqfTsP0dk9Txp6DHsP00CUXK77UCnnc3Pi0pkOnwflPD4PFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKP6XwTiN5yMb9N6wfmfV3v3ZJPPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODliZDk1M2QtY2E5Mi0z ZDMwLWE3NWYtMDhlMTJkMzAyNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPVlAGuiqIek0JL0vd+0h4LAZKbM3F5fwDwl0nH6yV5ytwRxfTWYzEk lcAHg2vLGsCJxsPn91N+eQ47dDwLEQp+DUAq9+wPwBtg5m2lktU24Y3tpgxBywuw 4qfrEWRHy5r/JihBIuol3D1DSwOHGBg4dU5ZEFzsxS+ldsJ3VoKUjj5u2jZCU67z eNeZGkRjRmA+Q4jEzpyHiFn59jT7rXqu+rqw2CiDk9Ni44i1OFr1Ji/oJeu4IDKO i1ljvFHmxUi4+B7EQPu8tf1+VoeLsQCzHiezfcipsAV4zM1y5jN2Oq7qT7MPS4X/ CGtsBFHoOSzroJPkjINjgznTiG9dIUg= -----END CERTIFICATE-----Generated at Sat Jun 13 14:31:48 2026 by rpki-client