$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9994a2c0-72f3-3eac-b36b-85585a06f6a6.roa File: 9994a2c0-72f3-3eac-b36b-85585a06f6a6.roa (raw, json) Hash identifier: jmY8iwVzWYOEeD7sp6QLkKbHlyqrs2mmjivS54Ov+N4= Subject key identifier: FA:0A:01:ED:12:09:65:68:07:FC:A3:FB:63:37:E0:65:EA:A8:8D:6A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DFA707D1E958481E6B698C600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9994a2c0-72f3-3eac-b36b-85585a06f6a6.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 22547 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:7d:1e:95:84:81:e6:b6:98:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=b7a9d579-a0bb-4b26-a490-7fb55cb57c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1f:e8:46:cf:1d:95:a0:bb:46:e7:70:cc:67: c8:8a:26:4d:2d:65:01:85:bf:4e:fd:08:5d:9a:df: 1e:a4:46:81:38:e6:7d:a4:e5:c2:09:2b:7d:f7:98: 47:ef:a4:14:44:7d:3c:35:03:e6:60:22:df:39:c1: 78:a2:90:e0:b2:bc:d7:8f:46:51:a2:a0:89:cd:e0: 49:09:21:43:41:85:84:7e:0a:ef:24:35:d3:7b:cb: 72:40:b3:04:25:47:86:c3:c2:fa:2a:f8:45:ce:be: 1b:9c:aa:13:c1:25:1c:0a:d3:42:50:d6:2f:02:09: 33:66:d0:a3:04:2c:28:d3:59:88:a9:8e:30:92:8c: 75:5b:1e:b7:d6:00:62:49:23:bf:c2:99:11:42:e3: 28:83:4f:5d:b8:1b:ea:6d:5f:b7:04:a1:82:9f:aa: 6a:de:5e:24:40:45:0b:09:10:e2:14:98:2e:26:c3: 59:31:21:96:45:36:ce:cc:2e:f9:97:46:1e:ba:29: b2:63:21:f4:25:85:86:91:91:a2:e6:58:d0:9a:de: ac:3e:a3:a9:07:ea:49:04:46:b7:40:71:4f:96:95: 1b:cd:22:3b:df:12:fd:8b:95:8a:23:b0:57:55:9b: ee:b7:17:1e:eb:e2:6c:fa:90:47:f3:e2:1d:d7:c5: c1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0A:01:ED:12:09:65:68:07:FC:A3:FB:63:37:E0:65:EA:A8:8D:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9994a2c0-72f3-3eac-b36b-85585a06f6a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:25:c2:c8:36:55:29:34:fd:65:cc:9a:9b:0d:78:58:2e:fa: 32:36:a2:01:14:22:02:bb:cf:4a:85:c1:98:d3:fd:8e:4c:a9: 5d:f4:6a:09:1f:aa:29:b2:e7:3b:e2:56:86:aa:51:92:97:e4: fb:7c:5e:8d:43:c7:79:cc:f2:b6:36:fb:19:07:74:b4:ba:d2: 8a:2b:63:08:61:eb:0a:a7:98:74:b8:10:8b:51:b1:39:23:76: 5b:e4:13:c0:1e:88:45:cc:5d:60:57:19:dd:ca:d1:36:b8:a3: d0:fa:e8:51:0a:a8:d8:71:66:ce:c7:99:3e:19:6d:a8:0f:00: f4:c3:e4:55:2c:ed:1c:24:15:9b:10:ca:ff:70:f7:9f:81:72: 07:3a:91:ac:8e:4a:cd:4a:db:3f:49:f5:11:fc:be:58:f4:4b: 35:59:00:77:03:17:63:f6:31:39:0c:d3:1b:4d:db:c5:d2:07: c7:34:6f:39:b4:93:20:da:43:16:bd:c3:a9:2f:a9:bd:20:f0: b8:f5:d9:bc:3a:82:31:4f:b3:ec:8b:03:cc:e8:a9:71:73:ec: 9b:c6:3b:f6:fc:d6:dd:f8:7d:60:a1:cc:f4:0e:26:dc:07:0b: 90:b5:71:1f:83:52:31:a9:c2:c2:38:43:82:1b:87:25:2c:6b: 92:80:da:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cH0elYSB5raYxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk YjdhOWQ1NzktYTBiYi00YjI2LWE0OTAtN2ZiNTVjYjU3YzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx/oRs8dlaC7RudwzGfIiiZNLWUBhb9O/Qhd mt8epEaBOOZ9pOXCCSt995hH76QURH08NQPmYCLfOcF4opDgsrzXj0ZRoqCJzeBJ CSFDQYWEfgrvJDXTe8tyQLMEJUeGw8L6KvhFzr4bnKoTwSUcCtNCUNYvAgkzZtCj BCwo01mIqY4wkox1Wx631gBiSSO/wpkRQuMog09duBvqbV+3BKGCn6pq3l4kQEUL CRDiFJguJsNZMSGWRTbOzC75l0YeuimyYyH0JYWGkZGi5ljQmt6sPqOpB+pJBEa3 QHFPlpUbzSI73xL9i5WKI7BXVZvutxce6+Js+pBH8+Id18XBKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoKAe0SCWVoB/yj+2M34GXqqI1qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTk5NGEyYzAtNzJmMy0z ZWFjLWIzNmItODU1ODVhMDZmNmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFglwsg2VSk0/WXMmpsNeFgu+jI2ogEUIgK7z0qFwZjT/Y5MqV30agkf qimy5zviVoaqUZKX5Pt8Xo1Dx3nM8rY2+xkHdLS60oorYwhh6wqnmHS4EItRsTkj dlvkE8AeiEXMXWBXGd3K0Ta4o9D66FEKqNhxZs7HmT4ZbagPAPTD5FUs7RwkFZsQ yv9w95+Bcgc6kayOSs1K2z9J9RH8vlj0SzVZAHcDF2P2MTkM0xtN28XSB8c0bzm0 kyDaQxa9w6kvqb0g8Lj12bw6gjFPs+yLA8zoqXFz7JvGO/b81t34fWChzPQOJtwH C5C1cR+DUjGpwsI4Q4IbhyUsa5KA2tA= -----END CERTIFICATE-----Generated at Sat Jun 13 13:52:58 2026 by rpki-client