$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa3aaa0b-972a-3dc5-aeb1-702709556878.roa File: aa3aaa0b-972a-3dc5-aeb1-702709556878.roa (raw, json) Hash identifier: mDi1yK41pRNO66OO/jRDX8XrslzAGjzUqyw3Dn7tllg= Subject key identifier: 54:C2:3B:02:FC:30:33:3B:C7:9C:89:45:AB:F9:DF:A9:3B:E3:AF:4C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DFA70A461250C752097A50D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa3aaa0b-972a-3dc5-aeb1-702709556878.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 25485 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:a4:61:25:0c:75:20:97:a5:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=725d2d84-697d-41ba-93f3-f96617207113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:86:fb:c8:bc:2c:78:b1:d9:db:f1:fe:9d:9a: 25:29:a0:c8:f6:ef:5d:fc:56:8f:b3:d9:1a:85:69: ec:f0:9a:65:70:33:9c:bf:86:0d:59:4a:62:59:e5: cc:97:af:c9:3d:f6:ff:df:f0:06:20:95:40:2a:db: 33:51:f5:78:a4:6c:04:68:6a:2c:09:c1:a4:93:82: 89:bc:53:86:9f:0c:49:79:01:ef:3b:5d:30:ff:fa: 03:14:bc:77:63:c4:02:98:04:47:07:86:70:97:91: 4c:9c:ca:3d:80:af:a4:11:ee:cc:da:e4:49:d1:d7: 27:c8:31:d0:52:bc:ba:f9:8a:17:f3:19:f7:43:e7: cb:46:83:87:6d:27:07:ac:bf:5d:42:34:24:9f:02: 69:87:f5:8a:36:a8:7e:99:fe:b3:de:16:aa:58:20: 2f:b7:cf:4b:14:61:17:0e:f5:e1:72:4e:cc:17:77: b2:7e:cb:da:82:31:f3:e1:8f:e6:75:72:a3:85:2b: 2d:8d:fa:04:4e:03:3b:28:a4:b0:83:16:67:2e:eb: 82:a7:82:57:ae:f9:ed:c9:f1:5d:63:a4:53:25:c3: 9e:99:73:f7:fd:8b:cb:db:aa:b8:f1:88:bd:36:8f: b8:72:0e:b6:bf:32:b5:7a:bd:88:9a:27:9a:e6:85: e1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C2:3B:02:FC:30:33:3B:C7:9C:89:45:AB:F9:DF:A9:3B:E3:AF:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa3aaa0b-972a-3dc5-aeb1-702709556878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:3d:63:b1:f9:50:ac:0c:30:94:08:fc:ef:36:15:44:15:53: 6d:3c:3c:df:7b:1d:4e:ec:fa:e1:c0:41:0a:4b:10:fb:50:fa: a5:db:69:b3:2f:28:12:ca:ce:7c:86:03:28:25:d0:89:34:e5: ba:e1:6e:12:19:81:2a:15:1f:1b:1d:54:7f:5e:6a:e3:de:18: b4:82:d1:4d:37:93:2b:b4:86:cd:f7:e3:f0:a1:71:f5:04:d4: 93:e9:a2:f6:04:ac:5c:3b:95:94:2a:91:78:53:45:5d:47:be: b4:75:14:f7:02:38:bc:f0:38:34:c6:3c:72:0f:1b:47:79:b0: b0:c7:c7:5b:c8:81:ed:53:9f:52:e6:88:d4:14:cf:00:8a:36: 2f:af:fd:cb:7c:34:02:41:24:7e:a3:41:c2:45:30:11:61:a8: 6d:8f:be:5c:39:74:de:bc:cd:51:22:57:47:10:05:0f:f7:4f: af:95:1b:9d:9c:b6:c0:51:a7:41:fa:1a:3c:bb:4e:87:6f:d4: dd:74:f6:1e:40:6f:04:7d:83:f3:b7:9e:33:95:79:eb:7f:76: dd:db:1b:08:4f:45:0d:e0:fe:89:4d:bb:c1:66:eb:3e:ef:18: 0f:01:81:f3:e7:bc:90:30:bc:bf:c1:6a:b5:b6:d5:fc:36:bc: 75:95:a0:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cKRhJQx1IJelDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk NzI1ZDJkODQtNjk3ZC00MWJhLTkzZjMtZjk2NjE3MjA3MTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4b7yLwseLHZ2/H+nZolKaDI9u9d/FaPs9ka hWns8JplcDOcv4YNWUpiWeXMl6/JPfb/3/AGIJVAKtszUfV4pGwEaGosCcGkk4KJ vFOGnwxJeQHvO10w//oDFLx3Y8QCmARHB4Zwl5FMnMo9gK+kEe7M2uRJ0dcnyDHQ Ury6+YoX8xn3Q+fLRoOHbScHrL9dQjQknwJph/WKNqh+mf6z3haqWCAvt89LFGEX DvXhck7MF3eyfsvagjHz4Y/mdXKjhSstjfoETgM7KKSwgxZnLuuCp4JXrvntyfFd Y6RTJcOemXP3/YvL26q48Yi9No+4cg62vzK1er2Imiea5oXhCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTCOwL8MDM7x5yJRav536k7469MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWEzYWFhMGItOTcyYS0z ZGM1LWFlYjEtNzAyNzA5NTU2ODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHk9Y7H5UKwMMJQI/O82FUQVU208PN97HU7s+uHAQQpLEPtQ+qXbabMv KBLKznyGAygl0Ik05brhbhIZgSoVHxsdVH9eauPeGLSC0U03kyu0hs334/ChcfUE 1JPpovYErFw7lZQqkXhTRV1HvrR1FPcCOLzwODTGPHIPG0d5sLDHx1vIge1Tn1Lm iNQUzwCKNi+v/ct8NAJBJH6jQcJFMBFhqG2Pvlw5dN68zVEiV0cQBQ/3T6+VG52c tsBRp0H6Gjy7Todv1N109h5AbwR9g/O3njOVeet/dt3bGwhPRQ3g/olNu8Fm6z7v GA8BgfPnvJAwvL/BarW21fw2vHWVoL4= -----END CERTIFICATE-----Generated at Sat Jun 13 14:38:09 2026 by rpki-client