$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b4ff9d93-5144-396f-b11f-a879fe742559.roa File: b4ff9d93-5144-396f-b11f-a879fe742559.roa (raw, json) Hash identifier: gnvx/XX22UU2ZqvT5ZiVQFk0mIzjyeq5HIaxGVIk1OQ= Subject key identifier: C0:F9:88:72:B8:DD:6B:C4:EE:AC:D1:F9:13:E1:3F:B7:4D:F0:69:15 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DFA7070BA2B302B476CB20D40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b4ff9d93-5144-396f-b11f-a879fe742559.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 396605 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:70:ba:2b:30:2b:47:6c:b2:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=fed27ae5-40e1-4b50-8601-5e6ef96f2707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:89:9f:4b:db:ab:9c:2f:21:1c:4c:27:77:f2: 50:50:0b:4e:ad:e9:74:51:94:3a:9f:1f:67:8c:d7: cc:b7:1d:cc:43:57:47:51:a7:5a:4b:53:f4:e4:cc: 5e:47:4b:59:0c:10:66:04:11:8d:3a:a5:3d:16:f0: 04:5f:c8:82:2b:ce:65:aa:3c:a6:22:0d:1f:26:cb: c9:b0:50:83:c6:3b:05:5a:af:a6:fb:1b:59:2e:41: d9:d7:85:8f:6b:7f:8e:82:72:61:0b:85:7c:d0:68: e6:d7:6d:e8:9e:b8:1d:6f:45:b2:2b:b2:2c:4c:7a: e2:25:93:6d:66:7c:b2:dd:ac:47:c4:49:56:0c:98: aa:6e:4d:f3:e2:f9:0a:91:06:86:ea:2c:34:8f:3a: 78:a5:4c:99:1d:e8:99:91:4c:e5:cf:ee:25:82:0d: 70:ac:a1:3b:cf:71:c4:6c:f7:a1:41:fa:03:e3:8c: e9:a5:c9:db:a1:05:47:ba:ff:20:fa:d1:67:b2:a6: 40:14:56:7c:68:21:6e:c8:5b:32:0c:46:dc:94:79: eb:27:6d:67:d2:d9:ee:3f:8f:4f:f1:d1:87:89:63: e3:c0:d9:3a:9e:e0:9a:dd:94:22:f8:0b:57:2d:2b: c6:a0:16:78:5f:bc:05:8b:0b:42:7d:bf:ec:a6:67: 7d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F9:88:72:B8:DD:6B:C4:EE:AC:D1:F9:13:E1:3F:B7:4D:F0:69:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b4ff9d93-5144-396f-b11f-a879fe742559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:10:3e:6c:3b:e4:96:33:04:da:5c:4e:72:20:39:28:86:5c: 3c:c3:48:eb:ea:b8:fe:64:71:bf:5b:8d:27:0c:8b:85:ef:85: 4d:05:68:89:cf:af:79:b2:db:56:b7:5e:b9:89:72:3c:04:6b: 90:18:18:c7:60:8f:67:bf:ea:4e:05:24:11:5f:58:54:fe:8c: c4:1a:9b:5e:cc:17:e3:80:d0:83:89:1b:4a:6a:5d:c8:52:41: 1f:3c:07:d8:36:99:9c:27:ea:3f:19:80:7b:0c:be:d1:d2:57: 27:74:53:15:a9:cf:73:6c:a5:44:d1:4f:08:42:3a:bb:8a:e6: fd:03:01:92:6f:cd:fb:44:ee:a4:b8:cd:23:a7:86:cf:c1:89: 20:47:b6:c5:b5:84:0d:ae:8a:84:a4:c5:e6:a0:33:e5:1a:39: 79:e4:c0:74:a2:a5:a5:c8:ea:8d:37:04:53:42:91:96:ca:2b: df:ea:0f:79:49:eb:f0:14:46:d0:07:86:a9:bf:66:b5:c0:75: 8d:2b:77:36:da:b2:7f:51:4a:7b:e2:0f:32:78:78:a6:77:0c: cd:61:98:2e:96:c7:18:87:16:1a:07:19:3a:87:e1:e8:b2:a8: a1:21:3a:10:a8:5f:82:ac:da:4c:5c:dd:9d:87:8b:1e:ba:df: 50:32:09:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cHC6KzArR2yyDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk ZmVkMjdhZTUtNDBlMS00YjUwLTg2MDEtNWU2ZWY5NmYyNzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnImfS9urnC8hHEwnd/JQUAtOrel0UZQ6nx9n jNfMtx3MQ1dHUadaS1P05MxeR0tZDBBmBBGNOqU9FvAEX8iCK85lqjymIg0fJsvJ sFCDxjsFWq+m+xtZLkHZ14WPa3+OgnJhC4V80Gjm123onrgdb0WyK7IsTHriJZNt Znyy3axHxElWDJiqbk3z4vkKkQaG6iw0jzp4pUyZHeiZkUzlz+4lgg1wrKE7z3HE bPehQfoD44zppcnboQVHuv8g+tFnsqZAFFZ8aCFuyFsyDEbclHnrJ21n0tnuP49P 8dGHiWPjwNk6nuCa3ZQi+AtXLSvGoBZ4X7wFiwtCfb/spmd9hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMD5iHK43WvE7qzR+RPhP7dN8GkVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjRmZjlkOTMtNTE0NC0z OTZmLWIxMWYtYTg3OWZlNzQyNTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEQPmw75JYzBNpcTnIgOSiGXDzDSOvquP5kcb9bjScMi4XvhU0FaInP r3my21a3XrmJcjwEa5AYGMdgj2e/6k4FJBFfWFT+jMQam17MF+OA0IOJG0pqXchS QR88B9g2mZwn6j8ZgHsMvtHSVyd0UxWpz3NspUTRTwhCOruK5v0DAZJvzftE7qS4 zSOnhs/BiSBHtsW1hA2uioSkxeagM+UaOXnkwHSipaXI6o03BFNCkZbKK9/qD3lJ 6/AURtAHhqm/ZrXAdY0rdzbasn9RSnviDzJ4eKZ3DM1hmC6WxxiHFhoHGTqH4eiy qKEhOhCoX4Ks2kxc3Z2Hix6631AyCcg= -----END CERTIFICATE-----Generated at Sat Jun 13 14:39:31 2026 by rpki-client