$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8570da6-3a07-356b-a5ba-08adaa29e3f0.roa File: c8570da6-3a07-356b-a5ba-08adaa29e3f0.roa (raw, json) Hash identifier: 2tm1jQPSsjd4nliK4e+hWZT0fruAc8G7DrTYANFvuUQ= Subject key identifier: 7A:BB:04:F4:AD:07:E9:23:CE:04:2E:00:A0:FF:15:E6:72:C7:94:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DFA70A39B39F54CD127EFC378 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8570da6-3a07-356b-a5ba-08adaa29e3f0.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 396592 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:a3:9b:39:f5:4c:d1:27:ef:c3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=cc4706c7-7abe-4dc0-9ce9-b9d429f8c8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:d0:e6:dc:27:c6:cc:fe:3a:f5:c9:25:b0: c6:7b:a8:b4:95:42:68:43:fb:f2:93:95:b1:ad:34: 94:d5:ce:43:b2:68:9d:5d:0a:56:2b:f7:fa:dc:4f: 7f:a4:81:bd:a8:b5:be:7c:18:96:f3:b5:64:ea:0b: 05:49:62:15:0a:4e:f5:61:02:0e:bb:78:80:25:c6: d6:69:1c:47:c8:c8:82:2e:1a:ac:d6:45:91:46:e1: b2:76:17:07:39:d8:5d:33:4f:8e:9d:ed:a9:d4:43: 6c:55:30:ee:5a:aa:10:80:f6:9d:63:c9:15:3c:eb: fe:fe:ae:80:d0:52:82:f4:f8:86:24:92:7d:b1:a0: 8c:85:06:f2:c5:85:dc:24:63:f2:a7:bf:2a:7d:63: 76:bd:d6:95:b9:31:79:73:c7:0b:06:1d:46:12:9b: 5b:10:0b:26:0e:db:0b:97:5d:ab:01:18:80:24:e1: 8b:8b:3d:d9:d6:78:b5:7a:ea:da:75:79:1b:08:94: d5:63:1e:ae:a7:0c:77:3a:98:4e:92:d6:43:14:99: f7:58:e2:44:bc:af:68:e7:7f:fb:a6:10:04:5d:8d: 06:cb:e6:2b:12:bd:01:99:1b:67:ac:a7:29:99:1c: 5d:58:d2:01:87:30:08:bc:ec:19:dd:ef:73:0c:6e: 34:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BB:04:F4:AD:07:E9:23:CE:04:2E:00:A0:FF:15:E6:72:C7:94:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8570da6-3a07-356b-a5ba-08adaa29e3f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:d8:93:6a:f3:57:88:26:db:3b:8c:97:21:16:55:c8:06:f3: b9:1b:3a:f5:10:10:c0:16:50:50:2d:57:db:ce:e5:80:7f:9b: 93:16:f0:7c:64:c2:2a:a0:d9:2b:ce:f8:1b:42:c7:ef:d6:f8: 73:d3:18:cf:ac:96:fc:d0:5b:d9:64:6c:0a:03:c4:6c:9f:10: aa:f1:dc:2b:c3:ef:60:7d:ef:29:97:b6:13:94:9e:03:f8:ec: 35:f9:8b:de:74:61:db:75:bb:7d:e2:23:6d:3c:f1:17:a9:57: b5:ec:94:2a:8f:f4:72:c2:ea:98:cb:8c:e1:72:39:8a:6e:39: 93:ce:7c:6c:32:c4:7e:a5:17:ca:a5:59:d2:bb:45:97:c1:74: 2f:69:dd:5b:93:c2:e6:81:22:fa:0b:e1:36:f6:d7:13:67:2c: 1b:f7:d7:c5:30:be:6d:5f:76:12:be:6d:fa:bc:c7:ee:a2:7c: 96:9c:09:9e:a6:73:cc:93:6e:5e:a8:f2:3e:49:6a:e2:9e:ed: 2b:5a:fc:80:81:99:b4:19:90:12:98:1e:20:3f:a9:a6:4d:f1: fd:c2:75:0c:b3:e3:ab:99:ac:d7:85:17:98:12:b1:58:56:49: 00:20:08:0f:f6:dd:fe:df:d1:05:32:ec:81:67:4a:ae:7a:0a: da:c5:ec:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cKObOfVM0Sfvw3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk Y2M0NzA2YzctN2FiZS00ZGMwLTljZTktYjlkNDI5ZjhjOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHzQ5twnxsz+OvXJJbDGe6i0lUJoQ/vyk5Wx rTSU1c5DsmidXQpWK/f63E9/pIG9qLW+fBiW87Vk6gsFSWIVCk71YQIOu3iAJcbW aRxHyMiCLhqs1kWRRuGydhcHOdhdM0+One2p1ENsVTDuWqoQgPadY8kVPOv+/q6A 0FKC9PiGJJJ9saCMhQbyxYXcJGPyp78qfWN2vdaVuTF5c8cLBh1GEptbEAsmDtsL l12rARiAJOGLiz3Z1ni1euradXkbCJTVYx6upwx3OphOktZDFJn3WOJEvK9o53/7 phAEXY0Gy+YrEr0BmRtnrKcpmRxdWNIBhzAIvOwZ3e9zDG40pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHq7BPStB+kjzgQuAKD/FeZyx5SEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzg1NzBkYTYtM2EwNy0z NTZiLWE1YmEtMDhhZGFhMjllM2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/Yk2rzV4gm2zuMlyEWVcgG87kbOvUQEMAWUFAtV9vO5YB/m5MW8Hxk wiqg2SvO+BtCx+/W+HPTGM+slvzQW9lkbAoDxGyfEKrx3CvD72B97ymXthOUngP4 7DX5i950Ydt1u33iI2088RepV7XslCqP9HLC6pjLjOFyOYpuOZPOfGwyxH6lF8ql WdK7RZfBdC9p3VuTwuaBIvoL4Tb21xNnLBv318Uwvm1fdhK+bfq8x+6ifJacCZ6m c8yTbl6o8j5JauKe7Sta/ICBmbQZkBKYHiA/qaZN8f3CdQyz46uZrNeFF5gSsVhW SQAgCA/23f7f0QUy7IFnSq56CtrF7Os= -----END CERTIFICATE-----Generated at Sat Jun 13 16:01:09 2026 by rpki-client