$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc8a904c-5bfc-3faf-bc14-f88952fc7251.roa File: cc8a904c-5bfc-3faf-bc14-f88952fc7251.roa (raw, json) Hash identifier: 9kwnh2SB8EEfxfAaxeJ0vdN8b1d9BpwXhK/Ykf9olSY= Subject key identifier: 8F:B7:12:07:B8:16:2F:8D:39:EC:60:8A:D4:ED:66:1C:23:A8:20:22 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DFA70A455B9CE8472C553FF40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc8a904c-5bfc-3faf-bc14-f88952fc7251.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 396608 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:a4:55:b9:ce:84:72:c5:53:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=f162f5a4-12ce-408d-a0c1-1ce95bb845d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fe:25:49:31:cc:46:20:c4:33:86:ae:3a:60: e2:7a:e7:20:fa:b9:d5:ce:9c:33:78:ed:97:52:17: bc:22:47:5d:53:ba:d4:fd:ba:1a:fa:1d:e7:2d:43: c9:57:76:e6:66:08:34:b5:f6:f0:14:c7:87:cb:5e: 69:74:f1:e0:cb:d5:93:50:f3:d7:e1:de:b4:38:03: a3:58:e4:4a:54:20:b0:0c:90:4d:e3:1d:ad:66:c2: cb:69:08:cf:44:42:7d:39:8c:49:5f:10:63:e3:dc: c4:21:fe:c4:2e:09:26:3e:34:7e:e7:f0:44:6e:6f: a1:f3:81:28:a7:ba:da:fd:0b:5d:df:23:4c:64:d5: 7a:53:75:11:a0:b2:96:f8:fc:e1:f9:c1:49:58:86: cc:b4:82:b0:f7:c8:17:fb:09:32:8d:23:c8:35:f8: 3f:4a:10:5c:f8:12:fc:c3:ff:7f:6f:eb:1d:cf:60: fc:f8:1b:1d:d8:ae:5a:8f:c8:51:8c:bd:f1:e9:42: 7f:c4:27:e3:de:4f:a3:16:bb:df:fc:4f:c2:9e:61: dd:bc:a5:6a:fb:11:8b:a4:51:43:73:25:8c:09:22: 51:4f:b9:39:37:84:c2:48:a2:1f:21:70:ec:b1:56: ba:d7:e9:aa:8f:02:75:da:f3:32:b3:78:d2:82:99: 7f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B7:12:07:B8:16:2F:8D:39:EC:60:8A:D4:ED:66:1C:23:A8:20:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc8a904c-5bfc-3faf-bc14-f88952fc7251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:fa:86:8c:81:09:eb:6d:39:92:6e:49:54:4e:2f:86:12:e2: 4e:bf:38:a5:f1:7c:8c:7f:a7:eb:1f:ae:e7:0d:33:56:53:f3: 00:22:65:d4:2e:b8:45:54:44:97:f6:a1:60:3c:6f:85:ae:bb: 16:fc:88:28:ff:7f:e6:34:e6:0e:ac:b0:30:2d:f1:97:a2:d6: 4f:dd:0e:53:fd:ee:99:24:b6:ef:8d:35:66:93:44:27:69:09: 13:b2:63:3a:f9:74:7c:2c:b1:b6:20:ca:c7:ad:59:0f:fa:22: 0f:29:c7:6a:17:80:9a:fd:ab:81:b4:69:e3:84:9a:c0:c7:32: 9e:f6:6b:d3:7b:a5:32:16:f2:2a:3b:e8:8d:91:16:f1:90:2f: 9e:f3:4b:8e:e1:f5:c4:db:cf:c9:f2:05:c3:56:e4:c2:5b:a9: 44:6c:5c:2e:86:28:39:dc:d3:84:1a:a8:31:3d:3c:60:ed:6d: 91:63:a2:e5:30:d0:4b:86:1d:77:0c:6d:a6:72:1a:56:d5:aa: f6:47:ca:9c:ca:58:22:5b:36:ae:18:31:6f:b4:fd:6a:e0:d5: 64:a1:a2:44:86:1d:9f:8f:42:db:a1:2d:2a:b3:7e:79:af:d0: 58:94:e7:14:b5:47:cc:75:10:c1:d5:1b:34:0f:c8:b8:61:0d: 94:02:46:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cKRVuc6EcsVT/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk ZjE2MmY1YTQtMTJjZS00MDhkLWEwYzEtMWNlOTViYjg0NWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv4lSTHMRiDEM4auOmDieucg+rnVzpwzeO2X Uhe8IkddU7rU/boa+h3nLUPJV3bmZgg0tfbwFMeHy15pdPHgy9WTUPPX4d60OAOj WORKVCCwDJBN4x2tZsLLaQjPREJ9OYxJXxBj49zEIf7ELgkmPjR+5/BEbm+h84Eo p7ra/Qtd3yNMZNV6U3URoLKW+Pzh+cFJWIbMtIKw98gX+wkyjSPINfg/ShBc+BL8 w/9/b+sdz2D8+Bsd2K5aj8hRjL3x6UJ/xCfj3k+jFrvf/E/CnmHdvKVq+xGLpFFD cyWMCSJRT7k5N4TCSKIfIXDssVa61+mqjwJ12vMys3jSgpl/QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+3Ege4Fi+NOexgitTtZhwjqCAiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2M4YTkwNGMtNWJmYy0z ZmFmLWJjMTQtZjg4OTUyZmM3MjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABH6hoyBCettOZJuSVROL4YS4k6/OKXxfIx/p+sfrucNM1ZT8wAiZdQu uEVURJf2oWA8b4Wuuxb8iCj/f+Y05g6ssDAt8Zei1k/dDlP97pkktu+NNWaTRCdp CROyYzr5dHwssbYgysetWQ/6Ig8px2oXgJr9q4G0aeOEmsDHMp72a9N7pTIW8io7 6I2RFvGQL57zS47h9cTbz8nyBcNW5MJbqURsXC6GKDnc04QaqDE9PGDtbZFjouUw 0EuGHXcMbaZyGlbVqvZHypzKWCJbNq4YMW+0/Wrg1WShokSGHZ+PQtuhLSqzfnmv 0FiU5xS1R8x1EMHVGzQPyLhhDZQCRsA= -----END CERTIFICATE-----Generated at Sat Jun 13 14:35:14 2026 by rpki-client