$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8791ba6-a4aa-3c99-946f-e5bfe2ae836a.roa File: d8791ba6-a4aa-3c99-946f-e5bfe2ae836a.roa (raw, json) Hash identifier: eXr5MTTsgO7orEkW3eFFqqPL4HJBfEycMWt/SrCQTZY= Subject key identifier: 18:5A:9A:6E:9C:23:78:F2:25:0E:9B:DC:23:85:61:34:6D:19:19:BD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DFA70725E551E2EBD1ADA9A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8791ba6-a4aa-3c99-946f-e5bfe2ae836a.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 396575 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:72:5e:55:1e:2e:bd:1a:da:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=f93a1d61-e32b-400a-81f1-fa7b8d7ee67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:25:f4:dd:52:3e:fa:94:0c:27:07:f9:05:51: 28:9f:4f:f2:45:3c:d4:6c:33:a3:36:35:50:f6:44: 4d:78:4a:35:a5:0c:d9:80:66:02:3b:39:a2:57:72: 17:74:56:0a:97:1a:b0:53:8f:71:8a:2f:39:61:49: 3b:35:7c:97:1c:f0:ca:76:87:c7:7b:0d:91:17:d6: fb:03:09:8f:eb:9b:5d:80:5b:2f:16:94:59:a0:ba: 31:57:3f:8f:bb:21:0a:2e:ab:0c:47:15:70:09:fa: 0a:d6:2b:4a:0b:0c:76:10:8a:77:ea:e1:c9:94:53: 13:ce:02:55:10:8b:c8:8b:bd:06:93:82:0b:85:81: e5:40:38:8e:13:e2:ad:32:c9:c0:b9:31:55:2a:b8: 41:50:18:ea:da:cb:af:17:cc:4c:e9:3d:7c:1c:5a: 77:4b:9e:bd:b3:f8:6b:98:9a:4b:b6:2c:a7:14:ea: 4b:5e:39:3f:2b:45:6e:05:6a:cc:fa:a9:4b:8e:7f: bc:ba:2d:14:1f:5b:aa:8e:6f:80:bc:c0:a2:c8:fb: 42:96:f2:27:30:4e:40:2e:7d:08:40:1e:8b:47:71: 41:89:5d:8f:bb:c8:61:2a:b8:b4:70:f6:91:db:82: 6c:32:ff:c1:19:9c:54:96:3f:2d:c5:06:73:73:a8: f5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5A:9A:6E:9C:23:78:F2:25:0E:9B:DC:23:85:61:34:6D:19:19:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8791ba6-a4aa-3c99-946f-e5bfe2ae836a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:33:40:48:f0:4e:44:62:f1:3a:e7:5e:06:8f:b6:0b:8f:97: 74:dc:28:1a:51:bf:0e:23:3c:18:61:50:cf:83:b8:40:e2:ec: 5f:04:38:db:68:0c:c5:a9:57:a8:f7:e6:0b:33:b2:ba:4e:52: e5:c3:33:7f:ad:35:3b:9d:c8:f6:b0:81:4a:03:7b:2d:4b:bd: 99:b1:bd:df:93:7c:b0:b1:c8:19:e5:27:90:40:92:08:13:08: 83:b1:9c:55:51:f5:33:df:b5:fb:23:92:5d:b8:4a:d2:a2:3c: 57:59:9b:c0:67:59:d5:a6:a9:8c:ff:fe:99:75:72:c8:39:64: ce:e7:ce:b8:39:44:c8:33:aa:06:75:fe:46:53:75:bf:c5:e8: 51:27:6c:eb:73:96:eb:98:2c:c1:74:f9:aa:f4:51:f2:7b:97: 9a:c0:26:64:90:c4:fa:24:c3:82:c9:b8:13:cf:53:75:eb:29: 42:89:63:28:85:85:93:aa:e1:76:56:45:78:25:b1:32:43:bc: 21:02:6e:e1:30:2b:63:a8:b4:20:ae:fe:f5:1f:3a:ed:29:41: 0d:a2:ab:a7:e8:d1:ae:24:eb:7e:28:e4:46:d5:60:ea:d4:21: 50:aa:f4:5c:f0:95:2a:3d:1f:e9:d6:bd:ae:00:ac:ab:e1:a8: 1e:9c:1c:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cHJeVR4uvRramgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk ZjkzYTFkNjEtZTMyYi00MDBhLTgxZjEtZmE3YjhkN2VlNjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyX03VI++pQMJwf5BVEon0/yRTzUbDOjNjVQ 9kRNeEo1pQzZgGYCOzmiV3IXdFYKlxqwU49xii85YUk7NXyXHPDKdofHew2RF9b7 AwmP65tdgFsvFpRZoLoxVz+PuyEKLqsMRxVwCfoK1itKCwx2EIp36uHJlFMTzgJV EIvIi70Gk4ILhYHlQDiOE+KtMsnAuTFVKrhBUBjq2suvF8xM6T18HFp3S569s/hr mJpLtiynFOpLXjk/K0VuBWrM+qlLjn+8ui0UH1uqjm+AvMCiyPtClvInME5ALn0I QB6LR3FBiV2Pu8hhKri0cPaR24JsMv/BGZxUlj8txQZzc6j1DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhamm6cI3jyJQ6b3COFYTRtGRm9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDg3OTFiYTYtYTRhYS0z Yzk5LTk0NmYtZTViZmUyYWU4MzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgzQEjwTkRi8TrnXgaPtguPl3TcKBpRvw4jPBhhUM+DuEDi7F8EONto DMWpV6j35gszsrpOUuXDM3+tNTudyPawgUoDey1LvZmxvd+TfLCxyBnlJ5BAkggT CIOxnFVR9TPftfsjkl24StKiPFdZm8BnWdWmqYz//pl1csg5ZM7nzrg5RMgzqgZ1 /kZTdb/F6FEnbOtzluuYLMF0+ar0UfJ7l5rAJmSQxPokw4LJuBPPU3XrKUKJYyiF hZOq4XZWRXglsTJDvCECbuEwK2OotCCu/vUfOu0pQQ2iq6fo0a4k634o5EbVYOrU IVCq9FzwlSo9H+nWva4ArKvhqB6cHEA= -----END CERTIFICATE-----Generated at Sat Jun 13 14:23:14 2026 by rpki-client