$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0407bc30-a500-36bb-8d65-948441a8aafa.roa File: 0407bc30-a500-36bb-8d65-948441a8aafa.roa (raw, json) Hash identifier: p8chG8gLD7tRfaW7rRLw2nXssMbXXZ+L5GRJINFl2Is= Subject key identifier: 72:58:58:E4:C1:36:23:17:0D:7A:1E:77:E2:CF:2B:D7:D4:24:9C:4C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D021790D8F951003B922A6480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0407bc30-a500-36bb-8d65-948441a8aafa.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 36625 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:90:d8:f9:51:00:3b:92:2a:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=52f64823-882a-4ddd-8f3c-eef584e956eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:37:f4:8a:db:79:46:19:ce:e9:0e:42:57:2a: e6:79:6b:e4:ac:48:34:f9:38:0e:50:9c:34:1b:f3: fc:8c:1b:35:08:cf:ba:fb:07:20:74:23:60:f2:3a: 77:cf:ec:b8:c9:4f:d3:84:8c:91:fb:8a:2a:b5:c5: 62:23:c7:b6:53:6e:0b:eb:f0:c5:bf:cd:7e:ac:41: fb:80:d8:12:45:c0:21:6c:77:b5:10:20:9e:0b:33: 34:a2:d3:1d:14:d5:ab:05:44:4b:b2:a4:08:47:2b: c1:19:23:f8:86:64:9a:26:dc:25:2b:9b:1e:5c:33: bc:40:b4:e4:bb:3c:ee:ff:6a:53:61:2d:62:f1:a7: 41:14:04:a6:cb:d5:08:bc:36:a2:1c:ca:e3:ab:31: 55:f4:d6:2d:97:35:b5:5c:96:5b:a3:93:e6:2e:23: ba:1c:2b:d8:d7:09:d1:bb:c2:1c:e5:ec:1e:64:c2: 34:f2:6b:d3:0b:84:50:27:8b:f6:e8:34:90:65:64: 37:a8:ad:1e:a9:4e:92:78:7b:b1:2c:ef:7e:61:85: 5e:91:75:ea:c4:b8:4d:1a:fe:7b:10:a4:c6:eb:4d: 25:f4:db:3b:bf:ef:fb:a2:8a:4f:f6:45:38:a7:bb: 19:6e:f7:1f:d4:1d:ea:00:38:36:f2:de:ba:e0:a2: a7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:58:58:E4:C1:36:23:17:0D:7A:1E:77:E2:CF:2B:D7:D4:24:9C:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0407bc30-a500-36bb-8d65-948441a8aafa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:af:1a:bc:15:4b:44:5d:57:71:c2:46:52:e4:28:ee:6b:10: 5b:26:20:0b:cc:e6:2c:9a:ce:2c:77:89:43:d1:c6:18:69:68: 97:e8:d3:97:7c:e9:45:01:5e:3c:1c:8c:3c:2d:49:58:eb:d2: 0e:ff:0a:f4:68:c9:db:06:c8:44:1f:63:63:7b:e1:8c:85:03: 07:41:29:27:3a:f6:97:07:14:6a:b7:a6:28:c4:c6:8c:2f:1a: 64:78:48:e4:62:f5:8a:60:a0:2d:13:12:8e:49:57:1c:20:16: a3:7c:ae:c3:eb:80:61:e4:56:79:04:fc:c1:06:e3:32:f7:7d: 04:3b:99:b4:63:7f:74:37:51:3c:ee:c3:fa:66:12:d1:fe:8b: 4d:87:e3:3f:3c:07:21:96:c6:5f:9b:b4:7e:cb:d9:28:43:a1: d9:d1:f7:ef:df:ca:89:ce:38:c0:56:92:c3:cd:ee:10:c0:f1: c4:f4:79:73:2f:92:9f:df:34:d5:94:65:76:46:ca:3b:e5:a5: 61:f0:0c:2d:a3:a2:43:b8:e3:12:00:22:3d:04:87:da:c5:31: 3c:36:60:8a:eb:e9:6e:5f:6e:d0:eb:f0:59:65:34:0b:70:02: 89:aa:fd:ef:6f:f7:fe:85:6b:5b:a9:9e:90:74:3f:4a:12:ee: b2:03:ed:7f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF5DY+VEAO5IqZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTJmNjQ4MjMtODgyYS00ZGRkLThmM2MtZWVmNTg0ZTk1NmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljf0itt5RhnO6Q5CVyrmeWvkrEg0+TgOUJw0 G/P8jBs1CM+6+wcgdCNg8jp3z+y4yU/ThIyR+4oqtcViI8e2U24L6/DFv81+rEH7 gNgSRcAhbHe1ECCeCzM0otMdFNWrBURLsqQIRyvBGSP4hmSaJtwlK5seXDO8QLTk uzzu/2pTYS1i8adBFASmy9UIvDaiHMrjqzFV9NYtlzW1XJZbo5PmLiO6HCvY1wnR u8Ic5eweZMI08mvTC4RQJ4v26DSQZWQ3qK0eqU6SeHuxLO9+YYVekXXqxLhNGv57 EKTG600l9Ns7v+/7oopP9kU4p7sZbvcf1B3qADg28t664KKnlwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHJYWOTBNiMXDXoed+LPK9fUJJxMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDQwN2JjMzAtYTUwMC0z NmJiLThkNjUtOTQ4NDQxYThhYWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQACrxq8FUtEXVdxwkZS5CjuaxBbJiALzOYsms4sd4lD0cYYaWiX6NOX fOlFAV48HIw8LUlY69IO/wr0aMnbBshEH2Nje+GMhQMHQSknOvaXBxRqt6YoxMaM LxpkeEjkYvWKYKAtExKOSVccIBajfK7D64Bh5FZ5BPzBBuMy930EO5m0Y390N1E8 7sP6ZhLR/otNh+M/PAchlsZfm7R+y9koQ6HZ0ffv38qJzjjAVpLDze4QwPHE9Hlz L5Kf3zTVlGV2Rso75aVh8Awto6JDuOMSACI9BIfaxTE8NmCK6+luX27Q6/BZZTQL cAKJqv3vb/f+hWtbqZ6QdD9KEu6yA+1/ -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:52 2026 by rpki-client