$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/04295114-d569-3b51-8f9e-4ba4ee41f486.roa File: 04295114-d569-3b51-8f9e-4ba4ee41f486.roa (raw, json) Hash identifier: qDD/ZLJ2iCpXr9MplcbYxMaNK4SlstkAN25Ilo3m+1Q= Subject key identifier: CC:58:DB:D5:F2:E3:D2:7B:47:B4:4D:CB:12:42:03:20:EE:96:B5:E5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217B44544CE8D35F0954D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/04295114-d569-3b51-8f9e-4ba4ee41f486.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396549 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:b4:45:44:ce:8d:35:f0:95:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=aaf01ac1-c355-4ef6-81a3-457b09944bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:04:d0:ab:a6:40:5a:f7:e6:b5:97:37:f6:c4: 29:c9:06:29:10:7d:45:f6:64:fc:c9:4a:46:0c:8d: c3:14:d7:9f:f5:4c:d9:ba:0c:74:ad:9b:70:39:13: 67:2e:17:77:c2:03:cd:6f:1d:0f:e3:2b:6c:3a:45: 37:cd:cb:be:f8:a6:64:21:8f:6b:c5:5f:7f:94:f9: 04:a7:54:1b:20:83:2b:fa:2f:91:56:43:6d:42:c7: 55:49:30:14:0f:3c:be:20:b7:94:aa:74:6d:1b:49: f4:12:20:15:53:6f:60:4b:13:ab:e4:7d:bd:de:e7: c8:fb:9e:12:c7:17:f4:9b:56:ea:f1:90:a1:66:19: dd:98:13:e3:34:9d:ee:30:14:43:ae:9a:be:5b:3b: 18:3e:ae:8f:94:48:2c:11:63:3e:f4:de:55:03:f4: 9e:27:f6:ba:e5:ac:c7:fd:f8:7d:63:e6:55:2b:c7: 5c:93:18:c0:85:27:7f:b5:3f:eb:f7:c6:31:f8:84: ef:9b:c1:24:50:d8:7e:7a:86:a3:7b:ff:ac:a2:1d: fe:c0:bb:4e:0f:3a:69:b4:ba:8f:f2:c3:6e:d7:f5: 72:da:91:60:b2:a4:04:8e:39:ab:ab:51:ee:4d:19: 18:bd:ea:4a:60:e7:1a:87:cf:66:f0:ee:4f:00:dd: 11:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:58:DB:D5:F2:E3:D2:7B:47:B4:4D:CB:12:42:03:20:EE:96:B5:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/04295114-d569-3b51-8f9e-4ba4ee41f486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:b3:0f:d4:82:42:d3:2d:2a:dc:7c:51:35:83:ee:89:e0:f7: bd:30:77:13:94:2f:ec:76:9c:56:6c:79:82:49:94:28:a4:96: e8:b1:e3:1b:da:25:fc:49:b2:6f:d0:26:b1:db:fd:1e:63:c1: 68:bb:51:e1:a4:e3:cf:28:e0:af:33:fa:12:ba:2f:e4:1c:e9: fd:ea:6b:9f:d9:95:d0:5a:1f:3b:9c:da:da:0c:79:9d:ac:08: ed:76:75:34:f3:44:18:d1:95:36:44:f1:e9:64:fc:91:59:42: ac:64:e3:0c:9f:07:ee:51:a5:b8:53:d9:24:76:5a:5a:1a:54: 08:22:d0:56:44:13:f9:a2:91:8f:45:ee:07:ec:96:05:12:20: 0e:6e:e7:a3:ce:2a:b3:21:39:4b:60:29:a3:8b:fe:3a:f3:ff: 42:26:df:d1:65:01:0d:bf:9a:1a:81:10:e6:5d:3e:7b:bb:72: 53:0e:f7:08:74:ca:c3:bf:6e:58:7a:88:94:b3:fc:49:5f:23: ba:c9:f3:5f:51:16:12:7b:c8:c4:35:dc:71:2b:65:26:76:4e: 93:5a:45:2b:11:95:9c:12:55:b6:b2:24:a0:6f:7e:cc:88:43: 33:79:b5:9a:f1:dd:51:38:8a:97:c9:79:93:75:ea:7d:bc:84: 9b:ae:6f:86 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF7RFRM6NNfCVTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk YWFmMDFhYzEtYzM1NS00ZWY2LTgxYTMtNDU3YjA5OTQ0YmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwTQq6ZAWvfmtZc39sQpyQYpEH1F9mT8yUpG DI3DFNef9UzZugx0rZtwORNnLhd3wgPNbx0P4ytsOkU3zcu++KZkIY9rxV9/lPkE p1QbIIMr+i+RVkNtQsdVSTAUDzy+ILeUqnRtG0n0EiAVU29gSxOr5H293ufI+54S xxf0m1bq8ZChZhndmBPjNJ3uMBRDrpq+WzsYPq6PlEgsEWM+9N5VA/SeJ/a65azH /fh9Y+ZVK8dckxjAhSd/tT/r98Yx+ITvm8EkUNh+eoaje/+soh3+wLtODzpptLqP 8sNu1/Vy2pFgsqQEjjmrq1HuTRkYvepKYOcah89m8O5PAN0RXQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMxY29Xy49J7R7RNyxJCAyDulrXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDQyOTUxMTQtZDU2OS0z YjUxLThmOWUtNGJhNGVlNDFmNDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCFsw/UgkLTLSrcfFE1g+6J4Pe9MHcTlC/sdpxWbHmCSZQopJboseMb 2iX8SbJv0Cax2/0eY8Fou1HhpOPPKOCvM/oSui/kHOn96muf2ZXQWh87nNraDHmd rAjtdnU080QY0ZU2RPHpZPyRWUKsZOMMnwfuUaW4U9kkdlpaGlQIItBWRBP5opGP Re4H7JYFEiAObuejziqzITlLYCmji/468/9CJt/RZQENv5oagRDmXT57u3JTDvcI dMrDv25YeoiUs/xJXyO6yfNfURYSe8jENdxxK2Umdk6TWkUrEZWcElW2siSgb37M iEMzebWa8d1ROIqXyXmTdep9vISbrm+G -----END CERTIFICATE-----Generated at Mon Mar 2 02:30:46 2026 by rpki-client