$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f0aac1e-83cb-3953-814a-150b44c1756d.roa File: 0f0aac1e-83cb-3953-814a-150b44c1756d.roa (raw, json) Hash identifier: T4Q/i5QKFrJPyUwp1lhIU3s3O9iybgRzXdH1XngSNPU= Subject key identifier: 61:C9:94:71:44:ED:DC:44:A7:38:83:41:B0:7B:02:C2:3A:C7:9A:BB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217B6BAA295CFA8190F6580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f0aac1e-83cb-3953-814a-150b44c1756d.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 397198 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:b6:ba:a2:95:cf:a8:19:0f:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=679f3428-dc48-4eb3-be8d-6aea2ad4feec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:81:8b:af:8a:08:a9:e8:02:ae:d4:ca:7d:b6: 11:3a:da:ed:1a:42:16:ab:1d:4a:a1:2d:d2:87:1b: 82:f9:1f:e3:d2:79:f5:c2:7e:3b:9f:d0:c7:22:cb: a5:28:b5:d4:aa:b9:47:65:da:97:8c:ee:69:dd:19: 4c:05:8b:a8:12:93:73:09:88:15:ed:ce:2a:21:d0: 53:5b:50:80:07:5c:1e:79:1b:91:a8:ba:d9:8c:57: de:57:85:50:96:ad:43:78:2d:d6:1d:7e:f2:84:73: 30:39:df:18:2b:67:19:b1:78:3d:a7:0a:bf:99:57: 6c:4c:0c:09:fa:f8:b0:4d:a1:51:33:06:a7:16:55: b5:9d:d4:c2:a3:db:d5:72:74:1f:89:61:d6:29:9f: 9e:dc:aa:89:b6:50:83:e1:c3:dd:66:e3:18:38:e0: ff:33:19:bb:a0:12:1b:29:6b:14:b6:84:ba:21:b4: 6c:93:91:33:70:98:26:a2:54:11:11:93:51:75:d0: d9:ca:6f:9a:e3:9d:04:52:4a:a1:45:23:13:32:e1: fb:82:f1:c6:b0:99:c1:9a:f7:c4:08:d8:a5:52:6b: 47:af:c6:94:be:a3:b9:9c:ba:32:34:42:db:b7:17: e7:f9:e1:41:88:98:89:ce:09:17:a1:da:f3:40:43: 92:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C9:94:71:44:ED:DC:44:A7:38:83:41:B0:7B:02:C2:3A:C7:9A:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f0aac1e-83cb-3953-814a-150b44c1756d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:5e:dc:de:cd:07:30:02:1c:86:75:eb:33:7d:64:db:cd:2b: f8:0d:47:ab:bc:8f:d5:16:42:c6:6c:b2:32:ef:61:a0:63:ff: 18:86:60:81:8b:24:e6:bd:9e:fe:57:1a:9c:c3:1c:e0:45:24: 81:69:dd:e0:4a:42:39:2f:e5:ba:cb:93:b4:c1:f9:95:74:ec: 69:df:85:02:d8:48:79:37:59:31:85:9b:05:39:6e:6f:17:3d: 71:c2:ca:c4:12:82:42:f5:52:77:f1:6a:c2:35:83:2c:04:f8: 2d:1f:17:96:e0:3e:fa:b3:12:ce:cf:f8:07:da:3a:5e:b4:84: 32:eb:13:49:40:38:b4:5c:de:34:24:b7:83:6c:e1:ea:68:4b: 75:86:f9:dc:23:01:b3:40:65:f5:d1:42:8c:40:00:3b:6d:d7: 69:52:45:9f:57:63:fb:cc:c6:25:fb:3e:36:38:08:b7:b6:1b: f6:12:67:a5:d2:de:c3:64:66:55:22:fe:5d:36:5d:b0:b9:df: 21:14:2b:09:fa:b1:d7:61:bb:d7:c3:6d:68:5d:32:0a:42:01: 55:69:b5:78:83:0a:21:78:f2:4f:b5:fb:0a:6f:d0:48:27:45: 0d:17:08:49:53:30:99:03:96:90:75:be:cb:25:b9:ff:bc:09: d3:0c:83:94 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF7a6opXPqBkPZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk Njc5ZjM0MjgtZGM0OC00ZWIzLWJlOGQtNmFlYTJhZDRmZWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoGLr4oIqegCrtTKfbYROtrtGkIWqx1KoS3S hxuC+R/j0nn1wn47n9DHIsulKLXUqrlHZdqXjO5p3RlMBYuoEpNzCYgV7c4qIdBT W1CAB1weeRuRqLrZjFfeV4VQlq1DeC3WHX7yhHMwOd8YK2cZsXg9pwq/mVdsTAwJ +viwTaFRMwanFlW1ndTCo9vVcnQfiWHWKZ+e3KqJtlCD4cPdZuMYOOD/Mxm7oBIb KWsUtoS6IbRsk5EzcJgmolQREZNRddDZym+a450EUkqhRSMTMuH7gvHGsJnBmvfE CNilUmtHr8aUvqO5nLoyNELbtxfn+eFBiJiJzgkXodrzQEOSZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGHJlHFE7dxEpziDQbB7AsI6x5q7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGYwYWFjMWUtODNjYi0z OTUzLTgxNGEtMTUwYjQ0YzE3NTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAwXtzezQcwAhyGdeszfWTbzSv4DUervI/VFkLGbLIy72GgY/8YhmCB iyTmvZ7+VxqcwxzgRSSBad3gSkI5L+W6y5O0wfmVdOxp34UC2Eh5N1kxhZsFOW5v Fz1xwsrEEoJC9VJ38WrCNYMsBPgtHxeW4D76sxLOz/gH2jpetIQy6xNJQDi0XN40 JLeDbOHqaEt1hvncIwGzQGX10UKMQAA7bddpUkWfV2P7zMYl+z42OAi3thv2Emel 0t7DZGZVIv5dNl2wud8hFCsJ+rHXYbvXw21oXTIKQgFVabV4gwohePJPtfsKb9BI J0UNFwhJUzCZA5aQdb7LJbn/vAnTDIOU -----END CERTIFICATE-----Generated at Mon Mar 2 04:35:35 2026 by rpki-client