$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1956df97-bede-379e-ba42-7e3c7185bb31.roa File: 1956df97-bede-379e-ba42-7e3c7185bb31.roa (raw, json) Hash identifier: xndGIjziUKs9SdHXVYmB8CTo9el9hZtJ89Too4IYpDA= Subject key identifier: D1:C1:94:EB:8B:3E:ED:61:AA:FB:7F:A8:8B:49:EE:B7:16:09:50:7D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217A2D13D27CCFB7AAAE040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1956df97-bede-379e-ba42-7e3c7185bb31.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 36624 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:a2:d1:3d:27:cc:fb:7a:aa:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=a64217e8-49f8-4c49-8aa1-4d76c6cbada6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fc:f3:f4:f0:52:32:df:6d:87:44:33:32:f2: 0d:65:b2:d0:5a:ef:a3:84:f8:0e:c2:1a:65:61:d7: aa:49:90:ef:64:37:d8:90:68:83:07:d6:1c:31:72: c4:a7:77:49:50:f1:d9:02:04:6f:23:6f:e9:af:ab: a7:8e:8b:6e:e1:cf:51:1e:4c:52:1f:f4:d5:72:51: d4:b8:9e:a5:69:e2:db:e4:39:cc:0a:35:85:2d:94: 9b:f0:67:54:a7:8e:5c:72:78:9a:f7:2d:bf:5d:bd: 2d:6a:9b:e5:c1:d8:46:fb:55:9e:26:ee:74:7c:81: fe:fd:53:62:c6:61:ca:32:b9:83:48:65:71:fa:eb: fa:85:f4:04:d8:67:99:f9:46:fe:cc:c5:71:c2:b3: 61:09:06:e3:ea:e9:79:68:0d:e0:d1:c9:56:56:fc: b9:f5:ed:a2:b7:c0:dd:f7:8b:04:61:f9:82:6d:52: 00:78:c5:ea:f4:d5:d3:a7:14:89:f4:54:1f:72:bc: 87:1a:cb:48:01:e9:f4:83:be:14:cf:a2:38:51:30: fe:92:14:9d:9e:4d:7b:01:fe:c4:35:ff:ed:a1:16: 19:90:ec:7b:30:0f:2e:49:9e:a5:75:1e:55:b1:6b: d6:6f:2e:f4:e8:4b:c8:fa:ab:9b:8f:13:23:46:d6: e9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C1:94:EB:8B:3E:ED:61:AA:FB:7F:A8:8B:49:EE:B7:16:09:50:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1956df97-bede-379e-ba42-7e3c7185bb31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:48:4b:1f:6f:4f:12:6e:7d:9f:b6:3c:e7:77:cc:32:9c:60: d9:7f:6b:1b:bf:d4:ed:d1:42:aa:fc:2e:48:8e:32:7a:74:ec: f5:1c:cb:42:8e:de:6f:1d:fa:76:70:22:93:04:0e:8f:2f:ae: 87:fa:43:75:59:ed:ae:cf:bf:32:47:f8:f2:18:41:a0:15:fc: cb:bc:a3:83:4c:52:53:f8:4b:f9:46:4d:c9:d4:72:11:06:40: 90:8a:4a:d1:5c:b2:68:d9:7b:26:fe:c4:44:db:01:80:1a:04: 5b:8a:dd:bb:04:92:b7:86:9b:66:8b:9b:28:b5:bf:44:f9:e8: 66:f4:a2:54:ed:69:db:16:b4:a8:b8:84:90:ff:4d:d3:32:4b: 9c:0b:86:f8:23:71:38:37:e6:36:61:01:6c:7d:e1:0e:68:84: 0f:c6:1b:f0:92:cf:34:ce:35:a6:5f:a5:51:fa:eb:77:71:b5: 5e:95:4d:4f:3f:1e:1f:cd:83:87:c9:a7:94:59:22:dc:bc:87: 12:ee:94:53:49:cc:6d:85:13:f8:3d:38:cf:51:0b:e2:d5:be: 0e:66:48:6d:a4:9a:19:b2:6c:35:1b:52:9f:f4:eb:90:42:41: 92:64:ce:32:26:d7:8f:26:00:df:ed:8e:c5:63:d0:50:de:60: aa:00:d0:d5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF6LRPSfM+3qq4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTY0MjE3ZTgtNDlmOC00YzQ5LThhYTEtNGQ3NmM2Y2JhZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvzz9PBSMt9th0QzMvINZbLQWu+jhPgOwhpl YdeqSZDvZDfYkGiDB9YcMXLEp3dJUPHZAgRvI2/pr6unjotu4c9RHkxSH/TVclHU uJ6laeLb5DnMCjWFLZSb8GdUp45ccnia9y2/Xb0tapvlwdhG+1WeJu50fIH+/VNi xmHKMrmDSGVx+uv6hfQE2GeZ+Ub+zMVxwrNhCQbj6ul5aA3g0clWVvy59e2it8Dd 94sEYfmCbVIAeMXq9NXTpxSJ9FQfcryHGstIAen0g74Uz6I4UTD+khSdnk17Af7E Nf/toRYZkOx7MA8uSZ6ldR5VsWvWby706EvI+qubjxMjRtbpEwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNHBlOuLPu1hqvt/qItJ7rcWCVB9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTk1NmRmOTctYmVkZS0z NzllLWJhNDItN2UzYzcxODViYjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBmSEsfb08Sbn2ftjznd8wynGDZf2sbv9Tt0UKq/C5IjjJ6dOz1HMtC jt5vHfp2cCKTBA6PL66H+kN1We2uz78yR/jyGEGgFfzLvKODTFJT+Ev5Rk3J1HIR BkCQikrRXLJo2Xsm/sRE2wGAGgRbit27BJK3hptmi5sotb9E+ehm9KJU7WnbFrSo uISQ/03TMkucC4b4I3E4N+Y2YQFsfeEOaIQPxhvwks80zjWmX6VR+ut3cbVelU1P Px4fzYOHyaeUWSLcvIcS7pRTScxthRP4PTjPUQvi1b4OZkhtpJoZsmw1G1Kf9OuQ QkGSZM4yJtePJgDf7Y7FY9BQ3mCqANDV -----END CERTIFICATE-----Generated at Mon Mar 2 02:26:25 2026 by rpki-client