$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24ed3e63-ed3b-3209-9ec5-79a82b37c736.roa File: 24ed3e63-ed3b-3209-9ec5-79a82b37c736.roa (raw, json) Hash identifier: moQyu5QwqIwTqQQZQRqoOByZ06926gZnG703VgEZq70= Subject key identifier: DA:98:A2:96:C0:41:86:80:69:89:1F:B0:4D:53:C4:2D:F7:C2:5E:D8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217B6317419E8B9CEEFCAC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24ed3e63-ed3b-3209-9ec5-79a82b37c736.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 397201 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:b6:31:74:19:e8:b9:ce:ef:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=2fc3982f-3e8f-436b-aff2-c60af15dd5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5d:aa:26:8c:40:18:74:c1:e0:36:85:21:9c: 47:a7:e5:70:80:2e:ca:72:27:81:da:61:00:07:f8: 36:5b:a1:1b:c4:ab:35:04:74:72:7f:2e:0f:73:a3: de:57:03:38:11:0c:0f:75:7c:de:f9:b5:91:82:51: 27:0c:a3:d1:ed:8d:16:01:f8:49:11:56:58:a1:9e: 8b:97:0e:48:70:ff:cf:8d:3f:05:84:e1:2f:60:1e: 2c:fe:a0:ea:5d:b7:85:2c:53:ed:07:d9:c4:89:17: 7d:9f:75:ad:e2:10:61:98:ea:15:d6:63:01:22:28: 87:f3:23:6b:d7:fa:19:dc:30:3d:d3:ce:6b:61:96: 78:ae:15:9f:15:fc:7e:ba:b8:81:f0:16:e6:87:80: 4c:57:fb:bb:8c:1b:83:24:67:95:71:79:d5:57:97: bc:50:6b:f5:fa:99:94:78:ba:3e:d6:41:56:39:6f: 11:04:2b:e2:e5:27:c9:58:2a:19:0f:56:49:a1:f7: ca:03:ae:06:a7:81:b8:a3:94:01:17:62:47:ff:4a: 27:7a:d8:49:d4:87:3a:3f:9e:e2:9b:2f:1c:d2:05: 7c:cd:c4:c3:33:72:d3:fb:63:d0:1c:46:54:e2:42: da:03:45:09:c4:e6:a8:70:a2:c6:df:10:f9:f4:fd: 67:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:98:A2:96:C0:41:86:80:69:89:1F:B0:4D:53:C4:2D:F7:C2:5E:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24ed3e63-ed3b-3209-9ec5-79a82b37c736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:5e:f9:b9:2b:5d:90:0e:2e:61:98:d3:83:f6:19:f7:6c:56: 8c:85:64:66:22:03:33:17:79:36:82:18:77:0c:a0:9b:1f:3e: e3:1e:68:7b:22:ec:7f:e1:20:20:96:4b:db:7f:a4:ad:a3:95: 0b:5d:d4:9a:72:6a:ee:48:56:3d:52:d4:9b:da:a7:91:1a:26: 40:9d:ce:f2:2e:38:7e:59:22:36:ec:35:db:ca:e2:c7:80:f4: 99:24:e8:94:4b:47:53:23:cf:d2:72:fd:e4:2e:2d:d4:ab:55: c4:1e:9b:34:e9:42:e2:1a:26:55:65:10:53:40:85:44:9f:42: 50:77:74:8d:cf:be:de:a6:a8:0c:d7:a7:57:ca:8f:e4:79:f7: 8c:b9:c3:86:83:36:09:1c:ef:d9:54:f4:6e:ab:03:de:87:3f: 5d:15:9e:54:ed:a0:32:73:75:33:f2:d7:95:f1:90:5f:cf:a4: 8b:72:41:4e:d3:4b:c4:96:37:ef:0c:fa:fb:f2:66:61:47:72: 88:99:70:b4:ca:75:50:ed:29:25:1a:91:46:4f:e4:c9:ab:b2: 03:db:55:19:c6:2a:12:ba:08:7c:76:1d:6c:d5:9e:8a:bb:9b: d0:df:15:7e:12:c4:e3:9b:c7:ce:0b:e4:3c:37:22:56:98:60: b9:72:c4:a2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF7YxdBnouc7vysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MmZjMzk4MmYtM2U4Zi00MzZiLWFmZjItYzYwYWYxNWRkNWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF2qJoxAGHTB4DaFIZxHp+VwgC7KcieB2mEA B/g2W6EbxKs1BHRyfy4Pc6PeVwM4EQwPdXze+bWRglEnDKPR7Y0WAfhJEVZYoZ6L lw5IcP/PjT8FhOEvYB4s/qDqXbeFLFPtB9nEiRd9n3Wt4hBhmOoV1mMBIiiH8yNr 1/oZ3DA9085rYZZ4rhWfFfx+uriB8Bbmh4BMV/u7jBuDJGeVcXnVV5e8UGv1+pmU eLo+1kFWOW8RBCvi5SfJWCoZD1ZJoffKA64Gp4G4o5QBF2JH/0onethJ1Ic6P57i my8c0gV8zcTDM3LT+2PQHEZU4kLaA0UJxOaocKLG3xD59P1n7QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNqYopbAQYaAaYkfsE1TxC33wl7YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjRlZDNlNjMtZWQzYi0z MjA5LTllYzUtNzlhODJiMzdjNzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBSXvm5K12QDi5hmNOD9hn3bFaMhWRmIgMzF3k2ghh3DKCbHz7jHmh7 Iux/4SAglkvbf6Sto5ULXdSacmruSFY9UtSb2qeRGiZAnc7yLjh+WSI27DXbyuLH gPSZJOiUS0dTI8/Scv3kLi3Uq1XEHps06ULiGiZVZRBTQIVEn0JQd3SNz77epqgM 16dXyo/kefeMucOGgzYJHO/ZVPRuqwPehz9dFZ5U7aAyc3Uz8teV8ZBfz6SLckFO 00vEljfvDPr78mZhR3KImXC0ynVQ7SklGpFGT+TJq7ID21UZxioSugh8dh1s1Z6K u5vQ3xV+EsTjm8fOC+Q8NyJWmGC5csSi -----END CERTIFICATE-----Generated at Mon Mar 2 07:40:04 2026 by rpki-client