$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e60d50-57d9-350d-bd89-c1257d4d7364.roa File: 28e60d50-57d9-350d-bd89-c1257d4d7364.roa (raw, json) Hash identifier: IX2OkNxZBqWKJ8wjMYGkZ7LZ3uXiJrp6ABUmZHO29pU= Subject key identifier: CA:56:68:A2:23:FA:11:85:99:8A:22:52:0C:58:F4:58:51:C7:6C:0E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217BBFA77569C3EA5A22930 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e60d50-57d9-350d-bd89-c1257d4d7364.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396582 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:bb:fa:77:56:9c:3e:a5:a2:29:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=19ba2282-76ee-4cb6-88a9-6fcb78eb7890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:24:62:38:35:05:9b:8e:d7:1f:be:70:de:29: 09:20:0a:12:cf:79:b7:c9:1e:46:a6:4a:c4:01:63: a6:5f:ce:21:f9:cc:9e:34:10:37:48:13:f6:94:7a: 6b:1f:6f:83:47:53:d6:5d:b9:7a:08:98:47:83:a0: 17:c4:40:99:3d:58:37:1d:eb:4a:eb:e4:ff:63:38: bb:93:53:29:0c:f5:92:29:d6:47:bd:5b:b7:83:dd: f3:9d:29:00:d8:f2:85:d4:fb:18:36:fc:b1:dd:84: e8:24:8e:a6:d6:0b:a6:e6:84:f2:3c:0f:0d:7d:20: 6c:9b:60:b4:85:36:74:42:55:8a:5f:3c:66:6b:75: b1:4e:38:9f:74:a4:91:e3:dd:23:61:52:a4:e4:e2: 4c:7f:88:88:35:aa:63:17:d8:fa:b6:7a:7d:bf:0a: a5:1e:8b:89:27:df:1a:5a:7b:f7:97:30:19:07:8d: 61:d4:94:11:df:1f:d4:b9:e8:63:42:00:49:a4:65: ad:9a:f4:fa:11:c6:ab:0f:55:70:64:32:1e:e2:2e: f3:39:3c:b5:0f:ae:24:a4:07:c5:c0:81:d4:13:4f: 8b:4c:25:e7:55:bd:8f:49:62:fb:c7:5b:f5:4e:49: 88:16:a6:31:78:95:f7:1b:1b:29:23:70:a5:16:03: 25:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:56:68:A2:23:FA:11:85:99:8A:22:52:0C:58:F4:58:51:C7:6C:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e60d50-57d9-350d-bd89-c1257d4d7364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:c7:5c:97:76:63:9c:c4:26:17:d1:7f:ce:59:76:83:e3:19: 73:83:d2:b2:85:f3:cb:d7:a8:1d:d5:70:67:b0:4a:1f:7b:a2: f5:1a:f9:b5:42:0c:98:68:b1:53:32:31:b7:ff:2f:75:81:76: 10:aa:c4:2a:65:54:d9:cd:2c:ca:33:77:51:f3:40:71:34:58: b5:4d:3a:09:0e:e6:99:b4:cc:4b:0c:b6:79:9c:d7:15:fb:5c: fe:bf:17:f2:92:65:ce:3f:71:43:4a:29:b9:44:c1:4b:49:97: 0d:5c:83:ac:7d:b7:58:de:50:47:b9:5d:74:e0:57:c0:27:83: 5b:9f:17:c9:2c:be:98:c2:7f:90:64:e7:bb:30:05:00:2a:58: 44:88:e2:3b:b3:b1:51:9e:28:0f:f0:5e:38:ec:fd:b1:15:aa: 45:ed:c4:09:17:44:f8:12:35:69:37:20:07:df:70:b2:79:82: f4:db:d1:84:56:f1:06:dc:33:1c:76:1c:fb:83:e5:fe:c0:23: 20:34:33:bf:7a:5f:50:8c:a3:da:23:f7:df:91:f6:63:cc:97: 52:24:2b:cb:c1:62:a7:42:2e:4b:87:d5:d3:8a:01:dc:a3:1e: ea:b7:5d:f4:38:18:06:e2:f7:58:3f:17:d4:ae:ef:8b:bc:7c: e0:be:3f:46 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF7v6d1acPqWiKTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MTliYTIyODItNzZlZS00Y2I2LTg4YTktNmZjYjc4ZWI3ODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniRiODUFm47XH75w3ikJIAoSz3m3yR5GpkrE AWOmX84h+cyeNBA3SBP2lHprH2+DR1PWXbl6CJhHg6AXxECZPVg3HetK6+T/Yzi7 k1MpDPWSKdZHvVu3g93znSkA2PKF1PsYNvyx3YToJI6m1gum5oTyPA8NfSBsm2C0 hTZ0QlWKXzxma3WxTjifdKSR490jYVKk5OJMf4iINapjF9j6tnp9vwqlHouJJ98a Wnv3lzAZB41h1JQR3x/UuehjQgBJpGWtmvT6EcarD1VwZDIe4i7zOTy1D64kpAfF wIHUE0+LTCXnVb2PSWL7x1v1TkmIFqYxeJX3GxspI3ClFgMleQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMpWaKIj+hGFmYoiUgxY9FhRx2wOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjhlNjBkNTAtNTdkOS0z NTBkLWJkODktYzEyNTdkNGQ3MzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCLx1yXdmOcxCYX0X/OWXaD4xlzg9KyhfPL16gd1XBnsEofe6L1Gvm1 QgyYaLFTMjG3/y91gXYQqsQqZVTZzSzKM3dR80BxNFi1TToJDuaZtMxLDLZ5nNcV +1z+vxfykmXOP3FDSim5RMFLSZcNXIOsfbdY3lBHuV104FfAJ4NbnxfJLL6Ywn+Q ZOe7MAUAKlhEiOI7s7FRnigP8F447P2xFapF7cQJF0T4EjVpNyAH33CyeYL029GE VvEG3DMcdhz7g+X+wCMgNDO/el9QjKPaI/ffkfZjzJdSJCvLwWKnQi5Lh9XTigHc ox7qt130OBgG4vdYPxfUru+LvHzgvj9G -----END CERTIFICATE-----Generated at Mon Mar 2 02:25:42 2026 by rpki-client