$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30c6aa14-6cf3-3108-8a08-15b180361154.roa File: 30c6aa14-6cf3-3108-8a08-15b180361154.roa (raw, json) Hash identifier: M8YDg6B5Zvg/0F9XnoD3bauIX7oewBpJFvOCby3zPJw= Subject key identifier: B7:EA:5F:18:00:1E:E3:F9:36:DC:0D:73:9F:FB:4E:B4:1B:99:80:DE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217C0FF42657D9E00247300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30c6aa14-6cf3-3108-8a08-15b180361154.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 397210 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:c0:ff:42:65:7d:9e:00:24:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=7ac5614a-1157-421d-93e2-73c1008f9534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b3:c0:3a:56:26:2d:a6:5c:45:ed:b8:22:47: 5b:be:60:b5:59:57:f7:be:d3:86:8b:a1:fe:90:63: da:0a:06:a0:6b:f2:e2:b3:85:a1:f6:3d:a5:bc:7b: 48:5c:8a:a7:01:94:75:aa:91:39:0d:39:82:f3:7a: 0c:e2:1b:2f:be:49:8a:3f:11:0c:f1:7c:4e:62:b3: bb:bd:15:bc:99:a9:56:b2:97:a4:4a:74:df:77:f7: 96:66:8b:e3:db:a4:6e:e3:bb:43:44:eb:d1:09:cd: ea:94:5f:f0:24:b6:d7:96:80:b1:f7:69:56:90:a7: 37:c6:1a:af:5d:d4:67:20:8f:d0:1c:b8:f5:23:cc: 71:a2:3d:70:91:82:fd:0f:4f:f9:5c:f7:d3:eb:3e: 71:3a:ac:b2:36:e4:b1:00:ee:82:11:4a:9e:55:9c: e8:c3:7d:c2:11:aa:58:d5:eb:68:c5:ae:8c:d8:8d: cb:31:5d:db:1c:fc:13:34:73:48:22:37:f2:b7:76: 4c:a9:53:ac:8f:5b:7b:f8:83:ef:94:ac:8a:ec:a7: 22:b4:9a:1c:51:50:0b:6d:90:73:0c:90:b4:c9:0f: fd:60:ae:87:ac:bd:f3:0e:18:c1:be:e7:07:d6:cb: d6:a2:06:17:8c:c4:c8:b9:61:3c:16:65:9c:2d:91: 72:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EA:5F:18:00:1E:E3:F9:36:DC:0D:73:9F:FB:4E:B4:1B:99:80:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30c6aa14-6cf3-3108-8a08-15b180361154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:72:05:e4:83:2d:d4:b5:ec:9f:29:74:2b:67:26:53:3e:bd: 85:2a:52:bd:4a:70:1b:30:61:26:26:f2:0b:e2:17:f1:8f:4a: 54:74:c6:c1:04:e4:b9:c7:85:ad:6f:6d:b9:d8:5b:7c:6f:0d: 7b:d4:bf:82:0d:5b:b4:71:d0:bf:89:8d:df:bb:8c:3d:70:5e: 11:a2:2c:bb:f0:13:f1:4d:24:ef:f6:49:39:c1:ad:dd:e1:a3: 78:41:c8:cd:e5:a2:89:09:d4:25:8b:14:15:48:0e:a8:60:48: 88:5f:0f:87:63:4b:54:04:10:c5:a5:a8:86:0d:1c:44:a4:27: 51:c0:51:d9:82:c9:27:05:18:63:57:94:57:ec:a4:3d:ad:4d: b7:f8:23:a0:98:80:70:44:82:ae:41:b0:7c:f8:8e:32:99:9a: 8a:25:97:6e:c4:cd:6e:6c:35:e9:9c:15:a7:0c:a2:e5:d8:92: e0:b6:38:7e:09:48:4e:d4:67:ce:b1:87:3a:59:c7:41:71:93: 79:7e:e3:d0:4a:4e:53:52:7d:db:09:d6:f7:23:89:90:2b:5b: cd:35:1e:d6:32:0e:a9:d7:30:68:b3:46:85:9b:2f:bf:ce:59: ac:50:08:e1:05:e1:49:c8:3a:72:d6:b1:ac:10:33:5c:da:39: 4d:a5:3a:34 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF8D/QmV9ngAkcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk N2FjNTYxNGEtMTE1Ny00MjFkLTkzZTItNzNjMTAwOGY5NTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7PAOlYmLaZcRe24IkdbvmC1WVf3vtOGi6H+ kGPaCgaga/Lis4Wh9j2lvHtIXIqnAZR1qpE5DTmC83oM4hsvvkmKPxEM8XxOYrO7 vRW8malWspekSnTfd/eWZovj26Ru47tDROvRCc3qlF/wJLbXloCx92lWkKc3xhqv XdRnII/QHLj1I8xxoj1wkYL9D0/5XPfT6z5xOqyyNuSxAO6CEUqeVZzow33CEapY 1etoxa6M2I3LMV3bHPwTNHNIIjfyt3ZMqVOsj1t7+IPvlKyK7KcitJocUVALbZBz DJC0yQ/9YK6HrL3zDhjBvucH1svWogYXjMTIuWE8FmWcLZFypQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLfqXxgAHuP5NtwNc5/7TrQbmYDeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzBjNmFhMTQtNmNmMy0z MTA4LThhMDgtMTViMTgwMzYxMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAIcgXkgy3UteyfKXQrZyZTPr2FKlK9SnAbMGEmJvIL4hfxj0pUdMbB BOS5x4Wtb2252Ft8bw171L+CDVu0cdC/iY3fu4w9cF4Roiy78BPxTSTv9kk5wa3d 4aN4QcjN5aKJCdQlixQVSA6oYEiIXw+HY0tUBBDFpaiGDRxEpCdRwFHZgsknBRhj V5RX7KQ9rU23+COgmIBwRIKuQbB8+I4ymZqKJZduxM1ubDXpnBWnDKLl2JLgtjh+ CUhO1GfOsYc6WcdBcZN5fuPQSk5TUn3bCdb3I4mQK1vNNR7WMg6p1zBos0aFmy+/ zlmsUAjhBeFJyDpy1rGsEDNc2jlNpTo0 -----END CERTIFICATE-----Generated at Mon Mar 2 02:39:53 2026 by rpki-client