$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/321b1d50-0cd2-33bb-b9f8-5d9196825799.roa File: 321b1d50-0cd2-33bb-b9f8-5d9196825799.roa (raw, json) Hash identifier: gJ/AENzZrt3BCHvvj31UEvVyxjIIh0roDsEGoH/fbCM= Subject key identifier: 80:88:0E:C9:93:B2:9D:E9:BF:33:41:69:A9:BA:F5:FB:73:83:F8:16 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217957CBBC2B1F90FADD500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/321b1d50-0cd2-33bb-b9f8-5d9196825799.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396545 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:95:7c:bb:c2:b1:f9:0f:ad:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=1430637f-e11d-46e2-9ff2-9ef0fc7833ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5a:58:31:d6:43:30:d2:66:39:63:28:5c:3a: 33:de:ae:7e:df:f4:27:cf:2a:59:06:f3:22:25:0e: 8e:1e:97:ce:d7:c6:35:0b:6c:08:63:7c:ee:96:d2: 3b:69:5c:a8:44:ef:bd:00:c6:27:e5:f8:86:3e:02: 15:2d:e8:a7:d8:25:6b:ac:9c:c7:2a:38:76:38:b5: ce:39:6b:be:5b:98:f1:29:a1:bb:e7:6f:a3:42:20: 7e:b8:2d:2d:f4:20:ac:f3:ca:e1:f6:7d:bc:e6:7c: 1c:2c:93:bc:c2:56:43:4c:f1:a1:c3:28:33:06:ff: 9c:a1:39:31:ae:49:70:f1:a4:8a:00:c7:34:d0:b2: 23:81:d5:ec:2e:3b:69:88:22:52:84:f3:9e:06:13: 5f:37:d6:a5:69:2c:b0:f8:7a:63:00:9f:fb:1c:12: b7:a4:27:bd:8b:cc:50:cf:c0:0b:cc:d5:63:0e:97: f3:f8:e7:e7:68:8a:6a:27:77:57:22:d4:4a:d1:fa: 97:33:5c:70:9a:de:a2:4c:fe:2b:49:2b:ee:a8:b4: 2a:61:f4:7b:fc:89:0d:a1:07:8d:13:ed:3c:1a:22: 5c:d8:85:4e:bf:17:ac:bb:9a:de:89:5a:a9:2e:7a: b2:f2:54:46:f3:1e:2b:e0:57:83:a2:7e:44:52:ad: 89:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:88:0E:C9:93:B2:9D:E9:BF:33:41:69:A9:BA:F5:FB:73:83:F8:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/321b1d50-0cd2-33bb-b9f8-5d9196825799.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:c4:c3:78:0a:46:e1:b1:4b:11:95:dc:dd:70:62:a7:c0:a2: df:f6:af:37:c6:02:7a:7a:7d:6e:60:54:30:0d:2f:33:c8:2b: f3:e3:2b:9b:6f:d7:ab:43:7a:95:b7:1a:25:22:21:af:da:87: dc:06:af:8d:b2:d1:29:86:45:08:2e:53:37:a9:38:9b:b9:28: d4:e9:b9:2d:ac:fd:79:87:61:d4:72:83:92:5b:23:c8:c4:58: 40:c1:51:9e:fb:a2:38:5d:18:b0:67:ca:5e:4d:bb:28:43:de: 0b:36:4b:3b:b0:7a:48:5f:9c:25:11:2e:c7:9e:77:bd:ca:52: 7a:78:72:d4:82:6e:b9:ab:a3:ae:bc:29:8f:e1:65:d3:b3:8b: 3b:dd:33:5b:cd:21:54:a5:b4:7a:e7:0d:64:3a:a2:84:96:21: 01:bf:75:75:d8:d2:1c:e3:d9:aa:96:01:c3:c3:66:e9:c9:5c: 81:37:84:a2:48:93:90:98:f2:5d:de:f7:a0:00:a1:55:dc:44: 96:62:d1:65:92:67:c9:03:05:74:90:e7:d7:30:7d:8b:5e:9e: a0:e8:b7:54:d8:31:9a:83:d6:f5:03:44:be:74:fe:4d:c8:31: 96:34:41:d4:73:6f:37:ee:cb:ed:a0:74:ef:a9:35:a4:65:31: a6:20:99:a7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF5V8u8Kx+Q+t1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MTQzMDYzN2YtZTExZC00NmUyLTlmZjItOWVmMGZjNzgzM2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1pYMdZDMNJmOWMoXDoz3q5+3/QnzypZBvMi JQ6OHpfO18Y1C2wIY3zultI7aVyoRO+9AMYn5fiGPgIVLein2CVrrJzHKjh2OLXO OWu+W5jxKaG752+jQiB+uC0t9CCs88rh9n285nwcLJO8wlZDTPGhwygzBv+coTkx rklw8aSKAMc00LIjgdXsLjtpiCJShPOeBhNfN9alaSyw+HpjAJ/7HBK3pCe9i8xQ z8ALzNVjDpfz+OfnaIpqJ3dXItRK0fqXM1xwmt6iTP4rSSvuqLQqYfR7/IkNoQeN E+08GiJc2IVOvxesu5reiVqpLnqy8lRG8x4r4FeDon5EUq2JawIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFICIDsmTsp3pvzNBaam69ftzg/gWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzIxYjFkNTAtMGNkMi0z M2JiLWI5ZjgtNWQ5MTk2ODI1Nzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjxMN4CkbhsUsRldzdcGKnwKLf9q83xgJ6en1uYFQwDS8zyCvz4yub b9erQ3qVtxolIiGv2ofcBq+NstEphkUILlM3qTibuSjU6bktrP15h2HUcoOSWyPI xFhAwVGe+6I4XRiwZ8peTbsoQ94LNks7sHpIX5wlES7Hnne9ylJ6eHLUgm65q6Ou vCmP4WXTs4s73TNbzSFUpbR65w1kOqKEliEBv3V12NIc49mqlgHDw2bpyVyBN4Si SJOQmPJd3vegAKFV3ESWYtFlkmfJAwV0kOfXMH2LXp6g6LdU2DGag9b1A0S+dP5N yDGWNEHUc2837svtoHTvqTWkZTGmIJmn -----END CERTIFICATE-----Generated at Mon Mar 2 04:06:46 2026 by rpki-client