$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3893d1e1-2218-38f4-82f9-5af50426a787.roa File: 3893d1e1-2218-38f4-82f9-5af50426a787.roa (raw, json) Hash identifier: VedDEHmXjbOjHMmhskWzzvRgWBVpplL44nHS3OQLlZk= Subject key identifier: 6C:25:DD:48:BC:8A:9C:A3:A4:AF:80:FF:A3:73:D4:65:30:8B:E7:D9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217A0F5D7F2EBAB96D82380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3893d1e1-2218-38f4-82f9-5af50426a787.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396589 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:a0:f5:d7:f2:eb:ab:96:d8:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=508f6b45-5ea2-4310-9568-9a1a9bbd0bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f6:42:c6:16:91:6a:a9:c4:fd:7c:05:ca:1f: ef:70:92:ad:db:08:49:9e:48:05:86:ba:15:09:b0: b3:ed:e5:06:cf:56:24:92:c5:ba:59:08:b4:c2:4c: 1c:c6:9b:66:7c:6e:39:81:98:ab:fc:75:7f:9b:68: 03:62:3a:0d:e5:8d:60:d1:06:08:50:db:96:bd:8f: 4c:1f:d0:fd:8a:f6:9b:41:73:32:8a:2c:9b:2c:76: 41:62:bc:71:c2:2a:e4:0a:19:52:54:c1:02:25:71: 1f:29:5b:44:f4:07:61:eb:99:67:1c:a7:bf:c5:1d: cc:b8:1d:cc:f3:17:76:0d:98:7d:33:2d:47:87:b8: 8a:3e:78:a3:96:1b:29:ec:eb:4b:e4:44:d5:09:2e: 6d:a7:67:e8:bb:ac:1a:ad:9f:29:4b:ff:48:2d:d0: 00:7e:97:7a:b4:af:0a:f4:6e:6c:6d:b8:54:45:27: 36:69:55:e0:6f:3b:e4:68:a9:05:03:ea:b8:f2:ae: 94:fc:b9:28:32:35:db:c4:df:aa:87:2b:a1:71:e9: 4a:c5:e7:3b:43:17:b1:50:62:6e:12:ae:4e:01:3a: 58:4d:f7:24:f9:f8:95:b2:af:20:b2:6d:90:56:5b: c1:e9:55:4b:4c:1f:d1:2b:ee:e9:7f:23:60:0a:2c: de:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:25:DD:48:BC:8A:9C:A3:A4:AF:80:FF:A3:73:D4:65:30:8B:E7:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3893d1e1-2218-38f4-82f9-5af50426a787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f8:34:f0:73:f2:73:81:3a:4a:dd:9f:e1:9f:81:12:2a:ca: a5:d4:58:69:a0:8e:b2:cf:e9:f6:5f:4b:54:e6:43:03:b4:97: f2:73:be:f4:98:77:46:48:01:97:1c:07:97:04:b2:7c:89:ba: c4:57:d4:ad:9f:34:2f:f2:a3:9c:cf:6b:a8:43:bf:1a:88:27: 95:ad:b4:20:d5:e1:79:c7:07:2b:ff:01:50:ab:45:2e:d9:c2: c4:63:e1:90:8b:0e:43:36:cf:e1:a7:c2:48:0a:53:8b:5e:32: 4d:2f:3e:81:50:e7:ab:72:d8:37:f3:02:b8:a9:a5:b4:2b:71: 63:91:92:db:b9:84:cd:1d:52:6d:c6:a5:98:00:06:ed:b4:a0: c9:b1:d0:65:17:b2:d5:fb:28:ca:c1:c9:c7:03:e7:36:07:7a: 04:6c:8a:59:27:86:d7:2a:15:29:85:e7:e9:f1:59:d6:11:97: 7b:fa:a3:50:dd:2b:56:6f:fd:c2:e4:72:cd:f8:0c:d7:79:b5: 45:70:3a:f1:a8:cb:2c:28:55:e1:85:4d:5b:17:f7:7f:6b:eb: a4:3a:d7:9b:c4:9e:3f:65:73:33:12:8d:8c:ae:25:8f:12:1e: a1:60:8d:75:ba:94:e0:5d:a5:fa:5e:cf:51:4a:54:16:5b:29: e1:64:90:67 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF6D11/Lrq5bYI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTA4ZjZiNDUtNWVhMi00MzEwLTk1NjgtOWExYTliYmQwYmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/ZCxhaRaqnE/XwFyh/vcJKt2whJnkgFhroV CbCz7eUGz1YkksW6WQi0wkwcxptmfG45gZir/HV/m2gDYjoN5Y1g0QYIUNuWvY9M H9D9ivabQXMyiiybLHZBYrxxwirkChlSVMECJXEfKVtE9Adh65lnHKe/xR3MuB3M 8xd2DZh9My1Hh7iKPnijlhsp7OtL5ETVCS5tp2fou6warZ8pS/9ILdAAfpd6tK8K 9G5sbbhURSc2aVXgbzvkaKkFA+q48q6U/LkoMjXbxN+qhyuhcelKxec7QxexUGJu Eq5OATpYTfck+fiVsq8gsm2QVlvB6VVLTB/RK+7pfyNgCizefwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGwl3Ui8ipyjpK+A/6Nz1GUwi+fZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzg5M2QxZTEtMjIxOC0z OGY0LTgyZjktNWFmNTA0MjZhNzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCM+DTwc/JzgTpK3Z/hn4ESKsql1FhpoI6yz+n2X0tU5kMDtJfyc770 mHdGSAGXHAeXBLJ8ibrEV9StnzQv8qOcz2uoQ78aiCeVrbQg1eF5xwcr/wFQq0Uu 2cLEY+GQiw5DNs/hp8JIClOLXjJNLz6BUOerctg38wK4qaW0K3FjkZLbuYTNHVJt xqWYAAbttKDJsdBlF7LV+yjKwcnHA+c2B3oEbIpZJ4bXKhUphefp8VnWEZd7+qNQ 3StWb/3C5HLN+AzXebVFcDrxqMssKFXhhU1bF/d/a+ukOtebxJ4/ZXMzEo2MriWP Eh6hYI11upTgXaX6Xs9RSlQWWynhZJBn -----END CERTIFICATE-----Generated at Mon Mar 2 04:41:03 2026 by rpki-client