$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3c2d4d1a-113a-3fa3-8630-7fc6710166b6.roa File: 3c2d4d1a-113a-3fa3-8630-7fc6710166b6.roa (raw, json) Hash identifier: dpbFXk45/bywX8IIE9fd3HCbLbz2gjrz4vi8zk4ojrI= Subject key identifier: 2F:49:7D:0B:8F:15:E5:77:0A:2A:57:10:6D:AF:4F:5D:8D:E1:19:AF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217A296227C4CC9F3F60E40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3c2d4d1a-113a-3fa3-8630-7fc6710166b6.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396593 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:a2:96:22:7c:4c:c9:f3:f6:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=5aaf8af7-c887-4f70-b1eb-8292dcaf1be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b8:34:cc:ea:5b:82:03:7b:4d:c6:ee:21:d4: fc:f8:7f:73:88:79:86:05:3f:c6:8b:79:1e:07:62: 02:f9:3b:f2:65:24:0a:4a:26:bc:47:74:25:bb:df: ec:89:e9:1b:7a:08:24:7f:4b:15:0a:61:33:53:7b: 9d:9e:f3:24:2d:50:8e:16:b1:12:4c:1e:70:36:ff: 94:8a:92:09:6a:ac:2d:78:d8:98:6c:aa:18:d3:cb: c3:d5:56:dc:f4:b2:a4:89:91:75:4c:0b:fc:81:3e: 66:2e:6f:a7:92:a6:ba:81:43:78:15:b2:bd:d1:06: 62:07:bb:2f:bd:ed:b6:ba:b3:e0:d5:02:4b:c6:f9: aa:d3:89:dd:aa:96:5b:c1:15:ec:81:19:80:52:bf: ce:b7:91:d3:f1:4b:b8:cd:67:41:a9:be:d9:f1:9f: dc:44:ab:99:30:ef:ac:f0:d5:fb:b6:13:b2:73:44: fa:10:f0:63:ea:c3:52:57:f1:7a:7b:bf:a8:e6:59: 40:ad:3d:6c:15:ff:c7:0b:a3:f0:2b:4a:c0:d7:6f: 16:9d:72:58:3a:90:bf:a5:5e:0e:ac:af:72:db:93: 11:54:82:25:ce:e7:53:21:f0:01:a6:4f:46:e4:87: 09:5b:87:5a:c6:c2:7d:d0:d7:ea:bb:c8:25:45:cb: 7d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:49:7D:0B:8F:15:E5:77:0A:2A:57:10:6D:AF:4F:5D:8D:E1:19:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3c2d4d1a-113a-3fa3-8630-7fc6710166b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:56:0c:bc:29:03:4b:eb:9c:d6:8f:c5:06:9a:a3:62:99:80: 49:97:51:3e:90:52:f4:60:9a:dc:5c:fc:86:0d:95:30:65:9f: 3f:eb:ce:58:4a:c1:6f:01:55:a8:21:49:e3:a9:0c:46:fb:b1: 1e:a6:fd:05:c2:21:84:8f:15:ce:62:73:52:e6:0d:80:b3:74: bd:c8:3e:5b:a8:87:92:9e:de:93:f4:9a:42:20:36:6f:1c:cf: 23:4c:e8:51:a1:cb:89:ed:4f:34:4b:db:dc:9e:40:13:0a:bb: ec:96:e0:43:f0:5e:fa:d8:60:f5:92:e6:9b:9c:00:41:72:55: a7:7d:9a:57:2c:ec:01:61:8f:da:1f:57:a7:b0:21:7d:98:f5: 07:f9:b7:a7:53:b5:0b:d5:19:bc:76:58:61:28:57:44:c6:44: 8d:0b:57:d3:17:86:8f:fd:e1:f0:8a:41:6f:1e:35:24:39:c8: 7e:ef:15:95:79:68:4b:84:5a:86:dc:aa:e5:03:4f:07:4a:f4: c3:a5:8d:7e:50:a8:da:05:58:ca:4a:30:ea:6e:bd:65:0e:5e: e8:a9:3d:e2:0a:a7:d3:0e:94:14:ed:1d:24:5f:fa:fa:ba:6c: c3:41:2d:ab:6c:c7:5d:7c:bc:95:cb:06:c7:b3:13:1d:64:7d: 06:3d:15:49 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF6KWInxMyfP2DkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk NWFhZjhhZjctYzg4Ny00ZjcwLWIxZWItODI5MmRjYWYxYmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibg0zOpbggN7TcbuIdT8+H9ziHmGBT/Gi3ke B2IC+TvyZSQKSia8R3Qlu9/siekbeggkf0sVCmEzU3udnvMkLVCOFrESTB5wNv+U ipIJaqwteNiYbKoY08vD1Vbc9LKkiZF1TAv8gT5mLm+nkqa6gUN4FbK90QZiB7sv ve22urPg1QJLxvmq04ndqpZbwRXsgRmAUr/Ot5HT8Uu4zWdBqb7Z8Z/cRKuZMO+s 8NX7thOyc0T6EPBj6sNSV/F6e7+o5llArT1sFf/HC6PwK0rA128WnXJYOpC/pV4O rK9y25MRVIIlzudTIfABpk9G5IcJW4daxsJ90Nfqu8glRct9RQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC9JfQuPFeV3CipXEG2vT12N4RmvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2MyZDRkMWEtMTEzYS0z ZmEzLTg2MzAtN2ZjNjcxMDE2NmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAfVgy8KQNL65zWj8UGmqNimYBJl1E+kFL0YJrcXPyGDZUwZZ8/685Y SsFvAVWoIUnjqQxG+7Eepv0FwiGEjxXOYnNS5g2As3S9yD5bqIeSnt6T9JpCIDZv HM8jTOhRocuJ7U80S9vcnkATCrvsluBD8F762GD1kuabnABBclWnfZpXLOwBYY/a H1ensCF9mPUH+benU7UL1Rm8dlhhKFdExkSNC1fTF4aP/eHwikFvHjUkOch+7xWV eWhLhFqG3KrlA08HSvTDpY1+UKjaBVjKSjDqbr1lDl7oqT3iCqfTDpQU7R0kX/r6 umzDQS2rbMddfLyVywbHsxMdZH0GPRVJ -----END CERTIFICATE-----Generated at Mon Mar 2 09:40:42 2026 by rpki-client