$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ce0ffa6-2acc-3a1e-be14-e9a787f85f64.roa File: 3ce0ffa6-2acc-3a1e-be14-e9a787f85f64.roa (raw, json) Hash identifier: 7W7izYpiDchPLDLxPjMF5cjo2fI5jgFQANOIQOf90fQ= Subject key identifier: DE:FD:0C:C8:95:FF:26:E2:57:DE:06:38:91:94:6B:86:00:B4:16:07 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D021796B71D72ED3C2D6547D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ce0ffa6-2acc-3a1e-be14-e9a787f85f64.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396542 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:96:b7:1d:72:ed:3c:2d:65:47:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=cb64a876-e9eb-46b2-8880-8f6fa30c90dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a4:a2:b4:8c:9f:37:54:cc:37:c9:92:85:77: b8:f9:fb:ff:a4:53:5d:1c:7a:3c:97:51:2f:b8:10: 3d:d5:32:94:40:98:09:01:4f:30:49:d8:34:d2:65: 77:04:c2:47:99:b1:56:d1:64:df:cf:aa:91:67:43: e1:bb:bc:8e:0f:2d:55:cf:8b:c9:4b:ac:6b:6b:74: 3d:60:44:eb:04:44:4a:ae:1b:40:c1:58:f1:72:ee: 65:53:d5:22:e9:95:61:04:70:30:48:8f:23:94:dd: 9a:a6:cf:50:43:d4:94:a5:eb:09:7d:cf:6d:c5:cc: d9:da:68:69:62:a7:8d:3d:bd:f3:95:c2:83:f7:d0: f1:fe:f0:cb:ed:71:61:8b:82:99:36:80:0f:f5:f5: 7c:1c:41:30:67:e4:09:6c:f7:00:9e:cd:f1:e9:6a: ce:36:fa:6c:1c:9f:c3:43:e8:3d:9d:34:56:61:c3: af:a9:44:b1:70:be:7f:88:1e:6b:9e:12:1f:99:25: af:48:45:a0:2d:58:e3:d5:35:0f:7a:ce:3e:bf:f0: bf:57:26:2f:d9:82:85:1a:4d:9d:2d:4a:37:fd:26: ae:b2:9f:c8:ec:a2:e2:cd:85:b9:54:b1:12:4c:30: de:cd:e3:db:41:99:ca:ff:57:b4:fa:ba:16:a6:c7: e6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FD:0C:C8:95:FF:26:E2:57:DE:06:38:91:94:6B:86:00:B4:16:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ce0ffa6-2acc-3a1e-be14-e9a787f85f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:2a:04:ad:45:d8:45:15:d2:b8:b1:bd:15:86:68:c3:f0:0b: 20:5f:7d:d3:e8:c5:62:73:52:92:10:2a:ba:1a:19:58:60:ec: de:fc:af:d3:c4:f9:ee:24:df:36:46:4b:f8:96:a7:97:90:b1: bd:da:32:62:6f:28:f9:12:97:71:98:ae:49:57:be:68:83:56: 41:0f:ee:00:b2:e2:5c:d5:8d:0a:a7:82:11:28:2d:9d:85:d5: c7:34:40:d8:e4:6b:87:06:ef:37:dc:55:1a:ef:24:49:77:0d: 51:e9:d6:e6:58:87:e5:88:a9:5a:ad:47:18:b6:c5:56:97:be: 9a:1f:5f:5a:65:6f:5b:ff:63:8d:34:95:fc:17:a3:71:6e:2a: d3:2c:5a:f9:47:da:d6:ff:1f:6a:5d:ad:71:61:f5:ba:d5:ae: ca:b5:e3:87:01:20:dc:16:1a:95:e5:a3:ee:95:fb:20:40:dd: e3:8c:8b:20:16:82:96:f5:6f:71:94:8d:20:c6:f6:8b:59:f4: 42:b9:5a:7a:26:dd:29:2e:41:10:2e:08:81:63:a5:4f:e4:3c: cc:28:bd:fa:21:1c:2d:40:57:e4:48:22:2c:c3:1e:59:c5:4b: d7:df:47:e8:cd:e7:84:8b:20:3f:36:98:8e:3b:7d:0d:c2:b5: 7c:04:f9:de -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF5a3HXLtPC1lR9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk Y2I2NGE4NzYtZTllYi00NmIyLTg4ODAtOGY2ZmEzMGM5MGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqSitIyfN1TMN8mShXe4+fv/pFNdHHo8l1Ev uBA91TKUQJgJAU8wSdg00mV3BMJHmbFW0WTfz6qRZ0Phu7yODy1Vz4vJS6xra3Q9 YETrBERKrhtAwVjxcu5lU9Ui6ZVhBHAwSI8jlN2aps9QQ9SUpesJfc9txczZ2mhp YqeNPb3zlcKD99Dx/vDL7XFhi4KZNoAP9fV8HEEwZ+QJbPcAns3x6WrONvpsHJ/D Q+g9nTRWYcOvqUSxcL5/iB5rnhIfmSWvSEWgLVjj1TUPes4+v/C/VyYv2YKFGk2d LUo3/Sausp/I7KLizYW5VLESTDDezePbQZnK/1e0+roWpsfmGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN79DMiV/ybiV94GOJGUa4YAtBYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2NlMGZmYTYtMmFjYy0z YTFlLWJlMTQtZTlhNzg3Zjg1ZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBwKgStRdhFFdK4sb0VhmjD8AsgX33T6MVic1KSECq6GhlYYOze/K/T xPnuJN82Rkv4lqeXkLG92jJibyj5EpdxmK5JV75og1ZBD+4AsuJc1Y0Kp4IRKC2d hdXHNEDY5GuHBu833FUa7yRJdw1R6dbmWIfliKlarUcYtsVWl76aH19aZW9b/2ON NJX8F6NxbirTLFr5R9rW/x9qXa1xYfW61a7KteOHASDcFhqV5aPulfsgQN3jjIsg FoKW9W9xlI0gxvaLWfRCuVp6Jt0pLkEQLgiBY6VP5DzMKL36IRwtQFfkSCIswx5Z xUvX30fozeeEiyA/NpiOO30NwrV8BPne -----END CERTIFICATE-----Generated at Mon Mar 2 03:56:59 2026 by rpki-client