$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40f7365f-a160-3129-ad81-7d7e4ba7a70f.roa File: 40f7365f-a160-3129-ad81-7d7e4ba7a70f.roa (raw, json) Hash identifier: 8b7PpAzeYStE/MRxs7lgyiQkLdYB7OQmq9RjcM4p6qg= Subject key identifier: 30:A8:6C:99:F4:8F:F2:9E:9D:A9:93:69:86:92:E9:C1:DD:C2:B8:21 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D021795D59F3E58769476F280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40f7365f-a160-3129-ad81-7d7e4ba7a70f.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 36620 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:95:d5:9f:3e:58:76:94:76:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=58354098-83dc-4580-be8f-1172e8f27b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ce:ff:77:d9:4c:0d:8a:d8:fb:03:06:33:e6: cf:57:08:40:f4:d9:c1:2e:24:3a:93:73:4d:f2:21: de:88:f3:c6:a5:45:7d:ce:dc:a6:4e:26:27:07:6c: 62:95:04:66:07:fc:a7:36:67:24:19:a8:b9:77:43: f8:2b:a2:88:e2:61:c7:db:2d:27:f6:b8:d8:17:2a: 31:45:0d:f3:1e:aa:e1:3b:a6:c4:4d:fa:b9:6e:87: 7a:45:b8:55:b4:25:4c:91:a4:ad:5d:1f:15:b4:12: fa:4e:a1:2a:c7:63:6d:b4:c4:10:7b:68:9e:5b:7d: 24:f9:e1:40:6c:31:b7:ef:4e:52:2c:65:00:a7:ff: 76:a6:e1:3c:4c:bd:4f:c3:b7:18:74:40:14:69:c3: fc:46:17:16:f0:14:aa:54:44:3b:6f:92:43:d4:d5: 31:ba:69:fc:df:61:38:6c:fd:c4:4e:c6:bf:d9:2d: ae:dc:e2:67:9b:9b:10:cd:8d:cc:33:c7:41:52:1a: b1:2d:a9:95:38:b3:93:c9:01:f7:34:cd:97:c8:a6: 1a:14:ce:b5:17:2c:d6:4f:bf:66:4b:83:8e:c0:86: c0:c5:95:d2:77:d2:13:e2:9f:56:58:cc:11:13:5e: b4:1b:19:4b:85:3d:12:93:82:26:84:01:f6:8b:4e: 2c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A8:6C:99:F4:8F:F2:9E:9D:A9:93:69:86:92:E9:C1:DD:C2:B8:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40f7365f-a160-3129-ad81-7d7e4ba7a70f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:4c:5a:0e:e3:a1:b3:d0:44:c5:ef:70:8c:2a:23:2f:fb:4c: 44:25:e2:3d:a6:ee:e4:fa:41:bc:d6:e1:9f:b5:9a:26:6d:76: d0:1f:17:3c:47:98:ef:20:0b:11:44:f1:86:df:3e:36:ee:67: 68:25:7a:ce:aa:ff:33:40:95:f2:e4:98:b1:1c:8e:d9:0d:18: 94:f6:19:de:d4:a2:77:16:94:75:19:3e:2c:16:2f:e1:00:29: 7f:d4:d7:62:49:a9:0a:ff:55:95:27:60:93:dc:91:57:d6:52: 40:dd:19:07:7e:e3:b0:96:1a:89:4c:32:f1:c7:60:40:12:17: d0:97:99:52:a8:45:92:bd:3c:a0:67:6f:b3:17:bc:b7:ac:6d: 8f:8d:c4:a7:19:c0:ed:eb:df:b6:30:39:34:7b:eb:3b:0c:ef: f0:0f:93:71:8f:cb:d6:81:7a:6a:c7:20:67:3e:e4:02:51:27: 3a:41:8d:d2:cd:6c:f0:3f:3c:75:ab:30:80:ab:0f:6c:73:40: 3d:49:67:8d:93:9c:5e:cd:2c:9f:f3:fc:98:8b:be:07:1a:61: df:e3:59:11:f0:28:fe:b0:18:10:45:7d:2f:00:50:c7:2e:05: bb:e6:35:13:eb:f4:ac:53:d8:c7:6b:69:7d:93:24:2e:47:35: c2:41:88:47 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF5XVnz5YdpR28oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTgzNTQwOTgtODNkYy00NTgwLWJlOGYtMTE3MmU4ZjI3Yjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc7/d9lMDYrY+wMGM+bPVwhA9NnBLiQ6k3NN 8iHeiPPGpUV9ztymTiYnB2xilQRmB/ynNmckGai5d0P4K6KI4mHH2y0n9rjYFyox RQ3zHqrhO6bETfq5bod6RbhVtCVMkaStXR8VtBL6TqEqx2NttMQQe2ieW30k+eFA bDG3705SLGUAp/92puE8TL1Pw7cYdEAUacP8RhcW8BSqVEQ7b5JD1NUxumn832E4 bP3ETsa/2S2u3OJnm5sQzY3MM8dBUhqxLamVOLOTyQH3NM2XyKYaFM61FyzWT79m S4OOwIbAxZXSd9IT4p9WWMwRE160GxlLhT0Sk4ImhAH2i04s9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDCobJn0j/KenamTaYaS6cHdwrghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDBmNzM2NWYtYTE2MC0z MTI5LWFkODEtN2Q3ZTRiYTdhNzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBITFoO46Gz0ETF73CMKiMv+0xEJeI9pu7k+kG81uGftZombXbQHxc8 R5jvIAsRRPGG3z427mdoJXrOqv8zQJXy5JixHI7ZDRiU9hne1KJ3FpR1GT4sFi/h ACl/1NdiSakK/1WVJ2CT3JFX1lJA3RkHfuOwlhqJTDLxx2BAEhfQl5lSqEWSvTyg Z2+zF7y3rG2PjcSnGcDt69+2MDk0e+s7DO/wD5Nxj8vWgXpqxyBnPuQCUSc6QY3S zWzwPzx1qzCAqw9sc0A9SWeNk5xezSyf8/yYi74HGmHf41kR8Cj+sBgQRX0vAFDH LgW75jUT6/SsU9jHa2l9kyQuRzXCQYhH -----END CERTIFICATE-----Generated at Mon Mar 2 02:30:54 2026 by rpki-client