$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43a7c405-ee0a-3c23-850e-06437fe7b730.roa File: 43a7c405-ee0a-3c23-850e-06437fe7b730.roa (raw, json) Hash identifier: oYvIXI3xpGcMADHA1K0ApRDCJ9DFPV+3wzIapgloc80= Subject key identifier: 4E:30:74:FE:FB:2F:F4:D5:E6:D1:EE:FD:E1:D8:18:AA:97:9E:99:81 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217A12471C2D848641BDDC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43a7c405-ee0a-3c23-850e-06437fe7b730.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396555 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:a1:24:71:c2:d8:48:64:1b:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=5c1bf3d8-12a7-4afe-b576-130b4a6316db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0a:6d:c9:b7:d8:6d:3d:fd:99:66:bf:19:a5: 35:df:f4:24:a8:20:4f:0d:23:17:8d:79:69:f2:bb: 80:12:db:3b:6e:4a:5b:f4:cc:f9:43:a0:e0:3b:22: 4d:11:69:90:2d:d1:e2:9f:99:22:76:23:f6:eb:4f: 3b:fd:8d:c0:2a:af:5e:38:81:b3:a7:cb:92:31:c0: 69:03:48:e9:6b:b5:5d:45:ed:49:f3:e8:4a:09:ca: 22:14:e7:59:e5:39:d2:f3:29:f5:03:ff:02:ef:16: d5:6c:9b:b8:47:28:b9:56:77:fa:fe:9b:c7:c5:cc: ca:50:b1:4a:a0:35:a0:6e:6e:e5:f8:d8:3d:fd:7a: 69:17:fe:b1:d8:6d:86:4e:3a:b4:5f:51:4a:d6:c0: c9:e3:b7:a9:31:ac:8d:25:53:b2:fe:de:bb:f2:6d: 0d:52:18:fa:72:10:00:b2:e7:b7:7b:4e:d6:b2:bc: bd:63:11:ab:ce:4c:d5:c5:bc:c1:28:d2:ad:40:f2: ef:0d:d2:31:ea:82:f8:c0:a8:39:b6:58:a3:9f:fc: 3d:41:9b:60:64:a6:b2:f0:24:7a:5b:01:d5:67:27: 47:4b:a2:45:6e:41:e6:63:1d:78:a8:70:1d:32:70: 29:f8:41:06:d4:70:2a:c7:08:45:7b:37:05:bc:14: e2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:30:74:FE:FB:2F:F4:D5:E6:D1:EE:FD:E1:D8:18:AA:97:9E:99:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43a7c405-ee0a-3c23-850e-06437fe7b730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:30:45:b9:c7:06:90:51:6d:2d:c3:c5:82:df:5a:0e:ae:14: c2:b5:51:46:81:37:f3:0d:30:1c:9d:6d:ff:c0:28:46:94:ba: 57:bc:23:90:5a:22:55:57:d5:4c:3f:23:0e:01:29:69:cf:2e: 3a:c9:e6:0d:0f:96:9f:14:25:1f:e7:a8:9a:0e:2b:36:50:c6: 5f:18:e2:fe:b8:4f:dc:83:b6:c1:0c:68:9e:9d:99:3b:6a:29: 96:3b:7a:11:0d:12:cb:13:62:eb:01:78:65:75:3d:19:6b:67: c9:3f:21:0e:26:dc:e2:e8:45:22:d6:93:fe:ea:c8:16:1c:01: 99:3c:9c:b4:f3:09:13:90:3a:0a:5e:06:b9:a1:48:d3:dd:d1: 80:dd:ec:ea:2e:d6:92:7e:67:4b:cc:22:9f:bf:c0:60:3c:cd: 8a:c3:be:84:e6:b8:8d:86:45:ff:5a:70:05:2b:dc:c1:f9:f6: 7e:d6:b1:dc:22:b5:12:7e:92:30:b3:97:cc:81:ec:c3:90:fd: df:13:a4:a6:b7:44:41:b4:e6:fc:02:1e:a5:01:c1:bf:9d:c6: 85:b3:d7:58:f2:63:7c:5f:97:f1:ef:77:55:2e:9a:a5:9a:17: c9:18:92:e0:74:ec:1a:1f:f5:c5:ce:d6:86:dc:10:68:9f:cc: 46:c9:7d:d3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF6EkccLYSGQb3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk NWMxYmYzZDgtMTJhNy00YWZlLWI1NzYtMTMwYjRhNjMxNmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQptybfYbT39mWa/GaU13/QkqCBPDSMXjXlp 8ruAEts7bkpb9Mz5Q6DgOyJNEWmQLdHin5kidiP26087/Y3AKq9eOIGzp8uSMcBp A0jpa7VdRe1J8+hKCcoiFOdZ5TnS8yn1A/8C7xbVbJu4Ryi5Vnf6/pvHxczKULFK oDWgbm7l+Ng9/XppF/6x2G2GTjq0X1FK1sDJ47epMayNJVOy/t678m0NUhj6chAA sue3e07Wsry9YxGrzkzVxbzBKNKtQPLvDdIx6oL4wKg5tlijn/w9QZtgZKay8CR6 WwHVZydHS6JFbkHmYx14qHAdMnAp+EEG1HAqxwhFezcFvBTi7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE4wdP77L/TV5tHu/eHYGKqXnpmBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNhN2M0MDUtZWUwYS0z YzIzLTg1MGUtMDY0MzdmZTdiNzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBrMEW5xwaQUW0tw8WC31oOrhTCtVFGgTfzDTAcnW3/wChGlLpXvCOQ WiJVV9VMPyMOASlpzy46yeYND5afFCUf56iaDis2UMZfGOL+uE/cg7bBDGienZk7 aimWO3oRDRLLE2LrAXhldT0Za2fJPyEOJtzi6EUi1pP+6sgWHAGZPJy08wkTkDoK Xga5oUjT3dGA3ezqLtaSfmdLzCKfv8BgPM2Kw76E5riNhkX/WnAFK9zB+fZ+1rHc IrUSfpIws5fMgezDkP3fE6Smt0RBtOb8Ah6lAcG/ncaFs9dY8mN8X5fx73dVLpql mhfJGJLgdOwaH/XFztaG3BBon8xGyX3T -----END CERTIFICATE-----Generated at Mon Mar 2 04:17:17 2026 by rpki-client