$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e25184-321f-3ecc-b868-4a0baf30cf4b.roa File: 43e25184-321f-3ecc-b868-4a0baf30cf4b.roa (raw, json) Hash identifier: fyARZmUCaiGQOy5yK1AnSVj5eUtC0j1huS2odu8XYcM= Subject key identifier: 37:1B:DF:E6:20:78:67:EB:7C:5D:A6:F8:27:DA:54:9E:C9:DB:A1:E1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217B0A75A024DF391DF2A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e25184-321f-3ecc-b868-4a0baf30cf4b.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396571 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:b0:a7:5a:02:4d:f3:91:df:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=76dd135c-0737-4e00-aefa-6a58b37a656e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:47:de:af:9c:ca:ce:fa:98:2a:e3:35:16:bb: ef:34:7d:ea:ec:5a:c3:b4:e9:9e:5a:87:83:f5:b6: 06:63:3b:82:9f:35:65:f9:db:ee:6e:0a:32:2e:b9: 84:f8:26:45:60:c2:92:5e:3e:05:82:71:8f:df:19: 3f:4a:54:e2:aa:be:c9:9a:64:26:0a:35:d5:8b:44: db:02:60:7f:fe:16:6e:f2:fb:0f:78:52:c5:ea:b6: 81:61:57:10:8a:df:41:61:c6:27:e7:b6:dd:70:5b: 77:79:3b:56:f2:be:40:e2:3e:6d:c1:b8:05:e8:9c: 36:7d:6e:ad:95:51:a0:7e:e3:6e:0e:48:c9:c8:45: 51:85:8a:37:f1:5c:70:39:bb:db:bc:1e:bd:6f:1e: 4e:d1:a7:fe:ee:40:a0:ba:6a:67:fe:62:80:51:fe: fd:c6:1c:94:0c:c0:e1:48:1f:73:da:9f:51:61:c1: c3:13:43:76:9a:11:f2:b4:73:29:ee:99:64:41:c4: 09:38:20:6e:17:b0:6c:41:05:11:22:84:55:db:9d: 20:0f:41:2d:89:5a:2a:89:2b:2d:99:07:6b:fa:7f: 07:3d:90:99:b6:60:af:62:70:8d:c0:6b:30:ff:0c: c3:55:de:05:86:64:b5:4d:b3:1f:9d:14:24:97:e1: 9b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1B:DF:E6:20:78:67:EB:7C:5D:A6:F8:27:DA:54:9E:C9:DB:A1:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e25184-321f-3ecc-b868-4a0baf30cf4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:65:47:54:3f:64:b0:fe:f3:a3:21:c0:5c:54:87:b2:3f:0a: 07:12:5f:35:8d:f1:f8:be:2d:0e:7e:01:84:22:a9:34:14:3c: 6b:76:cd:5f:d9:82:da:73:d4:ec:9d:5d:d7:26:af:5b:97:67: a9:0e:67:ce:6a:1a:d9:62:14:93:1e:62:29:3e:a3:c6:56:b3: ec:12:32:af:45:e5:85:0e:76:d4:dd:3f:0a:ae:39:f8:96:25: 6f:5a:1c:91:c7:a2:33:a7:f6:b8:60:ba:b6:b3:83:5c:b3:15: de:4f:e8:ef:b7:98:35:24:86:a1:52:2b:a0:7d:df:c7:ee:fa: 5e:72:c9:e2:eb:6b:8c:30:e5:9c:d7:2d:6a:f1:ba:08:0b:ac: 57:b2:5a:04:d1:88:37:a7:74:5d:28:81:5b:d5:e7:87:75:e6: c4:a6:23:3e:de:fd:8f:77:93:d9:c4:7a:0a:57:62:6e:31:ec: 8e:f0:18:3e:e6:06:4f:cf:62:2a:77:e8:c8:6a:59:13:33:72: ca:03:d0:b4:02:14:ad:b5:07:6e:bd:a3:2c:b4:30:27:be:51: 1d:f9:f9:58:dc:e3:4d:62:ad:4c:e5:2b:e7:1d:e8:c1:fc:b2: d3:42:13:13:2c:20:e3:81:af:ce:2a:28:9f:71:0e:51:13:49: d8:87:cc:70 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF7CnWgJN85HfKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk NzZkZDEzNWMtMDczNy00ZTAwLWFlZmEtNmE1OGIzN2E2NTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUfer5zKzvqYKuM1FrvvNH3q7FrDtOmeWoeD 9bYGYzuCnzVl+dvubgoyLrmE+CZFYMKSXj4FgnGP3xk/SlTiqr7JmmQmCjXVi0Tb AmB//hZu8vsPeFLF6raBYVcQit9BYcYn57bdcFt3eTtW8r5A4j5twbgF6Jw2fW6t lVGgfuNuDkjJyEVRhYo38VxwObvbvB69bx5O0af+7kCgumpn/mKAUf79xhyUDMDh SB9z2p9RYcHDE0N2mhHytHMp7plkQcQJOCBuF7BsQQURIoRV250gD0EtiVoqiSst mQdr+n8HPZCZtmCvYnCNwGsw/wzDVd4FhmS1TbMfnRQkl+Gb/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDcb3+YgeGfrfF2m+CfaVJ7J26HhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNlMjUxODQtMzIxZi0z ZWNjLWI4NjgtNGEwYmFmMzBjZjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBGZUdUP2Sw/vOjIcBcVIeyPwoHEl81jfH4vi0OfgGEIqk0FDxrds1f 2YLac9TsnV3XJq9bl2epDmfOahrZYhSTHmIpPqPGVrPsEjKvReWFDnbU3T8Krjn4 liVvWhyRx6Izp/a4YLq2s4NcsxXeT+jvt5g1JIahUiugfd/H7vpecsni62uMMOWc 1y1q8boIC6xXsloE0Yg3p3RdKIFb1eeHdebEpiM+3v2Pd5PZxHoKV2JuMeyO8Bg+ 5gZPz2Iqd+jIalkTM3LKA9C0AhSttQduvaMstDAnvlEd+flY3ONNYq1M5SvnHejB /LLTQhMTLCDjga/OKiifcQ5RE0nYh8xw -----END CERTIFICATE-----Generated at Mon Mar 2 09:08:38 2026 by rpki-client