$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d969e38-8862-3acc-8f97-40db9f1796e3.roa File: 4d969e38-8862-3acc-8f97-40db9f1796e3.roa (raw, json) Hash identifier: 3UXaYarm1xI17xUvkFbG8OeSH6KxC5aKLHZ3swwtPQE= Subject key identifier: EC:95:72:20:C2:0B:9F:3B:DA:C7:23:8B:02:4D:64:10:C9:F5:99:70 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D02179BCA8A2EFF5B4E3CE300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d969e38-8862-3acc-8f97-40db9f1796e3.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396578 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:9b:ca:8a:2e:ff:5b:4e:3c:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=d26e0bcc-d575-4816-9fee-1897089b501d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9b:cf:03:04:a4:60:27:d2:af:95:73:f0:c0: 2b:91:46:b4:dd:95:ec:a1:e9:03:3d:1f:e0:56:20: 1a:22:f1:80:a3:97:50:8d:fc:00:07:15:f2:1d:70: af:66:72:11:d6:56:11:c4:a6:d5:de:a0:69:5b:47: 70:36:56:73:71:31:f2:61:4d:b2:47:ae:05:8e:47: 1e:c1:c2:40:43:c1:70:5e:34:c6:6b:26:79:12:d7: ea:8a:16:80:1e:62:dc:a6:4f:af:6b:63:89:11:f0: 7f:b1:07:3b:ae:a1:83:d5:26:98:c6:82:af:a4:ea: be:c1:72:c7:89:e9:78:71:02:56:27:82:c7:8d:45: c8:c6:91:29:9d:d9:52:0f:64:50:95:33:c0:e8:8f: eb:5f:30:37:73:b5:8f:3e:a3:d7:a8:7e:87:7e:ba: ad:6f:6e:fb:0d:dc:c4:cd:aa:b2:e4:f5:5a:b0:c5: b6:22:76:a4:ec:67:32:ba:b3:23:59:98:51:5d:ef: ee:1e:3b:d8:b6:52:54:79:18:bd:ec:fd:5d:f2:44: 7b:72:bb:44:e5:fa:d4:6d:5f:f1:17:e2:7d:d6:b4: cd:3f:1c:1d:0f:4b:1a:0f:65:b6:74:4d:07:6c:2c: ba:0b:d4:87:eb:17:24:59:9b:a7:c0:b9:35:38:d5: ae:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:95:72:20:C2:0B:9F:3B:DA:C7:23:8B:02:4D:64:10:C9:F5:99:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d969e38-8862-3acc-8f97-40db9f1796e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:71:3b:c8:f4:13:c3:fc:3d:19:4c:ac:84:1d:f0:48:9e:10: 04:b2:4b:3c:8e:4c:43:df:4d:9f:18:56:58:2e:fe:74:5d:ae: 61:fc:97:70:2d:5d:f8:0c:d6:ee:9b:fc:57:a4:23:b2:05:75: 7d:31:0e:e2:6a:b4:9b:c0:66:60:1f:e1:3e:af:70:89:e2:bf: 16:2c:da:61:9d:cd:19:d5:95:cc:10:b5:bc:86:04:21:1b:b4: 48:3f:50:e9:65:8b:0d:3c:8f:48:87:d2:09:30:5c:ce:42:3f: b8:2f:29:33:55:2a:1e:1a:8f:f9:84:19:d8:ec:92:da:ad:26: c3:d1:c9:0c:cf:2e:35:0f:e8:96:e4:30:fa:66:5a:87:60:42: 24:24:c7:7b:82:a5:2d:ae:5c:bf:eb:d0:9a:5a:d0:15:fa:11: b5:9f:7c:53:90:41:70:3d:ed:86:90:40:f9:1f:0f:69:aa:2b: 7e:e4:8c:18:d8:54:53:24:3c:21:49:db:d4:c9:85:00:f4:bb: 03:9b:90:4c:d4:e2:fe:2b:3a:c9:d1:99:ba:d3:06:60:e3:b1: c5:91:85:93:0e:c8:f4:11:f5:09:0c:c8:cc:99:b3:ed:46:ce: 93:b2:34:8a:75:4b:50:1c:1c:98:1c:6f:6c:12:b7:c2:4f:f8: 03:5a:d8:9d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF5vKii7/W0484wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZDI2ZTBiY2MtZDU3NS00ODE2LTlmZWUtMTg5NzA4OWI1MDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5vPAwSkYCfSr5Vz8MArkUa03ZXsoekDPR/g ViAaIvGAo5dQjfwABxXyHXCvZnIR1lYRxKbV3qBpW0dwNlZzcTHyYU2yR64Fjkce wcJAQ8FwXjTGayZ5EtfqihaAHmLcpk+va2OJEfB/sQc7rqGD1SaYxoKvpOq+wXLH iel4cQJWJ4LHjUXIxpEpndlSD2RQlTPA6I/rXzA3c7WPPqPXqH6Hfrqtb277DdzE zaqy5PVasMW2Inak7GcyurMjWZhRXe/uHjvYtlJUeRi97P1d8kR7crtE5frUbV/x F+J91rTNPxwdD0saD2W2dE0HbCy6C9SH6xckWZunwLk1ONWuMQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOyVciDCC5872scjiwJNZBDJ9ZlwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGQ5NjllMzgtODg2Mi0z YWNjLThmOTctNDBkYjlmMTc5NmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBBcTvI9BPD/D0ZTKyEHfBInhAEsks8jkxD302fGFZYLv50Xa5h/Jdw LV34DNbum/xXpCOyBXV9MQ7iarSbwGZgH+E+r3CJ4r8WLNphnc0Z1ZXMELW8hgQh G7RIP1DpZYsNPI9Ih9IJMFzOQj+4LykzVSoeGo/5hBnY7JLarSbD0ckMzy41D+iW 5DD6ZlqHYEIkJMd7gqUtrly/69CaWtAV+hG1n3xTkEFwPe2GkED5Hw9pqit+5IwY 2FRTJDwhSdvUyYUA9LsDm5BM1OL+KzrJ0Zm60wZg47HFkYWTDsj0EfUJDMjMmbPt Rs6TsjSKdUtQHByYHG9sErfCT/gDWtid -----END CERTIFICATE-----Generated at Mon Mar 2 04:35:09 2026 by rpki-client