$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/601ec811-f30c-331c-8894-f9e1280f0f3d.roa File: 601ec811-f30c-331c-8894-f9e1280f0f3d.roa (raw, json) Hash identifier: kBGvyu0J0K42x+mb91SDrUE97vIwHTX+mPpeFoSUkfE= Subject key identifier: 05:C1:06:1C:5E:B3:2C:0D:D5:45:6B:08:EC:88:09:1E:3B:A9:EB:19 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D02178D714C3DFE6FD12FB380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/601ec811-f30c-331c-8894-f9e1280f0f3d.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396826 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:8d:71:4c:3d:fe:6f:d1:2f:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=5292877a-7888-43e8-94bb-7430ccbd1acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ba:fd:3a:16:39:4f:b2:26:42:35:57:e4:6d: 55:e3:df:9d:61:04:c9:dc:46:43:91:7e:81:75:52: c8:74:e6:76:92:97:65:35:b0:b1:d8:5b:6c:aa:b8: 5e:13:55:04:70:28:54:b1:45:cc:f3:a6:41:97:63: e7:36:2e:62:f4:f0:7d:4b:e9:a7:5f:46:91:5c:17: ff:dd:ec:d4:f5:72:4c:e1:02:01:58:21:5a:fe:92: 80:f5:52:7d:fa:88:de:59:06:da:95:7a:d6:12:2b: 92:6c:c4:c4:f9:18:6b:8a:a2:82:0a:c0:b6:43:3b: ee:36:e5:06:d6:fa:62:62:6c:4b:b9:c9:0a:d0:ac: 66:8c:7c:ed:3e:67:3a:90:de:6f:39:b6:a2:d0:dd: 28:cb:3a:1e:5d:f2:dc:c6:73:ca:9e:f3:ff:ce:d2: 0c:c8:9e:6a:c7:93:aa:65:7a:c8:d5:c7:5f:da:21: 82:42:18:28:66:f0:d8:0d:d4:73:ba:bd:87:e5:a9: e1:02:35:55:b6:0d:2c:b7:71:6c:81:02:ad:23:d2: d7:f3:33:5e:a8:28:f7:97:ac:f3:c1:63:97:df:94: df:db:f6:77:eb:97:17:d7:c1:26:68:c2:c0:b9:1f: 21:1a:9b:01:2a:ae:87:b5:8a:40:ee:c7:c7:04:88: 7a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C1:06:1C:5E:B3:2C:0D:D5:45:6B:08:EC:88:09:1E:3B:A9:EB:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/601ec811-f30c-331c-8894-f9e1280f0f3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:fd:40:5f:96:60:e1:37:b4:ad:9e:7f:ca:32:42:b5:28:f6: 3c:16:6c:8c:e3:1c:cb:d0:0d:90:09:ca:3e:e6:1a:33:1f:a9: dc:7f:bd:fb:1d:be:4a:9f:55:ae:35:e6:45:78:75:6a:e9:38: 3b:24:ed:53:dd:38:f9:b2:f4:58:e5:00:d9:b4:ab:2e:aa:3d: bb:1a:f0:dc:9a:35:73:c7:43:01:90:ba:9b:d3:6d:f1:1b:4f: 44:7f:14:42:44:34:c5:f5:7c:c3:b6:53:ce:16:73:19:41:5c: ca:80:b0:cb:30:c4:cb:be:a4:11:0e:ad:8c:ee:5a:5c:48:70: 51:b2:cf:23:9e:2e:b5:8a:04:26:f8:5f:ca:d8:b7:86:80:e0: 12:d4:01:b3:8b:78:eb:27:74:85:5f:44:22:48:94:2e:ab:35: 56:76:03:f2:8b:90:ab:22:65:7d:9a:10:12:3a:1e:3d:8a:aa: e8:85:7b:b9:69:ae:db:91:28:89:4e:1c:17:f2:81:ce:91:58: a3:bb:0e:0f:34:d1:de:72:81:f2:e0:62:12:71:e3:a7:45:cd: 20:03:ef:37:e2:8e:8a:bc:f1:e1:a3:69:21:65:de:4f:21:d2: ea:80:31:9a:eb:a0:cc:d5:b7:9c:2d:ef:84:b5:c9:70:c9:39: 8f:02:ea:1b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF41xTD3+b9Evs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTI5Mjg3N2EtNzg4OC00M2U4LTk0YmItNzQzMGNjYmQxYWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrr9OhY5T7ImQjVX5G1V49+dYQTJ3EZDkX6B dVLIdOZ2kpdlNbCx2FtsqrheE1UEcChUsUXM86ZBl2PnNi5i9PB9S+mnX0aRXBf/ 3ezU9XJM4QIBWCFa/pKA9VJ9+ojeWQbalXrWEiuSbMTE+RhriqKCCsC2QzvuNuUG 1vpiYmxLuckK0KxmjHztPmc6kN5vObai0N0oyzoeXfLcxnPKnvP/ztIMyJ5qx5Oq ZXrI1cdf2iGCQhgoZvDYDdRzur2H5anhAjVVtg0st3FsgQKtI9LX8zNeqCj3l6zz wWOX35Tf2/Z365cX18EmaMLAuR8hGpsBKq6HtYpA7sfHBIh6hQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAXBBhxesywN1UVrCOyICR47qesZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjAxZWM4MTEtZjMwYy0z MzFjLTg4OTQtZjllMTI4MGYwZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCP/UBflmDhN7Stnn/KMkK1KPY8FmyM4xzL0A2QCco+5hozH6ncf737 Hb5Kn1WuNeZFeHVq6Tg7JO1T3Tj5svRY5QDZtKsuqj27GvDcmjVzx0MBkLqb023x G09EfxRCRDTF9XzDtlPOFnMZQVzKgLDLMMTLvqQRDq2M7lpcSHBRss8jni61igQm +F/K2LeGgOAS1AGzi3jrJ3SFX0QiSJQuqzVWdgPyi5CrImV9mhASOh49iqrohXu5 aa7bkSiJThwX8oHOkVijuw4PNNHecoHy4GISceOnRc0gA+834o6KvPHho2khZd5P IdLqgDGa66DM1becLe+EtclwyTmPAuob -----END CERTIFICATE-----Generated at Mon Mar 2 16:48:43 2026 by rpki-client