$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/82c4c397-c093-3ccd-af52-3f669eb6ef63.roa File: 82c4c397-c093-3ccd-af52-3f669eb6ef63.roa (raw, json) Hash identifier: h3C5/REaPj4qCV6KtRCYS7y+Hw1iAp0vTm92+td0hi8= Subject key identifier: 35:D9:F8:CB:24:B5:E0:08:16:EA:27:9A:89:8F:D5:22:21:2D:2E:E0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217A0E50AEAEA2C167E3B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/82c4c397-c093-3ccd-af52-3f669eb6ef63.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396550 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:a0:e5:0a:ea:ea:2c:16:7e:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=9aadd426-e91b-4f0c-bd8f-cbeff4021a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:de:47:41:d6:40:a3:7d:49:da:6b:8f:1f:28: 0c:58:d2:27:71:5f:e7:63:56:9d:f2:34:d5:0b:57: 51:d3:d8:99:ec:a0:54:4c:7a:cf:4a:ca:77:ed:2e: 39:dd:65:73:67:8a:fa:dd:8c:98:b4:a4:83:3a:52: de:75:5c:27:23:56:f0:21:d1:ca:ac:3a:ae:ef:29: 92:f3:d3:59:6e:33:aa:b8:94:b6:fc:4b:3a:04:bc: 93:b7:b8:9b:5a:dc:57:35:b2:54:9c:ef:1a:66:f8: 54:13:66:67:02:87:6a:1b:7a:9c:14:7a:5b:56:61: a4:d6:c7:f0:6f:2a:40:fa:ac:47:ff:cd:2e:d5:5c: 81:95:8e:81:4b:96:af:74:8d:41:cc:ea:75:3d:72: 0a:3d:97:08:59:ab:15:3b:51:7a:f5:ec:f7:55:2f: 04:c7:95:66:1f:00:50:7d:82:ae:6f:b1:20:82:24: 2a:fa:ff:5c:45:c3:de:e7:4f:7b:2c:79:85:20:8d: 86:8b:4b:e4:90:86:5c:d3:34:d8:6a:b6:aa:5c:a0: ee:e1:eb:d0:01:be:6f:9d:93:8a:0d:29:17:bf:ed: b0:02:69:e6:33:b7:30:5e:1d:dd:ef:8b:fd:b1:72: 6f:29:1f:06:f2:d2:ab:38:da:98:4e:5b:f0:16:83: 33:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D9:F8:CB:24:B5:E0:08:16:EA:27:9A:89:8F:D5:22:21:2D:2E:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/82c4c397-c093-3ccd-af52-3f669eb6ef63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:db:93:55:82:d9:ef:83:a3:5b:2c:c3:b4:d8:d3:59:57:30: a1:77:14:7b:86:f1:98:5c:28:52:86:ae:8a:6f:3f:f7:e2:0a: 97:d3:6a:b0:e6:86:92:eb:25:ee:b5:c0:0e:33:39:9b:f8:f1: 97:22:45:bf:f7:df:a5:41:56:64:ac:50:a4:31:f6:d7:10:cb: fe:78:7e:c6:28:ea:b6:46:e3:a1:0f:71:1d:0b:5e:7e:66:45: e2:2e:d6:5f:06:46:6e:da:0b:6d:27:56:69:64:0f:5d:3c:2a: 5f:d7:25:e3:d0:f5:31:26:60:b1:67:b2:e7:ab:b9:25:1a:09: 7e:46:17:26:14:57:53:4c:27:cc:74:d1:5e:54:52:4a:a8:f9: 3a:40:62:bd:d0:5a:24:8d:fe:51:26:ed:42:e8:36:ee:fc:3b: 8c:74:32:92:c5:e0:d2:41:48:d8:12:f5:71:1a:44:5b:bf:2a: 74:f3:4c:74:e5:fc:cd:bd:ee:31:3f:35:8c:d5:20:48:10:23: 49:6b:d5:4c:ed:a5:85:f7:0a:46:b7:11:bd:5c:27:27:89:14: 22:70:23:25:21:be:7b:0f:9c:28:4f:37:df:bc:28:56:65:0d: 08:a6:95:7b:2b:79:fd:ba:65:40:87:02:e3:25:97:08:0e:09: 02:21:ad:52 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF6DlCurqLBZ+OwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk OWFhZGQ0MjYtZTkxYi00ZjBjLWJkOGYtY2JlZmY0MDIxYThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N5HQdZAo31J2muPHygMWNIncV/nY1ad8jTV C1dR09iZ7KBUTHrPSsp37S453WVzZ4r63YyYtKSDOlLedVwnI1bwIdHKrDqu7ymS 89NZbjOquJS2/Es6BLyTt7ibWtxXNbJUnO8aZvhUE2ZnAodqG3qcFHpbVmGk1sfw bypA+qxH/80u1VyBlY6BS5avdI1BzOp1PXIKPZcIWasVO1F69ez3VS8Ex5VmHwBQ fYKub7EggiQq+v9cRcPe5097LHmFII2Gi0vkkIZc0zTYaraqXKDu4evQAb5vnZOK DSkXv+2wAmnmM7cwXh3d74v9sXJvKR8G8tKrONqYTlvwFoMzgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDXZ+MskteAIFuonmomP1SIhLS7gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODJjNGMzOTctYzA5My0z Y2NkLWFmNTItM2Y2NjllYjZlZjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBd25NVgtnvg6NbLMO02NNZVzChdxR7hvGYXChShq6Kbz/34gqX02qw 5oaS6yXutcAOMzmb+PGXIkW/99+lQVZkrFCkMfbXEMv+eH7GKOq2RuOhD3EdC15+ ZkXiLtZfBkZu2gttJ1ZpZA9dPCpf1yXj0PUxJmCxZ7Lnq7klGgl+RhcmFFdTTCfM dNFeVFJKqPk6QGK90Fokjf5RJu1C6Dbu/DuMdDKSxeDSQUjYEvVxGkRbvyp080x0 5fzNve4xPzWM1SBIECNJa9VM7aWF9wpGtxG9XCcniRQicCMlIb57D5woTzffvChW ZQ0IppV7K3n9umVAhwLjJZcIDgkCIa1S -----END CERTIFICATE-----Generated at Mon Mar 2 09:20:03 2026 by rpki-client