$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8575475a-2a7f-3a02-8915-1d59f753fdc1.roa File: 8575475a-2a7f-3a02-8915-1d59f753fdc1.roa (raw, json) Hash identifier: Dw/pQxtSIFfJcod+cOPTpeLiHDHJ9vsfAwlIAuiCsPA= Subject key identifier: 28:CA:4F:DC:49:32:F8:4D:34:0B:B5:68:28:84:D6:4F:18:85:D2:48 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217937F264190FA3F1DE680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8575475a-2a7f-3a02-8915-1d59f753fdc1.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396560 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:93:7f:26:41:90:fa:3f:1d:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=80d550a9-a891-40c0-939e-17ec63e2c77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:68:e3:6f:0b:24:93:80:cf:f4:88:42:61:5b: 05:8e:6a:91:ee:17:ed:43:6d:32:24:3d:dd:d2:ae: 8d:f0:a8:f1:8a:09:37:85:57:11:52:69:41:5d:85: 6e:f8:30:e8:2e:23:7e:a2:b6:c3:2f:61:10:72:27: 4a:db:99:89:36:ac:f2:91:f6:ac:62:d3:76:21:53: fc:86:0f:78:f2:be:04:4e:28:55:40:2b:b8:64:d4: 3f:7c:ec:38:05:a0:d3:c4:a4:b9:d5:fc:cd:ee:9a: 15:80:14:7c:c9:94:ac:6a:fc:95:1f:79:fd:47:56: ec:c8:85:4f:4d:61:7e:72:fb:7a:9f:17:40:d5:6e: 8e:46:bd:40:23:3c:63:10:b6:39:e4:9b:09:5e:f9: 09:7a:37:51:85:5d:ff:d0:17:f9:0a:40:40:2b:bc: 59:ed:35:3f:83:fc:42:30:fc:30:75:ed:f8:b0:aa: f2:ce:77:8c:7f:60:f9:b9:c8:45:d4:4e:fe:6c:5a: 60:fc:4d:96:51:54:c8:12:90:92:8e:ad:36:16:d4: 54:8c:05:6e:ef:2e:76:47:0a:f7:14:42:c3:06:84: ad:69:4f:2d:68:2e:39:1f:87:7f:44:36:0d:ce:c2: 01:55:8f:51:5b:fb:1e:2a:55:3c:13:f0:56:85:a7: e3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CA:4F:DC:49:32:F8:4D:34:0B:B5:68:28:84:D6:4F:18:85:D2:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8575475a-2a7f-3a02-8915-1d59f753fdc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:46:1d:81:8b:19:6b:7e:53:24:d4:d8:e8:f8:78:bd:f9:a8: 0b:4a:9e:3c:a7:8a:2f:90:9c:c9:68:16:5e:18:c3:28:62:47: a3:c5:a4:70:be:25:66:f9:e0:2b:58:10:63:e0:e9:16:43:f5: 46:cf:35:6a:19:5b:22:8e:b6:57:77:d3:0d:de:0f:9e:8c:be: ad:66:99:1c:4b:fe:47:0f:22:bb:ea:d3:d2:13:9f:e8:82:37: 87:19:42:62:ac:88:b0:9e:6b:98:e1:3c:8c:08:0b:1d:12:1b: 68:49:1c:01:36:8d:ad:ef:cc:65:13:a1:c3:d2:d8:ac:3a:f1: 4a:8f:d5:09:dd:42:7f:ba:36:df:db:38:8c:f7:3a:d3:41:da: 35:1b:1d:17:84:e2:7f:de:ad:17:b7:0d:62:ec:9d:d7:d2:0d: c5:74:21:1f:77:6c:82:e4:e8:ce:61:63:70:c9:7b:11:8c:44: 86:07:d5:15:ad:ab:ec:c1:ef:06:2a:7e:e1:e9:54:b8:70:a8: b0:ec:38:ba:ed:b8:95:a2:fa:7a:53:77:be:20:74:ff:2c:c2: b0:cc:d7:7f:6e:47:3f:c1:82:bd:e4:13:e1:a1:3c:42:e3:a4: 4b:97:1e:f9:a3:94:45:b1:e8:2b:8e:2c:c2:2e:dc:aa:44:aa: 18:a4:15:7e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF5N/JkGQ+j8d5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODBkNTUwYTktYTg5MS00MGMwLTkzOWUtMTdlYzYzZTJjNzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mjjbwskk4DP9IhCYVsFjmqR7hftQ20yJD3d 0q6N8Kjxigk3hVcRUmlBXYVu+DDoLiN+orbDL2EQcidK25mJNqzykfasYtN2IVP8 hg948r4ETihVQCu4ZNQ/fOw4BaDTxKS51fzN7poVgBR8yZSsavyVH3n9R1bsyIVP TWF+cvt6nxdA1W6ORr1AIzxjELY55JsJXvkJejdRhV3/0Bf5CkBAK7xZ7TU/g/xC MPwwde34sKryzneMf2D5uchF1E7+bFpg/E2WUVTIEpCSjq02FtRUjAVu7y52Rwr3 FELDBoStaU8taC45H4d/RDYNzsIBVY9RW/seKlU8E/BWhafjMQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCjKT9xJMvhNNAu1aCiE1k8YhdJIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU3NTQ3NWEtMmE3Zi0z YTAyLTg5MTUtMWQ1OWY3NTNmZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBdRh2BixlrflMk1Njo+Hi9+agLSp48p4ovkJzJaBZeGMMoYkejxaRw viVm+eArWBBj4OkWQ/VGzzVqGVsijrZXd9MN3g+ejL6tZpkcS/5HDyK76tPSE5/o gjeHGUJirIiwnmuY4TyMCAsdEhtoSRwBNo2t78xlE6HD0tisOvFKj9UJ3UJ/ujbf 2ziM9zrTQdo1Gx0XhOJ/3q0Xtw1i7J3X0g3FdCEfd2yC5OjOYWNwyXsRjESGB9UV ravswe8GKn7h6VS4cKiw7Di67biVovp6U3e+IHT/LMKwzNd/bkc/wYK95BPhoTxC 46RLlx75o5RFsegrjizCLtyqRKoYpBV+ -----END CERTIFICATE-----Generated at Mon Mar 2 09:15:00 2026 by rpki-client