$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8618ac84-1faa-3fd1-a2da-62dacff6f3ea.roa File: 8618ac84-1faa-3fd1-a2da-62dacff6f3ea.roa (raw, json) Hash identifier: JEx+yh7ogBya3bk1PDBntJjjKkRXG0VZYLwHL2qQicg= Subject key identifier: 68:FC:E2:A5:AE:CC:0C:A6:84:BF:F6:E1:16:C3:DA:69:D9:BD:CA:E6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D021790E93FD0BF72CC3FBD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8618ac84-1faa-3fd1-a2da-62dacff6f3ea.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 36627 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:90:e9:3f:d0:bf:72:cc:3f:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=0e823974-3403-4b10-b7d2-a58f6d7f4982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:52:5a:4e:60:a3:28:0c:35:c9:c1:fa:78:59: f7:c7:3b:bd:3e:c1:60:f6:08:d4:f4:5b:63:7b:04: d0:bd:8d:ba:37:cf:e5:83:2d:6f:0c:2d:21:9b:72: 0c:9a:62:96:bb:66:d6:20:90:07:18:79:64:2f:a9: b5:d9:3e:01:11:d6:00:de:b6:b2:b7:76:1d:32:53: 0d:95:e3:c7:f5:65:19:55:68:fb:28:b2:e3:06:b3: a0:3f:89:05:39:32:07:30:e4:7f:83:42:42:ff:4f: e0:ae:e9:81:16:c0:d2:07:3f:84:18:39:f1:25:7a: c6:52:63:fc:c0:54:a1:07:b0:0d:8b:c5:2d:28:8e: d6:8d:fa:61:14:3c:ac:52:d3:e7:11:c1:56:c8:ea: 63:e0:9d:18:02:cf:ba:e8:ca:6a:4b:71:1c:63:f4: 03:2e:2b:93:d1:60:54:88:9f:6a:61:1c:2c:d3:9f: 2f:d3:a1:c4:c4:a4:f0:a1:b3:5f:28:cb:da:15:07: 00:98:43:8d:7e:f9:e2:ab:5e:5b:0f:ba:39:3c:67: 8b:8c:f1:81:fb:11:f6:93:97:95:e3:0a:4f:18:6b: cf:ec:5c:12:3c:d1:3b:7b:91:ee:2d:f2:21:2f:6d: cf:9a:2a:76:3b:49:15:e0:30:9b:6d:15:f1:d7:fc: 1d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FC:E2:A5:AE:CC:0C:A6:84:BF:F6:E1:16:C3:DA:69:D9:BD:CA:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8618ac84-1faa-3fd1-a2da-62dacff6f3ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:89:47:36:c5:d3:1f:8f:94:31:3e:8e:1a:cc:ea:79:db:cc: 5b:d2:6e:47:8b:a6:59:af:d5:da:b2:20:df:6f:ab:8a:62:2a: a1:7c:b6:b4:3e:6e:60:91:8b:40:a0:db:cc:ee:e6:ae:4d:b8: f1:ed:ef:3d:0f:c7:8a:20:e4:24:43:9d:ef:64:2c:2a:32:6d: 39:59:f2:6e:2a:c3:3d:72:b9:a8:f3:cf:19:55:41:fb:e6:68: b3:30:20:14:3e:c5:0a:0c:06:52:61:b0:65:c7:b4:cf:10:e4: fb:d3:e4:50:6a:d0:93:d5:ab:f4:b9:b3:36:92:88:dd:d3:db: 67:50:5b:9e:86:42:3d:77:82:cb:45:ef:e2:d4:a5:86:09:11: fd:79:7b:1b:5e:43:92:04:1e:df:23:b4:b3:2a:d5:f3:a9:28: bb:30:40:80:cc:8e:40:8d:bb:e4:22:ee:af:0e:2f:36:b0:3c: 7a:06:4e:ea:cf:4c:e3:98:9b:7b:39:2a:9e:82:5c:0f:70:f4: e4:65:a5:68:fa:16:6c:02:47:98:8b:0a:55:f3:9f:21:b1:22: 96:e6:cf:4b:6a:65:fb:22:07:71:62:86:da:83:e9:60:f4:46: 50:61:8c:90:de:11:06:6f:3f:cd:69:80:2d:6d:be:92:e3:96: 6b:c6:fd:73 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF5DpP9C/csw/vYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MGU4MjM5NzQtMzQwMy00YjEwLWI3ZDItYTU4ZjZkN2Y0OTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFJaTmCjKAw1ycH6eFn3xzu9PsFg9gjU9Ftj ewTQvY26N8/lgy1vDC0hm3IMmmKWu2bWIJAHGHlkL6m12T4BEdYA3rayt3YdMlMN lePH9WUZVWj7KLLjBrOgP4kFOTIHMOR/g0JC/0/grumBFsDSBz+EGDnxJXrGUmP8 wFShB7ANi8UtKI7WjfphFDysUtPnEcFWyOpj4J0YAs+66MpqS3EcY/QDLiuT0WBU iJ9qYRws058v06HExKTwobNfKMvaFQcAmEONfvniq15bD7o5PGeLjPGB+xH2k5eV 4wpPGGvP7FwSPNE7e5HuLfIhL23Pmip2O0kV4DCbbRXx1/wdgwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGj84qWuzAymhL/24RbD2mnZvcrmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODYxOGFjODQtMWZhYS0z ZmQxLWEyZGEtNjJkYWNmZjZmM2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBuiUc2xdMfj5QxPo4azOp528xb0m5Hi6ZZr9XasiDfb6uKYiqhfLa0 Pm5gkYtAoNvM7uauTbjx7e89D8eKIOQkQ53vZCwqMm05WfJuKsM9crmo888ZVUH7 5mizMCAUPsUKDAZSYbBlx7TPEOT70+RQatCT1av0ubM2kojd09tnUFuehkI9d4LL Re/i1KWGCRH9eXsbXkOSBB7fI7SzKtXzqSi7MECAzI5AjbvkIu6vDi82sDx6Bk7q z0zjmJt7OSqeglwPcPTkZaVo+hZsAkeYiwpV858hsSKW5s9LamX7IgdxYobag+lg 9EZQYYyQ3hEGbz/NaYAtbb6S45Zrxv1z -----END CERTIFICATE-----Generated at Mon Mar 2 02:07:44 2026 by rpki-client