$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c7d7982-e0ff-3ea1-8f8d-4ed279a4e192.roa File: 8c7d7982-e0ff-3ea1-8f8d-4ed279a4e192.roa (raw, json) Hash identifier: VHHg69Tr713PPtTBPUqrGljSbYfozEia4EyWBTL9siE= Subject key identifier: D5:59:7C:F1:61:5B:5C:84:8D:B3:E0:9F:09:EC:2C:19:76:C9:C4:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217BECAEFF150D94AF79340 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c7d7982-e0ff-3ea1-8f8d-4ed279a4e192.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396604 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:be:ca:ef:f1:50:d9:4a:f7:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=c3a1fb96-6424-4fc7-8c6e-142ac4f5927e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8c:a1:c5:3a:ce:39:8a:d2:2a:6e:49:ae:74: aa:7f:95:dd:c9:ee:c4:0c:e1:49:81:a4:13:67:48: 3e:26:4e:ba:2f:6d:44:3c:2c:f9:3b:60:94:38:69: a3:22:1f:ca:69:60:f1:1c:95:13:fb:77:7d:d6:4f: 45:45:ab:15:3b:13:7c:01:b1:dc:dc:c9:ac:23:6c: f4:1a:e9:76:d7:ad:29:f1:ac:f9:85:44:c1:fa:83: 60:72:08:ba:17:01:57:c9:42:1f:02:d3:ec:95:03: 60:60:4e:d9:d6:4b:4d:18:b9:83:81:a9:aa:9b:88: 42:70:7f:21:bf:76:5b:27:aa:48:81:eb:c1:5c:96: d7:be:29:f3:6a:e1:0f:9a:ee:16:e3:19:83:c6:bf: 65:e1:14:1d:64:fd:a9:de:a8:6a:f0:7c:23:a7:cf: 3d:0a:8a:c4:42:ff:58:48:03:5f:f0:e4:1f:b4:af: 72:85:0f:33:da:2d:32:9e:04:5b:50:55:1f:a7:23: 99:92:be:a3:a6:17:2b:11:bb:98:2d:3c:be:81:01: 83:28:d7:03:53:b0:1c:d7:dc:93:c5:5e:73:37:c8: a4:cf:ea:f5:db:ad:95:f8:98:c7:51:2e:59:5e:c4: e6:2c:c2:de:ac:fb:c2:66:33:e6:45:6f:f4:5f:61: e3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:59:7C:F1:61:5B:5C:84:8D:B3:E0:9F:09:EC:2C:19:76:C9:C4:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c7d7982-e0ff-3ea1-8f8d-4ed279a4e192.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:03:bb:1f:35:18:4f:2d:35:07:e8:c3:23:19:97:96:97:79: 76:0c:59:39:36:a8:6c:fb:64:b0:ea:43:40:02:a1:06:30:c8: c0:2d:e9:70:8b:93:13:ab:27:cf:15:ec:09:c7:0d:52:cd:7e: 5c:07:8b:d6:ef:ba:54:07:e3:17:b0:4f:2a:56:5a:1a:30:2d: dd:bb:22:d2:e7:e2:99:47:4b:1a:a2:5c:98:da:90:88:13:f2: c9:6e:c3:9d:00:2f:40:c0:a6:34:3a:eb:c4:9a:af:f2:64:76: a4:41:90:b4:3d:91:e8:37:41:95:e5:8c:93:e8:ea:b7:de:60: d8:f4:ea:04:a2:d1:79:6d:78:33:ca:92:2a:8a:99:da:da:1d: 59:da:c4:2d:5e:af:9d:64:37:45:86:8d:74:0f:26:13:fb:9b: 3f:94:f3:3c:de:cf:22:8a:70:3d:c5:46:9e:39:38:15:89:dc: e7:5a:ef:4e:ed:57:c3:a5:8a:87:22:7a:fb:6e:93:b3:dc:a1: eb:16:56:ee:15:bc:89:a5:9a:fb:4f:33:1b:67:39:c8:94:75: bd:5a:63:3e:11:7d:8b:65:09:05:e6:05:a3:66:7e:f1:47:90: 13:0d:01:a2:8d:81:fa:43:50:4f:28:43:14:7f:ab:23:89:da: 8e:d2:f7:06 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF77K7/FQ2Ur3k0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzNhMWZiOTYtNjQyNC00ZmM3LThjNmUtMTQyYWM0ZjU5MjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4yhxTrOOYrSKm5JrnSqf5Xdye7EDOFJgaQT Z0g+Jk66L21EPCz5O2CUOGmjIh/KaWDxHJUT+3d91k9FRasVOxN8AbHc3MmsI2z0 Gul2160p8az5hUTB+oNgcgi6FwFXyUIfAtPslQNgYE7Z1ktNGLmDgamqm4hCcH8h v3ZbJ6pIgevBXJbXvinzauEPmu4W4xmDxr9l4RQdZP2p3qhq8Hwjp889CorEQv9Y SANf8OQftK9yhQ8z2i0yngRbUFUfpyOZkr6jphcrEbuYLTy+gQGDKNcDU7Ac19yT xV5zN8ikz+r1262V+JjHUS5ZXsTmLMLerPvCZjPmRW/0X2HjzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNVZfPFhW1yEjbPgnwnsLBl2ycSEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGM3ZDc5ODItZTBmZi0z ZWExLThmOGQtNGVkMjc5YTRlMTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBQA7sfNRhPLTUH6MMjGZeWl3l2DFk5Nqhs+2Sw6kNAAqEGMMjALelw i5MTqyfPFewJxw1SzX5cB4vW77pUB+MXsE8qVloaMC3duyLS5+KZR0saolyY2pCI E/LJbsOdAC9AwKY0OuvEmq/yZHakQZC0PZHoN0GV5YyT6Oq33mDY9OoEotF5bXgz ypIqipna2h1Z2sQtXq+dZDdFho10DyYT+5s/lPM83s8iinA9xUaeOTgVidznWu9O 7VfDpYqHInr7bpOz3KHrFlbuFbyJpZr7TzMbZznIlHW9WmM+EX2LZQkF5gWjZn7x R5ATDQGijYH6Q1BPKEMUf6sjidqO0vcG -----END CERTIFICATE-----Generated at Mon Mar 2 01:57:43 2026 by rpki-client