$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d81a33c-68c1-3212-9dd1-b350054d72f1.roa File: 8d81a33c-68c1-3212-9dd1-b350054d72f1.roa (raw, json) Hash identifier: lSIZmUtsRU0W9FgmiYZC259/sAs6x3lBiBl475YiCXA= Subject key identifier: 09:21:D1:3A:F7:2E:9F:CC:55:2F:06:03:4E:28:60:12:68:21:84:85 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D021797722ED17D8F895B3200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d81a33c-68c1-3212-9dd1-b350054d72f1.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396565 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:97:72:2e:d1:7d:8f:89:5b:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=763c40f5-ffdb-44ae-af3e-32cac7ad626d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8f:0e:d0:1e:5c:d1:b2:72:31:0d:f5:ae:e1: a3:d9:90:34:30:44:4c:53:77:e0:3d:b6:cc:03:21: 70:e9:ff:8c:60:84:34:98:9d:59:7d:ee:eb:cd:82: 0f:d2:a4:b5:b8:ec:68:f6:09:b6:3f:4d:bc:06:08: 5a:24:a6:a2:d7:75:63:b0:4c:2a:c7:1e:e8:89:a6: 86:fe:49:0e:5f:7b:98:19:72:66:b0:bb:56:c8:11: 45:4e:64:e1:2f:bf:ed:4a:f3:29:af:4b:c0:20:b3: cc:96:f8:d5:b5:80:7d:fa:d0:0b:af:06:9b:d1:7b: 28:8d:fb:11:08:6f:58:37:ed:1f:01:99:36:52:e5: a2:e6:59:1d:5d:9c:5c:c7:38:46:97:12:fa:06:cd: 56:03:8e:7f:ac:d3:79:02:05:ee:c9:8d:9b:d0:93: 51:f9:6d:4c:a9:21:ba:9b:86:59:a5:4d:2a:57:d9: 1c:59:dc:83:1f:06:f1:9d:39:bb:8f:50:c9:7c:f7: 95:bb:b5:f0:61:6f:33:82:ff:37:49:73:cb:ff:14: 99:53:24:81:6b:3a:d3:f5:f3:9d:7b:24:95:06:56: 39:f6:6a:48:bc:6d:7f:dc:20:79:4b:0c:36:db:fc: 90:a8:cc:f6:3a:9a:87:c5:e4:de:09:cd:27:cb:0b: 35:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:21:D1:3A:F7:2E:9F:CC:55:2F:06:03:4E:28:60:12:68:21:84:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d81a33c-68c1-3212-9dd1-b350054d72f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:6e:40:6a:2c:51:88:7a:d5:e9:de:2b:fe:47:3a:1b:c6:d9: 5b:0c:a0:f2:04:11:9b:b1:46:99:3c:2a:a1:53:a1:ce:1b:da: 7b:b0:61:15:19:24:c3:f2:40:dc:eb:23:63:07:3d:f0:10:db: 24:e7:59:70:f2:d5:e0:68:e5:fe:d7:45:b1:22:53:03:9b:2b: 04:3b:b0:59:d7:73:1d:17:4f:75:53:65:e9:ff:22:e4:9a:6c: 54:25:ec:b0:f5:ed:b1:b2:dd:55:22:53:b8:a4:c2:4d:8e:67: cc:a2:4b:59:43:3e:43:5a:0a:63:37:56:2c:bd:6a:c4:69:2c: f9:e2:72:b5:79:0b:3e:0d:24:f7:f3:72:5f:ed:72:5b:1c:db: 22:07:81:0c:9e:9e:40:35:d0:03:5d:ab:fa:af:ab:3c:fd:88: 31:02:cb:19:ed:6d:30:0b:a4:4c:e7:1e:fa:8d:7a:e2:b2:af: ef:51:2e:d3:d9:7b:08:a5:69:88:5e:25:5c:12:d6:46:01:2e: 43:17:b7:1c:b0:a4:eb:ff:17:84:67:b8:58:9e:b8:dc:59:78: e3:a2:11:58:87:23:19:7a:ed:d0:48:dc:2e:56:48:be:dd:91: fb:19:a2:1d:f7:7f:40:07:aa:97:44:fb:26:77:22:74:0e:31: bd:9c:08:22 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF5dyLtF9j4lbMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk NzYzYzQwZjUtZmZkYi00NGFlLWFmM2UtMzJjYWM3YWQ2MjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk48O0B5c0bJyMQ31ruGj2ZA0MERMU3fgPbbM AyFw6f+MYIQ0mJ1Zfe7rzYIP0qS1uOxo9gm2P028BghaJKai13VjsEwqxx7oiaaG /kkOX3uYGXJmsLtWyBFFTmThL7/tSvMpr0vAILPMlvjVtYB9+tALrwab0XsojfsR CG9YN+0fAZk2UuWi5lkdXZxcxzhGlxL6Bs1WA45/rNN5AgXuyY2b0JNR+W1MqSG6 m4ZZpU0qV9kcWdyDHwbxnTm7j1DJfPeVu7XwYW8zgv83SXPL/xSZUySBazrT9fOd eySVBlY59mpIvG1/3CB5Sww22/yQqMz2OpqHxeTeCc0nyws15QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAkh0Tr3Lp/MVS8GA04oYBJoIYSFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGQ4MWEzM2MtNjhjMS0z MjEyLTlkZDEtYjM1MDA1NGQ3MmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjbkBqLFGIetXp3iv+RzobxtlbDKDyBBGbsUaZPCqhU6HOG9p7sGEV GSTD8kDc6yNjBz3wENsk51lw8tXgaOX+10WxIlMDmysEO7BZ13MdF091U2Xp/yLk mmxUJeyw9e2xst1VIlO4pMJNjmfMoktZQz5DWgpjN1YsvWrEaSz54nK1eQs+DST3 83Jf7XJbHNsiB4EMnp5ANdADXav6r6s8/YgxAssZ7W0wC6RM5x76jXrisq/vUS7T 2XsIpWmIXiVcEtZGAS5DF7ccsKTr/xeEZ7hYnrjcWXjjohFYhyMZeu3QSNwuVki+ 3ZH7GaId939AB6qXRPsmdyJ0DjG9nAgi -----END CERTIFICATE-----Generated at Mon Mar 2 09:46:43 2026 by rpki-client