$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/961a3609-d1f9-3024-912e-654f43f10735.roa File: 961a3609-d1f9-3024-912e-654f43f10735.roa (raw, json) Hash identifier: m6yJjYQNlxY472K+LgV62Rxd0DGIVEmUNW+3G5GpC7A= Subject key identifier: 72:B7:8D:14:38:28:17:1D:F1:88:F4:E9:C1:B6:E4:7A:EA:03:C6:EE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217B56B95CFDE6C68F4B3C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/961a3609-d1f9-3024-912e-654f43f10735.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396603 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:b5:6b:95:cf:de:6c:68:f4:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=116bda40-88fc-4a81-8332-43bcb5a84c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bb:f8:49:bf:ea:0c:da:66:6e:6f:3a:0c:1e: 5e:25:b8:35:78:1c:d2:97:ce:30:26:59:81:8a:75: e1:c7:e2:d0:ca:e9:22:34:42:8b:26:c5:18:f8:70: f7:6e:27:52:58:1e:be:fd:a4:4f:23:bb:92:b8:7c: 1e:0e:d1:df:53:32:9d:e0:f9:18:89:ef:dd:21:1f: 06:0a:d9:8a:8b:ef:87:a8:6e:a3:f3:59:ed:a9:1d: d3:82:b4:01:d7:99:54:36:22:56:20:ec:a4:c4:f3: c3:35:43:8a:da:39:21:13:dc:25:fa:c6:8d:1d:2e: 4e:0d:34:8d:a0:39:c9:02:e4:be:17:b0:32:e2:63: 44:ba:23:88:48:28:f8:96:d8:1c:e4:65:83:40:0a: c7:36:73:9e:e4:3a:37:02:82:5e:03:f6:fe:46:37: 06:11:b2:05:50:ed:21:a4:8b:b0:6f:a9:8b:c0:43: 4b:f8:d6:0e:4e:7d:91:b6:21:bf:4a:6a:05:ac:3d: da:b8:d6:2f:69:23:77:50:5c:31:45:93:c3:a2:07: 4f:96:33:ba:4d:82:0d:8d:d5:00:58:68:46:fc:d7: f1:04:79:1d:37:f0:a3:11:79:a4:31:66:f3:df:b4: a0:6f:79:b5:33:75:59:07:5c:4e:12:38:4e:0e:ca: 9a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B7:8D:14:38:28:17:1D:F1:88:F4:E9:C1:B6:E4:7A:EA:03:C6:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/961a3609-d1f9-3024-912e-654f43f10735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:ec:67:b9:21:2e:68:bc:a6:65:66:6e:e6:b7:4d:28:0d:de: 2b:bc:8b:ad:b4:79:b2:23:69:cb:9b:81:7c:74:c9:a8:30:8f: 97:ad:8e:55:38:89:1e:ba:8c:fb:77:a7:ec:47:de:d4:5e:91: be:18:a2:a8:20:91:bb:6d:78:2c:5c:04:20:ea:ca:71:33:f1: 48:e3:44:a8:fd:c9:85:c8:35:6e:ed:52:92:f9:7e:aa:c5:fb: e2:67:e7:60:93:56:58:cb:12:59:c7:e0:38:26:3d:6c:8f:8b: 6e:9f:6e:2d:cf:d9:ff:f5:04:db:e1:06:db:7e:03:5d:ab:65: 77:f9:c1:b3:f9:ad:25:7d:98:ed:e8:ed:e2:73:cb:28:f1:b3: 67:84:cd:89:a7:07:de:ab:b3:4e:35:dc:44:91:1a:9e:8b:a8: 2a:b4:06:da:21:0b:c2:0a:ab:f4:85:f3:d4:d2:b9:7a:ed:f0: 4a:ad:96:4b:e6:c3:bd:90:45:ab:e7:07:3f:3d:44:53:59:b4: cd:b4:79:3e:9b:81:43:1f:5f:d4:53:42:2f:b7:70:3e:ed:aa: 38:6b:2d:8c:e9:ab:40:a9:78:e5:ba:d5:cf:9a:37:74:b0:6b: b5:1f:2e:c5:e0:0b:ac:d1:27:75:cf:0a:dc:24:30:57:6d:3c: b4:4b:14:33 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF7Vrlc/ebGj0s8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MTE2YmRhNDAtODhmYy00YTgxLTgzMzItNDNiY2I1YTg0YzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7v4Sb/qDNpmbm86DB5eJbg1eBzSl84wJlmB inXhx+LQyukiNEKLJsUY+HD3bidSWB6+/aRPI7uSuHweDtHfUzKd4PkYie/dIR8G CtmKi++HqG6j81ntqR3TgrQB15lUNiJWIOykxPPDNUOK2jkhE9wl+saNHS5ODTSN oDnJAuS+F7Ay4mNEuiOISCj4ltgc5GWDQArHNnOe5Do3AoJeA/b+RjcGEbIFUO0h pIuwb6mLwENL+NYOTn2RtiG/SmoFrD3auNYvaSN3UFwxRZPDogdPljO6TYINjdUA WGhG/NfxBHkdN/CjEXmkMWbz37Sgb3m1M3VZB1xOEjhODsqanQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHK3jRQ4KBcd8Yj06cG25HrqA8buMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTYxYTM2MDktZDFmOS0z MDI0LTkxMmUtNjU0ZjQzZjEwNzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB57Ge5IS5ovKZlZm7mt00oDd4rvIuttHmyI2nLm4F8dMmoMI+XrY5V OIkeuoz7d6fsR97UXpG+GKKoIJG7bXgsXAQg6spxM/FI40So/cmFyDVu7VKS+X6q xfviZ+dgk1ZYyxJZx+A4Jj1sj4tun24tz9n/9QTb4QbbfgNdq2V3+cGz+a0lfZjt 6O3ic8so8bNnhM2Jpwfeq7NONdxEkRqei6gqtAbaIQvCCqv0hfPU0rl67fBKrZZL 5sO9kEWr5wc/PURTWbTNtHk+m4FDH1/UU0Ivt3A+7ao4ay2M6atAqXjlutXPmjd0 sGu1Hy7F4Aus0Sd1zwrcJDBXbTy0SxQz -----END CERTIFICATE-----Generated at Mon Mar 2 10:02:06 2026 by rpki-client