$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97a13ec8-5f90-3ed2-8154-e937ce7ab68d.roa File: 97a13ec8-5f90-3ed2-8154-e937ce7ab68d.roa (raw, json) Hash identifier: iCdWYmV+JzTXqGLgXq9HqQBxGANhp4NH3G+tKG6Ja40= Subject key identifier: B8:DF:4C:27:48:D7:02:DE:4E:FC:B8:77:F6:4D:71:F1:C5:62:B6:7E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217C23E930BDA20690FB500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97a13ec8-5f90-3ed2-8154-e937ce7ab68d.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396541 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:c2:3e:93:0b:da:20:69:0f:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=24fdbc78-f708-4114-9a74-6d4f68f2b839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:e1:27:ec:f9:26:9c:d8:f0:48:5d:fa:30: 32:3d:49:dd:42:3d:88:df:f2:0a:ec:66:02:9c:e0: 6c:dc:4b:da:15:48:48:c2:04:9e:df:11:14:11:df: f0:bb:88:39:17:f2:2b:b8:a9:29:a4:19:b0:d9:fa: 44:56:84:1a:6b:4a:87:3d:fa:c1:21:aa:ad:ab:d9: e2:28:fe:22:12:ca:bd:21:d3:50:b0:0a:eb:98:eb: 74:2a:1a:5c:27:19:fd:d8:7b:c4:d4:ad:99:a8:15: ae:1e:67:9b:5e:26:ec:ab:5b:72:a8:f8:42:b1:be: 7b:49:09:e6:4e:ac:3e:e4:ba:37:29:64:c2:e4:c5: fa:77:78:ec:aa:e0:2f:9e:1f:71:8d:a0:5f:79:a5: 24:e6:d3:ed:5c:6b:ed:b5:2f:df:65:ce:19:9c:58: 70:10:c1:e0:7d:a9:09:44:a2:c7:35:c6:70:7a:4b: 94:ba:22:84:f8:e9:d1:48:93:ea:41:8d:64:22:d1: b8:31:d3:29:fb:34:69:55:c3:bb:c6:95:40:03:e2: c9:36:97:49:36:b6:60:6d:1b:11:f3:4c:80:e9:2f: 08:0f:1c:e4:e1:c7:83:20:34:fc:90:1f:cd:65:e3: 02:c1:96:99:11:11:51:d9:08:3a:7b:38:ef:7c:75: b5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DF:4C:27:48:D7:02:DE:4E:FC:B8:77:F6:4D:71:F1:C5:62:B6:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97a13ec8-5f90-3ed2-8154-e937ce7ab68d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ac:b4:2d:e1:0f:9b:e7:12:5b:cb:ec:84:41:d1:3a:d1:50: c2:48:ec:51:19:30:98:c1:48:d7:48:58:83:e4:82:7e:b5:10: ad:47:e8:a4:b8:30:b6:3c:4e:b2:60:68:e3:d0:09:9a:2c:71: 5d:0e:0b:8e:ba:16:f9:90:64:6b:a9:2c:c1:ac:ce:59:56:5f: ad:36:af:be:66:3b:44:39:47:eb:1b:a0:bc:61:62:74:c4:11: 98:62:1b:2e:c0:c5:7a:d9:00:c9:8c:44:0b:94:1f:ef:e6:63: ba:ba:31:88:cf:e7:15:d1:4a:88:79:c4:38:38:2c:10:8d:b8: a0:e2:cd:08:40:57:0d:12:a1:2d:8a:a3:b9:23:88:35:13:e8: f1:91:7e:35:9a:20:4a:90:b8:21:42:1d:c5:80:95:b2:35:f9: cf:de:3b:50:cb:65:b7:7e:d0:f5:9f:b7:4f:c2:a8:53:03:66: 1e:a0:13:79:dc:36:b9:e4:90:9c:5c:0d:62:fa:9f:63:a4:2b: 37:0b:72:08:ac:2f:a3:9c:95:27:9d:00:94:3e:e8:cb:71:4f: 0e:b8:b5:88:25:03:3c:a0:25:2b:9f:98:6e:83:b3:ca:4f:41: f3:ef:c6:53:1a:98:b7:36:1a:e8:a4:c9:ad:8f:98:87:a9:cf: c2:b2:f5:d2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF8I+kwvaIGkPtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MjRmZGJjNzgtZjcwOC00MTE0LTlhNzQtNmQ0ZjY4ZjJiODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwrhJ+z5JpzY8Ehd+jAyPUndQj2I3/IK7GYC nOBs3EvaFUhIwgSe3xEUEd/wu4g5F/IruKkppBmw2fpEVoQaa0qHPfrBIaqtq9ni KP4iEsq9IdNQsArrmOt0KhpcJxn92HvE1K2ZqBWuHmebXibsq1tyqPhCsb57SQnm Tqw+5Lo3KWTC5MX6d3jsquAvnh9xjaBfeaUk5tPtXGvttS/fZc4ZnFhwEMHgfakJ RKLHNcZwekuUuiKE+OnRSJPqQY1kItG4MdMp+zRpVcO7xpVAA+LJNpdJNrZgbRsR 80yA6S8IDxzk4ceDIDT8kB/NZeMCwZaZERFR2Qg6ezjvfHW1cQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLjfTCdI1wLeTvy4d/ZNcfHFYrZ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTdhMTNlYzgtNWY5MC0z ZWQyLTgxNTQtZTkzN2NlN2FiNjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAarLQt4Q+b5xJby+yEQdE60VDCSOxRGTCYwUjXSFiD5IJ+tRCtR+ik uDC2PE6yYGjj0AmaLHFdDguOuhb5kGRrqSzBrM5ZVl+tNq++ZjtEOUfrG6C8YWJ0 xBGYYhsuwMV62QDJjEQLlB/v5mO6ujGIz+cV0UqIecQ4OCwQjbig4s0IQFcNEqEt iqO5I4g1E+jxkX41miBKkLghQh3FgJWyNfnP3jtQy2W3ftD1n7dPwqhTA2YeoBN5 3Da55JCcXA1i+p9jpCs3C3IIrC+jnJUnnQCUPujLcU8OuLWIJQM8oCUrn5hug7PK T0Hz78ZTGpi3NhropMmtj5iHqc/CsvXS -----END CERTIFICATE-----Generated at Mon Mar 2 02:14:38 2026 by rpki-client