$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d19bf96-c01d-3102-8066-d9ae826a6e76.roa File: 9d19bf96-c01d-3102-8066-d9ae826a6e76.roa (raw, json) Hash identifier: Ih45sHZquDqRYKc0MSpR+nIMUAQwW18/gMrjD+cPmW8= Subject key identifier: F3:F4:F4:03:74:79:B2:E1:55:F8:E4:8B:7F:D0:17:49:CB:14:B5:14 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217BBE91E1E5DCB2C16CB74 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d19bf96-c01d-3102-8066-d9ae826a6e76.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396600 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:bb:e9:1e:1e:5d:cb:2c:16:cb:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=ab666020-f9f1-4805-8053-82e5981a745c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:9a:98:e4:b1:84:9b:e9:0f:17:cc:c9:55:93: 69:64:b1:93:62:97:7e:66:be:b1:19:cf:bd:c2:88: 07:d5:c9:1b:73:f3:e1:92:76:43:f6:4a:7c:a9:33: d1:85:2b:08:f7:5c:7c:05:e5:fb:a0:80:ae:36:43: ac:e8:f2:84:ae:dd:3d:12:d2:28:81:00:27:b4:80: 06:53:0d:83:68:1e:69:f0:0a:29:ec:4c:38:cc:c0: 16:f0:c3:32:5a:01:89:95:f2:32:18:52:ad:29:79: 96:68:e4:c1:2f:ea:2b:91:0b:c4:ba:fc:f2:ca:48: 36:26:00:fc:1a:8f:0a:9e:e6:71:20:21:08:7c:26: 0f:17:c4:9c:30:93:3c:7a:1f:fd:4d:59:97:b4:b7: 83:27:c6:e1:4f:00:bf:1a:a9:80:07:6b:bf:fc:85: 04:9d:4f:13:12:d5:46:81:6f:11:c5:a5:98:2a:b3: d7:7f:4b:0f:00:3c:58:ac:85:96:77:26:ee:3a:92: 72:f0:79:8f:ad:a2:ed:f5:11:01:94:29:5c:9a:7b: e8:64:f9:43:f4:fc:d6:4b:36:b1:f9:08:d5:f4:87: 03:d4:ea:3e:b7:db:10:94:8d:1a:2d:04:f7:8c:c8: 6e:04:d9:b2:a1:75:bf:49:e9:67:8f:b2:fc:4a:6e: 83:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F4:F4:03:74:79:B2:E1:55:F8:E4:8B:7F:D0:17:49:CB:14:B5:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d19bf96-c01d-3102-8066-d9ae826a6e76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:f4:5a:de:f5:b2:14:13:fe:73:db:7b:38:fb:12:c5:56:ee: 5b:a1:3e:b0:83:00:e5:6e:9a:52:44:be:4c:5c:20:fc:b1:b2: ec:e1:95:83:35:8e:38:fd:44:33:80:89:77:39:92:fc:c6:df: f2:69:85:5f:f7:39:e7:2b:c7:1b:dc:87:e7:a7:5d:76:46:23: b1:4d:63:b4:96:28:3b:66:72:93:80:b1:5a:fa:e1:71:80:c0: 8e:83:dd:5f:b9:be:90:11:bc:55:f6:73:59:12:b0:43:1c:ee: 19:9a:67:97:01:43:a6:a8:1d:b5:71:60:48:c2:aa:80:d9:26: 2f:ac:aa:18:7b:3c:55:83:7c:40:ce:ce:16:c0:50:fe:79:fc: b1:c2:ce:bd:f5:5a:26:05:cb:a1:1a:7b:98:d3:e8:2b:2b:12: 1a:50:2d:28:84:e8:38:be:1b:1a:20:95:dc:12:2f:2e:9f:91: be:36:b2:dd:a0:2a:09:25:f2:9a:97:0a:23:1d:f2:20:24:81: ce:dd:d5:58:16:0f:03:0d:90:1e:49:93:34:22:5e:0f:ee:c8: 38:24:06:50:58:4b:8d:d1:1c:56:d4:f4:6d:a9:15:10:f5:a7: 14:d8:21:7f:38:07:49:c1:aa:b9:c1:f7:18:4d:f4:eb:86:bb: ca:8c:c0:54 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF7vpHh5dyywWy3QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk YWI2NjYwMjAtZjlmMS00ODA1LTgwNTMtODJlNTk4MWE3NDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/JqY5LGEm+kPF8zJVZNpZLGTYpd+Zr6xGc+9 wogH1ckbc/PhknZD9kp8qTPRhSsI91x8BeX7oICuNkOs6PKErt09EtIogQAntIAG Uw2DaB5p8Aop7Ew4zMAW8MMyWgGJlfIyGFKtKXmWaOTBL+orkQvEuvzyykg2JgD8 Go8KnuZxICEIfCYPF8ScMJM8eh/9TVmXtLeDJ8bhTwC/GqmAB2u//IUEnU8TEtVG gW8RxaWYKrPXf0sPADxYrIWWdybuOpJy8HmPraLt9REBlClcmnvoZPlD9PzWSzax +QjV9IcD1Oo+t9sQlI0aLQT3jMhuBNmyoXW/Selnj7L8Sm6DRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPP09AN0ebLhVfjki3/QF0nLFLUUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWQxOWJmOTYtYzAxZC0z MTAyLTgwNjYtZDlhZTgyNmE2ZTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBK9Fre9bIUE/5z23s4+xLFVu5boT6wgwDlbppSRL5MXCD8sbLs4ZWD NY44/UQzgIl3OZL8xt/yaYVf9znnK8cb3Ifnp112RiOxTWO0lig7ZnKTgLFa+uFx gMCOg91fub6QEbxV9nNZErBDHO4ZmmeXAUOmqB21cWBIwqqA2SYvrKoYezxVg3xA zs4WwFD+efyxws699VomBcuhGnuY0+grKxIaUC0ohOg4vhsaIJXcEi8un5G+NrLd oCoJJfKalwojHfIgJIHO3dVYFg8DDZAeSZM0Il4P7sg4JAZQWEuN0RxW1PRtqRUQ 9acU2CF/OAdJwaq5wfcYTfTrhrvKjMBU -----END CERTIFICATE-----Generated at Mon Mar 2 05:58:19 2026 by rpki-client