$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d8eb275-7be8-39ac-90a0-1afe2a22a898.roa File: 9d8eb275-7be8-39ac-90a0-1afe2a22a898.roa (raw, json) Hash identifier: nDsjil2R7p5jXLr+nkZtUxg+6nqP2ENmI+2YN/pYry4= Subject key identifier: AF:5D:E5:FB:9E:9D:AF:BD:51:52:CC:4F:9D:59:A3:58:1C:FB:75:99 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217A1E5703204157B5C8680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d8eb275-7be8-39ac-90a0-1afe2a22a898.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 397212 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:a1:e5:70:32:04:15:7b:5c:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=d4a03b45-65ef-4322-b679-d344f045d811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a3:79:56:31:3e:af:d7:ae:c6:b1:4f:d8:5a: 6e:b0:31:2c:44:ad:a6:a8:c9:bf:df:d4:69:b4:54: 4a:e9:38:ea:fd:1e:ce:22:89:a4:0f:c8:49:93:be: b6:38:f8:92:84:75:06:50:d9:ab:b7:09:6f:2c:12: 1c:e6:0b:55:41:28:b4:f7:52:49:dd:33:c0:09:11: d7:0b:3f:08:87:4b:f7:dc:3e:c3:5f:99:4f:27:19: 0a:7c:7a:2c:44:c4:8d:f9:63:b4:ce:9a:37:f1:c2: 86:0d:b3:d9:29:e2:cc:c0:f1:50:10:fa:db:4d:2a: eb:44:35:f1:eb:3f:0c:05:82:71:6c:62:a9:36:d0: e3:4a:c2:32:40:a8:79:ae:7a:4f:fb:d4:06:5f:db: a9:9a:c1:ea:85:86:05:97:8d:87:87:dc:b2:44:10: 03:db:36:1c:b6:47:bf:78:32:e0:9f:83:a8:e5:57: 0c:01:df:8d:36:9f:c2:79:88:ee:84:98:3b:26:b4: 58:fa:57:d6:64:47:5a:48:58:0f:11:13:5e:5f:86: 2f:59:e7:d7:35:3e:86:7a:76:ab:f4:2d:0c:ef:97: 1b:1e:81:25:47:a7:7a:8d:88:0d:a3:b4:82:98:0a: bb:8c:b9:a1:94:69:22:b7:c5:f7:48:36:ee:7c:1d: d7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5D:E5:FB:9E:9D:AF:BD:51:52:CC:4F:9D:59:A3:58:1C:FB:75:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d8eb275-7be8-39ac-90a0-1afe2a22a898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:55:e6:6e:ba:40:dc:c2:49:f1:56:d2:e2:79:a8:9a:90:dc: ca:75:1d:b9:7c:2c:65:4a:ee:35:72:f9:29:ca:b9:e1:50:21: 07:1d:ff:72:85:9d:b2:ae:69:5f:2e:2d:78:53:5f:b5:37:c5: fe:be:00:7c:3d:7d:f9:1c:8c:bf:a8:64:c7:5d:57:b0:8e:55: 30:75:cc:b6:9a:37:32:9e:06:37:16:69:36:de:85:26:bf:dc: 85:fc:25:9a:0c:81:c5:29:c1:77:88:01:9d:65:f8:db:8e:01: 1d:da:77:b5:11:d7:c8:c3:77:d4:df:2d:d5:81:52:14:ea:60: 34:f8:f5:1e:8a:9b:89:e8:2b:bb:a7:d9:94:43:b0:a9:35:02: a1:37:ce:42:c1:f0:a2:f7:ad:3e:76:82:71:74:b0:17:51:b7: 0d:f4:cc:3e:d4:0a:3d:79:bc:94:09:94:c7:43:90:75:7d:4d: d9:2f:38:b6:a2:9e:69:1a:1e:59:82:aa:29:9d:61:82:44:18: 5e:66:af:12:ec:2f:f6:a0:34:77:d4:51:99:76:bf:72:9e:76: d8:d9:87:cd:d3:d7:6c:f6:5f:a6:6c:3e:a4:d3:2e:70:3b:0b: 21:ce:24:2a:4e:05:ef:6d:34:ae:45:6f:6d:de:5d:f1:b2:51: 0d:d0:91:03 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF6HlcDIEFXtchoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZDRhMDNiNDUtNjVlZi00MzIyLWI2NzktZDM0NGYwNDVkODExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqN5VjE+r9euxrFP2FpusDEsRK2mqMm/39Rp tFRK6Tjq/R7OIomkD8hJk762OPiShHUGUNmrtwlvLBIc5gtVQSi091JJ3TPACRHX Cz8Ih0v33D7DX5lPJxkKfHosRMSN+WO0zpo38cKGDbPZKeLMwPFQEPrbTSrrRDXx 6z8MBYJxbGKpNtDjSsIyQKh5rnpP+9QGX9upmsHqhYYFl42Hh9yyRBAD2zYctke/ eDLgn4Oo5VcMAd+NNp/CeYjuhJg7JrRY+lfWZEdaSFgPERNeX4YvWefXNT6Genar 9C0M75cbHoElR6d6jYgNo7SCmAq7jLmhlGkit8X3SDbufB3X/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK9d5fuena+9UVLMT51Zo1gc+3WZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWQ4ZWIyNzUtN2JlOC0z OWFjLTkwYTAtMWFmZTJhMjJhODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAuVeZuukDcwknxVtLieaiakNzKdR25fCxlSu41cvkpyrnhUCEHHf9y hZ2yrmlfLi14U1+1N8X+vgB8PX35HIy/qGTHXVewjlUwdcy2mjcyngY3Fmk23oUm v9yF/CWaDIHFKcF3iAGdZfjbjgEd2ne1EdfIw3fU3y3VgVIU6mA0+PUeipuJ6Cu7 p9mUQ7CpNQKhN85CwfCi960+doJxdLAXUbcN9Mw+1Ao9ebyUCZTHQ5B1fU3ZLzi2 op5pGh5ZgqopnWGCRBheZq8S7C/2oDR31FGZdr9ynnbY2YfN09ds9l+mbD6k0y5w OwshziQqTgXvbTSuRW9t3l3xslEN0JED -----END CERTIFICATE-----Generated at Mon Mar 2 02:37:20 2026 by rpki-client