$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a223c442-ad8b-3dcf-bbf0-2e088fd97bae.roa File: a223c442-ad8b-3dcf-bbf0-2e088fd97bae.roa (raw, json) Hash identifier: 8foT+yJrO21DvGU/4L3M/VHs7S4CWW56NHMxfUVeO+M= Subject key identifier: 50:32:24:94:47:64:44:6A:9A:78:9B:5C:52:D0:34:96:1A:E1:6C:89 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217B41611C77AB8E31C4A40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a223c442-ad8b-3dcf-bbf0-2e088fd97bae.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396591 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:b4:16:11:c7:7a:b8:e3:1c:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=670b5ec1-15ec-43e7-8d76-1da708b29fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a6:93:80:80:fd:2c:65:4a:ae:d6:47:f5:20: 39:0f:56:df:a0:aa:81:26:08:01:92:79:70:8b:89: f1:54:c7:5c:49:9a:ab:29:bc:23:e2:c1:73:dd:d7: b8:5d:e1:69:74:20:aa:b4:39:e6:42:54:ae:52:83: 46:c8:91:e4:c4:30:84:c0:c2:98:37:01:25:7b:ea: a3:20:e9:6a:3b:2c:6b:05:e7:06:65:3c:24:5b:6b: dd:e2:d0:df:3d:43:4e:79:b2:cc:3e:a1:24:2c:0b: 98:90:18:17:8b:4a:79:73:2c:ad:30:1c:66:c4:19: 33:d9:f6:10:ef:ee:3e:14:43:b7:95:a4:b7:89:3f: b6:4e:68:d4:be:7a:c0:08:66:1e:f3:b5:8e:a1:76: c9:d0:05:ba:1d:34:2f:3d:f3:68:c5:10:0b:15:4d: d5:4d:00:5b:19:dd:92:94:e0:61:bb:cd:97:3c:17: 8f:37:92:84:a2:36:b4:ba:47:55:c2:19:e8:89:e3: ab:31:f9:b2:85:39:c6:61:50:bc:35:a7:a1:ff:85: 75:99:66:2e:86:97:cc:f8:87:6e:7b:06:92:5d:04: 94:7f:27:64:6d:bb:51:9a:e1:a4:75:6b:2f:78:cb: 17:f6:e4:c9:4e:fb:ae:ae:14:26:d5:ed:87:06:ea: f7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:32:24:94:47:64:44:6A:9A:78:9B:5C:52:D0:34:96:1A:E1:6C:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a223c442-ad8b-3dcf-bbf0-2e088fd97bae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a1:14:5c:53:11:bf:de:4e:de:d9:47:c1:f7:b9:b7:d0:a4: 2f:c9:46:e7:de:eb:66:81:04:68:e8:d8:8e:22:94:2b:60:40: 17:94:d8:98:46:3f:b8:27:09:3c:d3:88:6a:a2:91:65:a6:f6: ba:2c:f1:26:c0:d2:2d:40:16:00:3c:23:af:c0:b9:a9:89:0e: 42:8f:95:f1:91:2b:20:60:88:13:2b:9e:b4:33:2d:0c:7d:48: 13:be:bc:d4:e4:eb:9a:ec:45:aa:b0:4a:0a:b9:13:31:7f:6e: 3e:55:26:2d:1d:5f:fd:8e:27:d2:81:37:5e:d7:d5:89:2f:9a: 10:83:87:dc:95:ff:d4:41:7e:4c:b0:58:28:13:f5:1e:8d:ce: a3:7d:97:c3:2c:d5:39:9f:ab:0e:de:e3:bc:af:b5:54:a7:ca: 7e:06:8d:17:75:de:54:2e:04:5e:ed:6c:1b:f2:c7:2b:19:b8: 8a:d7:cc:7f:b5:5e:40:a9:58:c9:fa:d8:e0:9f:25:d5:d0:d6: fb:7d:5c:12:b9:70:d8:99:fa:07:3a:b2:5b:91:8c:13:2f:66: 96:5c:4e:ab:1c:1c:37:23:de:33:8b:22:ac:87:80:a1:cf:a4: 3d:ea:99:be:20:e0:30:67:22:9f:34:e1:08:9b:af:cb:88:5b: 12:d4:16:aa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF7QWEcd6uOMcSkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk NjcwYjVlYzEtMTVlYy00M2U3LThkNzYtMWRhNzA4YjI5ZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qaTgID9LGVKrtZH9SA5D1bfoKqBJggBknlw i4nxVMdcSZqrKbwj4sFz3de4XeFpdCCqtDnmQlSuUoNGyJHkxDCEwMKYNwEle+qj IOlqOyxrBecGZTwkW2vd4tDfPUNOebLMPqEkLAuYkBgXi0p5cyytMBxmxBkz2fYQ 7+4+FEO3laS3iT+2TmjUvnrACGYe87WOoXbJ0AW6HTQvPfNoxRALFU3VTQBbGd2S lOBhu82XPBePN5KEoja0ukdVwhnoieOrMfmyhTnGYVC8Naeh/4V1mWYuhpfM+Idu ewaSXQSUfydkbbtRmuGkdWsveMsX9uTJTvuurhQm1e2HBur3NQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFAyJJRHZERqmnibXFLQNJYa4WyJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTIyM2M0NDItYWQ4Yi0z ZGNmLWJiZjAtMmUwODhmZDk3YmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAQoRRcUxG/3k7e2UfB97m30KQvyUbn3utmgQRo6NiOIpQrYEAXlNiY Rj+4Jwk804hqopFlpva6LPEmwNItQBYAPCOvwLmpiQ5Cj5XxkSsgYIgTK560My0M fUgTvrzU5Oua7EWqsEoKuRMxf24+VSYtHV/9jifSgTde19WJL5oQg4fclf/UQX5M sFgoE/Uejc6jfZfDLNU5n6sO3uO8r7VUp8p+Bo0Xdd5ULgRe7Wwb8scrGbiK18x/ tV5AqVjJ+tjgnyXV0Nb7fVwSuXDYmfoHOrJbkYwTL2aWXE6rHBw3I94ziyKsh4Ch z6Q96pm+IOAwZyKfNOEIm6/LiFsS1Baq -----END CERTIFICATE-----Generated at Mon Mar 2 12:37:04 2026 by rpki-client