$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a51333c0-b920-37c3-ac71-0834c73fd5c3.roa File: a51333c0-b920-37c3-ac71-0834c73fd5c3.roa (raw, json) Hash identifier: gLAF3ZBTcAqxH9GfkKIdQt0IzUZeaehjb5yQ6W6fgco= Subject key identifier: 73:77:D8:E1:61:11:DA:59:3F:83:0E:61:4C:8F:1C:57:AA:F8:7F:D2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D02178FCF5B417CF0A6C41E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a51333c0-b920-37c3-ac71-0834c73fd5c3.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396590 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:8f:cf:5b:41:7c:f0:a6:c4:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=b213b835-77de-456a-a28e-3788aa17937f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6e:d7:bf:8c:39:bb:5a:83:2a:62:e5:b5:b0: 5e:82:d2:98:77:e6:60:b7:96:fe:7e:5c:fd:6d:7a: 2e:57:4a:8b:64:fe:0a:24:48:5d:51:94:3e:9e:ae: bd:cf:7f:ab:28:9f:23:54:49:ec:ce:97:30:75:91: 4a:ba:43:f3:25:68:de:ea:61:bd:76:5b:2e:02:ee: b7:ca:39:da:9d:27:82:0f:dd:dc:5a:09:f6:07:69: 19:89:1c:3d:09:da:f8:69:19:2a:01:cb:ae:7f:4a: bc:f8:ec:9d:aa:a5:46:c6:26:05:2e:87:c4:cd:7d: d6:4e:1a:cc:73:2c:ff:98:0a:39:99:a5:eb:b7:22: bf:a7:d2:49:95:57:af:3b:5e:a8:4a:4f:09:13:d0: 6e:d5:c6:b4:f7:b5:fe:00:b8:b8:e6:68:c3:a6:0b: f6:87:82:b3:50:db:89:09:66:c6:be:f5:2f:84:fa: 79:04:b1:59:a6:24:f4:f5:1e:85:12:4a:29:b1:5a: 71:c0:9f:41:84:a5:d4:3c:1c:bd:ba:58:f2:c8:35: 56:fd:69:17:5e:dc:0e:e0:1e:2b:23:3e:f5:14:6c: 62:cd:36:ff:1f:e4:ef:08:c4:7f:e1:60:35:bb:a1: fe:06:fc:d6:e0:75:32:bb:08:ad:93:f2:81:81:3f: 08:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:77:D8:E1:61:11:DA:59:3F:83:0E:61:4C:8F:1C:57:AA:F8:7F:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a51333c0-b920-37c3-ac71-0834c73fd5c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:5e:97:e1:bb:9b:e3:0f:d2:13:01:4d:e6:25:96:ee:54:32: 7d:10:7a:be:40:21:93:48:74:a3:16:a9:5f:68:f5:eb:ad:54: 26:f8:60:54:2d:14:e9:d0:4c:aa:55:85:0c:98:30:ca:9e:1b: 96:51:76:96:3a:c5:82:fd:e3:17:1f:da:42:ed:8b:b0:0d:8c: e2:38:bc:0e:ea:b3:10:1b:56:bf:cf:d2:58:33:5c:21:d4:9a: 6d:f2:f9:8a:d4:e9:f8:dd:02:8f:da:f9:ae:72:f9:79:42:6a: 9b:18:bc:06:dc:7b:91:b4:7c:29:d5:77:de:3c:6b:e5:cc:0b: b2:c0:78:a4:9f:49:97:a8:c3:9f:b2:e0:92:b7:fa:3e:8f:2f: 0f:c1:31:b6:bb:0e:90:4b:f1:b2:8b:2f:cf:90:fa:8b:61:19: 7a:40:9e:ac:d0:c9:75:88:d3:88:60:c0:9c:f6:98:89:bb:67: da:11:ca:41:7c:d3:58:e9:9e:36:84:56:6a:1d:0e:92:ac:0c: 0e:6a:be:eb:7e:c3:e2:48:a8:f4:66:55:6a:1b:e4:a3:4d:2a: 23:b8:d3:ab:93:6e:bf:19:0e:d5:2e:a2:87:62:a2:24:5f:5c: ab:77:83:76:ae:c2:c8:3b:52:6c:15:1a:df:91:05:07:af:6e: c2:78:fb:cc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF4/PW0F88KbEHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjIxM2I4MzUtNzdkZS00NTZhLWEyOGUtMzc4OGFhMTc5MzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2W7Xv4w5u1qDKmLltbBegtKYd+Zgt5b+flz9 bXouV0qLZP4KJEhdUZQ+nq69z3+rKJ8jVEnszpcwdZFKukPzJWje6mG9dlsuAu63 yjnanSeCD93cWgn2B2kZiRw9Cdr4aRkqAcuuf0q8+OydqqVGxiYFLofEzX3WThrM cyz/mAo5maXrtyK/p9JJlVevO16oSk8JE9Bu1ca097X+ALi45mjDpgv2h4KzUNuJ CWbGvvUvhPp5BLFZpiT09R6FEkopsVpxwJ9BhKXUPBy9uljyyDVW/WkXXtwO4B4r Iz71FGxizTb/H+TvCMR/4WA1u6H+BvzW4HUyuwitk/KBgT8IqwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHN32OFhEdpZP4MOYUyPHFeq+H/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTUxMzMzYzAtYjkyMC0z N2MzLWFjNzEtMDgzNGM3M2ZkNWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCOXpfhu5vjD9ITAU3mJZbuVDJ9EHq+QCGTSHSjFqlfaPXrrVQm+GBU LRTp0EyqVYUMmDDKnhuWUXaWOsWC/eMXH9pC7YuwDYziOLwO6rMQG1a/z9JYM1wh 1Jpt8vmK1On43QKP2vmucvl5QmqbGLwG3HuRtHwp1XfePGvlzAuywHikn0mXqMOf suCSt/o+jy8PwTG2uw6QS/Gyiy/PkPqLYRl6QJ6s0Ml1iNOIYMCc9piJu2faEcpB fNNY6Z42hFZqHQ6SrAwOar7rfsPiSKj0ZlVqG+SjTSojuNOrk26/GQ7VLqKHYqIk X1yrd4N2rsLIO1JsFRrfkQUHr27CePvM -----END CERTIFICATE-----Generated at Mon Mar 2 06:22:40 2026 by rpki-client