$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa04401b-7f82-3596-a508-6860fdc939c3.roa File: aa04401b-7f82-3596-a508-6860fdc939c3.roa (raw, json) Hash identifier: bAyf4vbQaM2U5qMVcjYl0XGo0ieteLzJMu/szvY1Pv8= Subject key identifier: 39:21:B7:03:62:AE:24:CD:51:EB:01:C7:14:D0:0A:63:2E:4F:AD:F7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217B69F7FE4CF5CF54F7D60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa04401b-7f82-3596-a508-6860fdc939c3.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 397196 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:b6:9f:7f:e4:cf:5c:f5:4f:7d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=f83ec912-c99f-416a-8bbf-33226fe41604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:af:d0:01:1b:13:c4:fa:69:55:c2:31:5e:7f: 62:6d:b3:a5:0d:30:9a:d7:96:a6:17:78:00:b7:be: 1d:1a:0f:ba:ab:b4:52:f4:1b:b7:c1:b1:79:f2:5e: f1:ba:3b:f3:71:e5:ad:34:74:7b:a1:26:8c:96:a0: 84:f2:44:ca:d5:c1:d1:bc:33:d1:f6:ec:20:cd:68: d3:10:88:a9:a4:54:88:49:15:6f:7b:74:75:0b:63: 2b:4b:37:00:ef:63:90:55:2d:d0:38:1b:8e:a7:44: 5f:3f:78:2a:15:7b:48:8a:67:c6:4b:e4:28:41:d4: da:ed:b8:18:fc:8a:c7:7e:21:22:c4:17:10:eb:bd: fb:24:fb:96:b7:ce:7c:31:ea:52:f7:eb:2a:51:2e: be:05:25:e0:ef:6a:1b:0d:b5:dc:41:15:d7:f7:23: e6:4e:e4:2f:b2:a9:28:8f:20:b8:25:9b:f2:a6:30: 42:dc:2d:74:f6:79:64:8e:bc:98:61:38:fa:05:f2: 03:e7:f0:f2:4e:c6:91:78:58:e3:1c:5b:aa:5f:60: 6c:58:7e:a2:d1:5a:90:36:53:92:a2:1a:62:c4:a2: e1:4c:dc:75:85:79:4a:53:a6:c8:43:a5:ee:20:32: 98:6e:70:de:7b:22:29:fc:1f:14:bf:68:d8:4b:73: a3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:21:B7:03:62:AE:24:CD:51:EB:01:C7:14:D0:0A:63:2E:4F:AD:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa04401b-7f82-3596-a508-6860fdc939c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:5a:1b:92:9b:08:1c:a9:c3:a1:54:64:16:e7:24:8a:5e:7e: b6:ec:22:e9:f6:1a:f0:2a:28:13:64:1e:bd:89:c7:49:3e:03: 5e:7e:7b:89:bf:ae:e2:f4:b0:16:da:db:ab:aa:65:40:f5:6c: e8:fd:66:71:bb:97:85:dc:4b:40:db:32:e7:19:7c:ab:76:4e: ca:18:77:7b:ad:da:82:d4:52:35:e0:33:ce:94:11:29:5c:fe: 19:2f:c7:9d:54:8b:3e:72:d3:39:ad:30:05:37:75:cc:b0:80: 5c:3b:b1:22:07:0e:17:77:aa:14:b1:b5:38:42:66:c9:d6:10: f0:8d:a3:87:da:b7:22:13:52:2c:9b:e7:11:8a:b5:53:ee:f7: 7b:c7:67:cd:56:cb:24:f6:fb:53:88:7b:a1:86:3e:5b:d8:38: 36:9f:eb:09:dd:0b:0d:e4:4a:c1:c4:ae:ca:b2:48:38:43:c6: 82:9e:ce:79:db:b2:9d:17:23:d7:da:bb:a1:62:a9:5f:8f:af: 05:1f:d2:ab:43:bb:89:d7:ec:fa:5d:c3:7c:7b:50:ca:1f:95: 0c:4c:0e:1c:f1:13:2e:b8:0d:3b:c6:8f:39:c8:bf:ea:2d:ac: 94:29:c8:56:1b:af:1f:31:06:19:97:ec:84:87:24:b4:98:2d: b0:c3:e6:6d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF7aff+TPXPVPfWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZjgzZWM5MTItYzk5Zi00MTZhLThiYmYtMzMyMjZmZTQxNjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq/QARsTxPppVcIxXn9ibbOlDTCa15amF3gA t74dGg+6q7RS9Bu3wbF58l7xujvzceWtNHR7oSaMlqCE8kTK1cHRvDPR9uwgzWjT EIippFSISRVve3R1C2MrSzcA72OQVS3QOBuOp0RfP3gqFXtIimfGS+QoQdTa7bgY /IrHfiEixBcQ6737JPuWt858MepS9+sqUS6+BSXg72obDbXcQRXX9yPmTuQvsqko jyC4JZvypjBC3C109nlkjryYYTj6BfID5/DyTsaReFjjHFuqX2BsWH6i0VqQNlOS ohpixKLhTNx1hXlKU6bIQ6XuIDKYbnDeeyIp/B8Uv2jYS3Oj+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDkhtwNiriTNUesBxxTQCmMuT633MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWEwNDQwMWItN2Y4Mi0z NTk2LWE1MDgtNjg2MGZkYzkzOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCBWhuSmwgcqcOhVGQW5ySKXn627CLp9hrwKigTZB69icdJPgNefnuJ v67i9LAW2turqmVA9Wzo/WZxu5eF3EtA2zLnGXyrdk7KGHd7rdqC1FI14DPOlBEp XP4ZL8edVIs+ctM5rTAFN3XMsIBcO7EiBw4Xd6oUsbU4QmbJ1hDwjaOH2rciE1Is m+cRirVT7vd7x2fNVssk9vtTiHuhhj5b2Dg2n+sJ3QsN5ErBxK7Kskg4Q8aCns55 27KdFyPX2ruhYqlfj68FH9KrQ7uJ1+z6XcN8e1DKH5UMTA4c8RMuuA07xo85yL/q LayUKchWG68fMQYZl+yEhyS0mC2ww+Zt -----END CERTIFICATE-----Generated at Mon Mar 2 09:40:30 2026 by rpki-client