$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af85614e-7c92-3643-b55c-470e5ec31d97.roa File: af85614e-7c92-3643-b55c-470e5ec31d97.roa (raw, json) Hash identifier: QIxi4kLRLYxtu4t5zb4LFGn4bHq06C78kyTE/1rcucM= Subject key identifier: 56:FC:D7:0B:AD:12:27:F6:EB:9B:5F:3B:F1:09:67:0D:E9:84:5C:BF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217928D5FC025B5DD01A100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af85614e-7c92-3643-b55c-470e5ec31d97.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 36630 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:92:8d:5f:c0:25:b5:dd:01:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=5c5d5ea2-86e4-4247-ae42-73b0dd160da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:80:3d:e0:33:97:53:48:5b:77:33:81:ea:f2: 5b:10:bf:bb:12:ce:0d:f0:ce:2f:df:69:b5:f5:25: 98:b4:14:f3:e1:92:69:aa:5e:f6:08:26:e2:89:bd: e1:5a:29:b6:be:ab:82:ab:43:72:74:f8:6b:e5:24: 2e:be:a9:8f:04:7f:d9:5c:28:43:9e:48:f5:d0:87: ee:56:6f:53:fb:f6:0f:78:20:b3:f4:4a:7b:3b:88: f5:37:54:ae:a6:d4:15:00:0a:7f:54:d9:88:98:d6: 50:00:3b:49:1a:36:2b:72:a7:75:42:d8:a0:59:88: 7c:77:25:58:8e:0f:d9:96:a1:78:22:00:93:e7:bb: ee:b7:07:24:37:fc:d6:55:28:76:6d:1f:86:24:d1: 5f:eb:59:7e:31:7b:81:81:d6:c1:e6:6d:ad:20:63: 77:1f:1f:6e:96:4c:f1:49:06:bc:8f:ac:f1:a8:aa: 4e:7a:00:9d:0e:ea:cd:6c:6d:f2:34:4f:26:86:21: e9:68:38:28:23:c1:7f:68:60:e1:c9:65:f6:ea:fd: 6f:9a:e0:9f:e2:b7:a5:7b:df:eb:06:08:0c:be:3a: 32:c1:89:e5:42:79:2b:fc:be:18:23:1c:d3:df:22: f4:3d:75:f6:db:0c:a6:16:a2:4a:4f:bd:8b:99:f9: fc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FC:D7:0B:AD:12:27:F6:EB:9B:5F:3B:F1:09:67:0D:E9:84:5C:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af85614e-7c92-3643-b55c-470e5ec31d97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:31:a4:da:09:53:6a:46:2a:c5:c3:ce:93:96:d2:14:bc:b9: a8:16:2a:21:67:1b:74:60:ce:3c:39:bf:bd:ae:65:4e:85:7f: 16:7b:ad:3a:4f:6e:43:a3:56:53:f9:b6:64:52:c8:b4:b4:68: 15:9f:77:c1:6f:dc:c6:c5:46:95:64:0b:a8:d0:98:ff:16:cf: 39:bb:d0:14:97:e6:55:ff:76:7e:fd:e9:0a:94:ba:c1:ff:6d: 2c:40:9e:36:67:89:70:37:39:bd:bd:cf:6f:c7:6f:93:1e:f2: fd:93:99:5e:ea:99:15:06:ab:e8:da:77:da:22:d4:aa:8b:42: 27:11:92:f9:f9:9c:56:07:c3:b2:81:98:72:47:80:c1:39:f4: de:91:57:3d:17:71:4f:b8:17:93:a4:6b:5d:0a:be:a0:31:39: e6:fa:62:64:d3:2b:f5:d4:da:1c:70:79:4f:fa:19:24:de:cb: da:b3:06:61:9b:e5:56:ac:78:ab:04:f9:59:6b:77:59:6d:9d: ad:7e:58:1e:2c:ae:65:b1:c5:e5:5e:4b:5e:2a:f0:8d:87:c7: b8:b1:b6:c1:ed:3b:fa:e3:2b:bb:38:6f:0b:c6:c7:52:a8:a8: ca:b6:69:67:14:13:8f:5e:7d:d7:76:d7:64:95:3a:c2:27:d4: ad:6e:a1:45 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF5KNX8Altd0BoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk NWM1ZDVlYTItODZlNC00MjQ3LWFlNDItNzNiMGRkMTYwZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYA94DOXU0hbdzOB6vJbEL+7Es4N8M4v32m1 9SWYtBTz4ZJpql72CCbiib3hWim2vquCq0NydPhr5SQuvqmPBH/ZXChDnkj10Ifu Vm9T+/YPeCCz9Ep7O4j1N1SuptQVAAp/VNmImNZQADtJGjYrcqd1QtigWYh8dyVY jg/ZlqF4IgCT57vutwckN/zWVSh2bR+GJNFf61l+MXuBgdbB5m2tIGN3Hx9ulkzx SQa8j6zxqKpOegCdDurNbG3yNE8mhiHpaDgoI8F/aGDhyWX26v1vmuCf4rele9/r BggMvjoywYnlQnkr/L4YIxzT3yL0PXX22wymFqJKT72Lmfn8qwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFb81wutEif265tfO/EJZw3phFy/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY4NTYxNGUtN2M5Mi0z NjQzLWI1NWMtNDcwZTVlYzMxZDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCQMaTaCVNqRirFw86TltIUvLmoFiohZxt0YM48Ob+9rmVOhX8We606 T25Do1ZT+bZkUsi0tGgVn3fBb9zGxUaVZAuo0Jj/Fs85u9AUl+ZV/3Z+/ekKlLrB /20sQJ42Z4lwNzm9vc9vx2+THvL9k5le6pkVBqvo2nfaItSqi0InEZL5+ZxWB8Oy gZhyR4DBOfTekVc9F3FPuBeTpGtdCr6gMTnm+mJk0yv11NoccHlP+hkk3svaswZh m+VWrHirBPlZa3dZbZ2tflgeLK5lscXlXkteKvCNh8e4sbbB7Tv64yu7OG8LxsdS qKjKtmlnFBOPXn3XdtdklTrCJ9StbqFF -----END CERTIFICATE-----Generated at Mon Mar 2 07:43:30 2026 by rpki-client