$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affea73b-0180-3ae1-b688-f6f004b73e14.roa File: affea73b-0180-3ae1-b688-f6f004b73e14.roa (raw, json) Hash identifier: roi+N/G9AfAa571pR7cYZ4ufa7yiBlSO+1rmf+CIEW4= Subject key identifier: 37:8E:8F:3D:B8:99:14:D8:20:DF:C8:55:22:2D:8F:E9:A9:B4:A9:B1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217C07B8F968DBC62698800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affea73b-0180-3ae1-b688-f6f004b73e14.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396593 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:c0:7b:8f:96:8d:bc:62:69:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=d8a1cb9c-5f01-4cce-b519-649540ba1ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7b:70:48:fc:a5:9c:aa:11:94:a5:82:38:64: c4:f7:a7:58:04:7f:42:0e:c1:69:fa:07:07:0a:20: 90:fa:17:08:c2:b8:12:56:8a:91:3e:61:18:ea:e7: 28:1e:8c:71:88:45:4a:93:db:5c:cb:07:66:e8:d1: a6:db:23:1a:9a:2b:a9:1c:04:49:0d:3b:5a:cf:f4: 77:42:aa:8d:f4:4b:c0:a7:1f:59:e3:f6:62:8d:96: c5:08:cb:20:dd:52:53:7c:8d:a9:45:1c:c3:ab:0e: 10:2d:48:29:1f:64:69:17:7a:e9:f7:4b:70:27:d2: 51:a5:c9:d8:4a:76:47:56:43:1a:5b:8a:b0:0b:63: 37:94:3b:f8:c0:76:16:ff:7d:63:62:79:5a:a5:03: 66:94:6a:c5:1e:1d:d1:ed:d4:65:24:de:42:71:9e: 50:a5:46:f4:b1:b3:20:71:6c:f7:84:1c:18:04:7c: 2c:ae:e6:49:61:1e:87:51:99:c8:74:b1:fe:5c:e7: e8:0e:c4:42:be:83:ff:2b:ca:cc:d1:c0:54:b0:bd: 56:f4:bc:20:2c:eb:d5:b9:71:05:a6:8d:e5:93:c3: 78:1f:44:79:47:e5:c9:9d:de:51:56:ac:9f:5b:e2: d8:cc:ed:a8:08:fe:98:99:26:3c:d9:e4:fe:ac:f3: c1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8E:8F:3D:B8:99:14:D8:20:DF:C8:55:22:2D:8F:E9:A9:B4:A9:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affea73b-0180-3ae1-b688-f6f004b73e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:65:26:5d:01:cc:37:ad:34:d7:7a:00:1b:ef:32:e4:d5:74: c7:d3:55:01:30:35:fa:5b:79:48:3f:47:97:eb:ab:2c:fb:59: 67:ea:17:cf:68:6d:eb:6f:7c:47:43:9b:c0:0c:3b:9e:1c:1b: a9:6b:c0:27:61:dd:2e:ce:31:ee:2c:7c:45:fd:97:f7:a3:9a: b5:22:3f:4b:4c:70:32:7d:38:05:5f:44:3a:db:26:95:92:e7: 99:05:8e:e9:aa:ba:81:c4:27:b9:a2:0c:dc:e1:af:aa:ef:7a: 2d:9d:47:37:16:3f:c2:7a:e2:51:e7:51:ce:a3:cb:1b:c4:62: 75:7c:bd:e3:a4:14:39:93:e5:84:b0:18:db:fe:f0:b2:56:ac: c9:a2:d2:1e:d9:c6:a8:f8:8d:6a:91:85:10:a3:04:77:b4:0d: 30:04:86:04:b3:65:23:ed:ba:1b:db:48:78:1e:d9:ad:81:e0: f9:b3:d2:1c:d9:9f:e7:b9:9b:21:3a:b9:d3:b9:64:09:e1:31: a8:a0:11:18:28:42:23:35:2f:5c:5e:c5:2b:ba:fb:5a:76:5e: 4b:18:d3:6a:12:f6:ad:52:02:40:71:0d:48:5d:bc:b3:0f:ae: 67:97:63:82:fb:bb:e5:7f:73:4e:7d:d1:67:b2:de:48:0d:67: 29:ac:a1:77 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF8B7j5aNvGJpiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZDhhMWNiOWMtNWYwMS00Y2NlLWI1MTktNjQ5NTQwYmExYWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXtwSPylnKoRlKWCOGTE96dYBH9CDsFp+gcH CiCQ+hcIwrgSVoqRPmEY6ucoHoxxiEVKk9tcywdm6NGm2yMamiupHARJDTtaz/R3 QqqN9EvApx9Z4/ZijZbFCMsg3VJTfI2pRRzDqw4QLUgpH2RpF3rp90twJ9JRpcnY SnZHVkMaW4qwC2M3lDv4wHYW/31jYnlapQNmlGrFHh3R7dRlJN5CcZ5QpUb0sbMg cWz3hBwYBHwsruZJYR6HUZnIdLH+XOfoDsRCvoP/K8rM0cBUsL1W9LwgLOvVuXEF po3lk8N4H0R5R+XJnd5RVqyfW+LYzO2oCP6YmSY82eT+rPPBnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDeOjz24mRTYIN/IVSItj+mptKmxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWZmZWE3M2ItMDE4MC0z YWUxLWI2ODgtZjZmMDA0YjczZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBzZSZdAcw3rTTXegAb7zLk1XTH01UBMDX6W3lIP0eX66ss+1ln6hfP aG3rb3xHQ5vADDueHBupa8AnYd0uzjHuLHxF/Zf3o5q1Ij9LTHAyfTgFX0Q62yaV kueZBY7pqrqBxCe5ogzc4a+q73otnUc3Fj/CeuJR51HOo8sbxGJ1fL3jpBQ5k+WE sBjb/vCyVqzJotIe2cao+I1qkYUQowR3tA0wBIYEs2Uj7bob20h4HtmtgeD5s9Ic 2Z/nuZshOrnTuWQJ4TGooBEYKEIjNS9cXsUruvtadl5LGNNqEvatUgJAcQ1IXbyz D65nl2OC+7vlf3NOfdFnst5IDWcprKF3 -----END CERTIFICATE-----Generated at Mon Mar 2 02:56:00 2026 by rpki-client