$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0a3aa4d-25d1-3d71-a596-608aff0a0dfd.roa File: b0a3aa4d-25d1-3d71-a596-608aff0a0dfd.roa (raw, json) Hash identifier: zjQLdp7ukdD2KSH9HMf/8vNLy0ljKhipqR8D+Q9A49U= Subject key identifier: 59:F0:57:06:0D:32:4F:C2:A8:21:3D:7A:76:AF:29:62:CD:A0:A2:A6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D021791175122B009AE11AD40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0a3aa4d-25d1-3d71-a596-608aff0a0dfd.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396561 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:91:17:51:22:b0:09:ae:11:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=e0332499-e76a-46a0-a33f-a94aed94ce98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:64:c2:65:91:33:d8:c9:14:b4:44:2a:29:5e: 3a:2e:64:04:86:fd:b8:df:e5:b6:e9:da:ac:1e:4a: be:5b:d5:5b:bb:b9:34:8f:f9:cf:c9:49:eb:cd:34: e8:f0:81:06:55:c8:61:dd:d8:36:f0:4b:53:f5:ac: a7:27:51:76:49:46:66:b8:ac:ae:89:83:ef:5c:c4: 17:c8:6c:c0:98:7b:3a:9b:a7:61:7d:b4:b8:b7:29: 64:ab:6b:7d:8f:45:8f:40:5e:77:d5:dc:07:5f:20: 67:71:7f:0b:9c:e8:f6:86:5f:77:b1:b5:df:99:c1: 58:df:a8:e5:25:86:0e:75:dd:20:8c:2f:5b:49:9c: c8:6f:3a:cc:4e:f8:3d:12:be:52:f6:a4:ca:09:22: 8b:f9:15:33:b2:30:38:ec:bc:3f:2d:46:04:11:4f: 0a:df:40:d8:8e:35:35:ea:bf:1c:24:9e:1f:6a:c6: 0b:4b:20:42:bc:39:4a:c0:1f:85:37:6d:df:98:4a: 22:ba:fd:b5:bb:b1:11:46:11:7e:f9:56:9a:d8:80: 5d:c9:a1:1f:d6:ff:d4:12:6a:d1:3b:65:06:3c:3e: c3:04:7f:42:07:a3:43:59:e1:80:e8:85:ff:67:f7: 6a:14:da:3c:c5:ea:09:b6:91:e5:19:81:d2:4d:f4: ba:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F0:57:06:0D:32:4F:C2:A8:21:3D:7A:76:AF:29:62:CD:A0:A2:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0a3aa4d-25d1-3d71-a596-608aff0a0dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:79:dc:ae:66:48:76:19:b0:ed:65:c2:30:d8:c9:be:c2:d7: 3d:17:b4:76:1f:0c:f3:94:66:34:b4:c2:ef:25:d9:be:5c:bd: f7:10:16:2b:34:00:17:9a:82:e8:35:11:94:d0:e8:5a:da:27: 35:81:6e:2b:cf:f9:43:83:c9:e8:ab:1c:11:a5:74:91:78:1a: 28:0d:fa:bb:69:2c:41:7d:a8:8e:3f:75:06:e2:d5:41:e7:fe: 58:e7:b0:b9:dd:97:81:6e:ef:c6:7f:be:95:14:f8:32:0c:7f: 34:38:7b:ac:35:62:d3:ef:af:74:7e:72:c4:1d:a6:71:2c:17: 93:2a:22:5a:18:ce:35:c6:f0:46:13:54:f7:94:79:08:6a:94: b2:6a:34:96:8d:fd:89:6e:96:57:ba:a5:62:e5:d7:9e:ef:cb: 18:49:b5:43:5e:a2:e4:e5:f4:02:92:ca:8e:51:86:ba:79:cf: 80:e5:19:b9:6b:d8:ad:64:2c:64:be:a5:eb:90:f9:3c:1d:8e: 1d:95:90:e6:d5:bf:a9:db:dd:aa:64:69:5d:63:4b:e2:7c:96: 2e:a6:4e:3a:9a:cc:a2:e9:fd:2d:c7:4c:89:9e:80:08:66:b4: ae:ab:90:4d:7c:5c:10:40:e5:ed:c9:00:81:ae:16:83:b9:ba: f0:4f:9e:ad -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF5EXUSKwCa4RrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTAzMzI0OTktZTc2YS00NmEwLWEzM2YtYTk0YWVkOTRjZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2TCZZEz2MkUtEQqKV46LmQEhv243+W26dqs Hkq+W9Vbu7k0j/nPyUnrzTTo8IEGVchh3dg28EtT9aynJ1F2SUZmuKyuiYPvXMQX yGzAmHs6m6dhfbS4tylkq2t9j0WPQF531dwHXyBncX8LnOj2hl93sbXfmcFY36jl JYYOdd0gjC9bSZzIbzrMTvg9Er5S9qTKCSKL+RUzsjA47Lw/LUYEEU8K30DYjjU1 6r8cJJ4fasYLSyBCvDlKwB+FN23fmEoiuv21u7ERRhF++Vaa2IBdyaEf1v/UEmrR O2UGPD7DBH9CB6NDWeGA6IX/Z/dqFNo8xeoJtpHlGYHSTfS6kQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFnwVwYNMk/CqCE9enavKWLNoKKmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjBhM2FhNGQtMjVkMS0z ZDcxLWE1OTYtNjA4YWZmMGEwZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAwedyuZkh2GbDtZcIw2Mm+wtc9F7R2HwzzlGY0tMLvJdm+XL33EBYr NAAXmoLoNRGU0Oha2ic1gW4rz/lDg8noqxwRpXSReBooDfq7aSxBfaiOP3UG4tVB 5/5Y57C53ZeBbu/Gf76VFPgyDH80OHusNWLT7690fnLEHaZxLBeTKiJaGM41xvBG E1T3lHkIapSyajSWjf2JbpZXuqVi5dee78sYSbVDXqLk5fQCksqOUYa6ec+A5Rm5 a9itZCxkvqXrkPk8HY4dlZDm1b+p292qZGldY0vifJYupk46msyi6f0tx0yJnoAI ZrSuq5BNfFwQQOXtyQCBrhaDubrwT56t -----END CERTIFICATE-----Generated at Mon Mar 2 02:00:05 2026 by rpki-client