$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1497223-c948-3974-90be-6e423973b2da.roa File: b1497223-c948-3974-90be-6e423973b2da.roa (raw, json) Hash identifier: 1AOp+NkB8EQWz8mOQ+mfkFyq89+4UC2AlXKQ7LdLwv8= Subject key identifier: 14:59:F8:9A:FA:61:97:68:EB:F5:F8:D5:7F:7E:5C:83:15:92:9D:AF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217B649DC918FAA84238E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1497223-c948-3974-90be-6e423973b2da.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 36628 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:b6:49:dc:91:8f:aa:84:23:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=a34cf835-cd37-496a-b9a3-4563c8e64d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f8:95:95:c2:af:b9:4e:6d:d1:78:55:b3:cc: 89:83:a7:10:5d:e3:0e:55:d1:e5:15:c0:0d:41:3a: f7:35:50:d9:f1:06:b2:8b:1d:ec:10:61:ac:3b:cd: 94:45:1f:f5:59:64:53:d8:38:17:8a:6e:81:39:50: 68:c9:00:4e:18:81:fa:84:be:48:4b:55:a6:f5:28: 20:a2:ed:8d:5b:81:22:2a:8f:96:c3:4f:a9:8e:43: 1b:a2:c8:12:85:d7:f0:f3:e0:5b:32:a4:af:74:7e: 26:9b:c7:83:c8:1b:71:dd:c5:b6:b6:29:d0:49:5b: f6:10:32:aa:e1:ab:ed:98:46:33:b0:39:b7:f8:4e: 8a:fe:e5:b9:9b:1e:5c:01:4a:06:64:55:8b:b0:37: b8:82:5b:2f:de:d0:37:d7:52:e8:d1:53:a6:1a:f5: 21:17:72:d7:04:a9:e4:db:a7:14:79:da:83:fb:4b: fc:74:f9:46:4e:4a:02:95:79:82:9b:44:db:44:00: 71:9c:17:e0:50:58:40:97:91:3d:04:f9:ef:cd:9e: f6:6e:c9:de:2b:cf:18:96:44:e7:e5:31:6a:cf:ee: 51:08:43:56:4c:91:ad:d5:1d:f5:54:20:9c:f6:5f: af:9e:e2:a6:99:37:c4:32:ad:86:e7:46:78:34:25: e9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:59:F8:9A:FA:61:97:68:EB:F5:F8:D5:7F:7E:5C:83:15:92:9D:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1497223-c948-3974-90be-6e423973b2da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ed:18:7e:ff:5e:f1:0b:38:f9:08:db:2e:e7:f2:68:7b:a2: 7d:bd:10:6e:0f:5d:01:3b:d7:17:bd:14:cd:d9:82:8d:a1:3d: 33:62:76:a5:34:59:d1:98:5f:3e:48:cf:37:4d:59:8e:3c:e3: 0e:00:47:11:6b:98:14:4b:12:a6:c4:81:bb:1b:bb:2b:28:c2: 97:15:3f:e8:e0:12:a1:8e:6e:2f:97:b3:5d:f1:5b:63:1e:39: d2:11:6c:49:fe:66:4c:2c:8c:01:8e:4d:3a:39:1b:dd:c0:21: d6:f1:c4:e5:3a:92:a1:0a:b4:d6:e5:52:25:61:16:5f:a9:e7: 48:c5:64:7c:fc:bd:88:16:2b:63:03:b9:fe:f7:82:79:a9:2d: 12:24:9e:cc:6c:ce:5f:15:5a:0a:bd:cb:6a:ba:f3:a9:01:2a: 02:73:3f:ac:36:51:f7:23:c1:b8:34:43:4a:ec:7e:14:a3:7d: b8:74:9e:f6:2c:d5:e5:93:1a:47:9e:48:d8:e5:aa:70:a0:4c: 38:9a:a3:72:16:f1:ba:f8:5b:3b:6b:ee:10:5a:57:dc:5a:29: 2a:66:21:59:ff:37:e7:cc:d0:46:d4:93:b6:6a:96:02:9d:74: 6e:2a:b1:29:86:32:fc:55:81:0e:ab:04:11:30:93:0c:e9:7c: a5:15:ef:4b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF7ZJ3JGPqoQjjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTM0Y2Y4MzUtY2QzNy00OTZhLWI5YTMtNDU2M2M4ZTY0ZDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqviVlcKvuU5t0XhVs8yJg6cQXeMOVdHlFcAN QTr3NVDZ8Qayix3sEGGsO82URR/1WWRT2DgXim6BOVBoyQBOGIH6hL5IS1Wm9Sgg ou2NW4EiKo+Ww0+pjkMbosgShdfw8+BbMqSvdH4mm8eDyBtx3cW2tinQSVv2EDKq 4avtmEYzsDm3+E6K/uW5mx5cAUoGZFWLsDe4glsv3tA311Lo0VOmGvUhF3LXBKnk 26cUedqD+0v8dPlGTkoClXmCm0TbRABxnBfgUFhAl5E9BPnvzZ72bsneK88YlkTn 5TFqz+5RCENWTJGt1R31VCCc9l+vnuKmmTfEMq2G50Z4NCXplQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBRZ+Jr6YZdo6/X41X9+XIMVkp2vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjE0OTcyMjMtYzk0OC0z OTc0LTkwYmUtNmU0MjM5NzNiMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAB7Rh+/17xCzj5CNsu5/Joe6J9vRBuD10BO9cXvRTN2YKNoT0zYnal NFnRmF8+SM83TVmOPOMOAEcRa5gUSxKmxIG7G7srKMKXFT/o4BKhjm4vl7Nd8Vtj HjnSEWxJ/mZMLIwBjk06ORvdwCHW8cTlOpKhCrTW5VIlYRZfqedIxWR8/L2IFitj A7n+94J5qS0SJJ7MbM5fFVoKvctquvOpASoCcz+sNlH3I8G4NENK7H4Uo324dJ72 LNXlkxpHnkjY5apwoEw4mqNyFvG6+Fs7a+4QWlfcWikqZiFZ/zfnzNBG1JO2apYC nXRuKrEphjL8VYEOqwQRMJMM6XylFe9L -----END CERTIFICATE-----Generated at Mon Mar 2 02:37:01 2026 by rpki-client