$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb62787b-90c5-3a32-864c-cba2ee31983a.roa File: bb62787b-90c5-3a32-864c-cba2ee31983a.roa (raw, json) Hash identifier: F0Mb+DtuJI0ZVqSdZtklds09iSkdmzDZGMU9yhlZdsA= Subject key identifier: B6:F8:B4:D4:B9:3F:13:61:27:92:C0:C9:3D:BB:D6:88:C1:CA:D5:40 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217A0BCE4732B02C89BE200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb62787b-90c5-3a32-864c-cba2ee31983a.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 397200 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:a0:bc:e4:73:2b:02:c8:9b:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=4c8744de-9a5a-49d0-a5fc-2b86ed6b6b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cb:87:da:62:98:4d:7b:6e:5c:d0:fd:de:4b: be:b4:dc:03:84:b0:9e:a1:73:b8:15:03:d0:8f:57: b2:b3:37:ac:2f:8f:ee:76:48:07:38:57:5d:db:a0: b5:3d:4f:0f:0a:49:3d:d2:56:0e:ad:9c:1d:af:c4: da:46:3f:d7:92:c2:1b:56:ea:dc:c9:e1:4d:92:e6: 6b:37:50:65:30:2e:64:ff:1b:dd:d0:9e:b6:8e:a7: 7b:1d:83:19:3a:6b:82:94:1b:6d:2f:d9:5c:1b:87: 1d:f1:e9:7d:5d:1d:a2:79:c2:24:18:59:32:bf:2e: af:8b:4b:c7:7c:a2:b4:e5:57:e6:ed:21:a2:b0:c5: e8:9b:a2:00:7d:5d:1c:f1:f9:5f:ee:33:d3:44:c1: 81:42:36:3a:4b:b2:14:f4:f6:67:dd:8f:f0:81:10: bf:db:6a:c0:70:14:38:94:be:04:c9:9d:a9:9c:0d: 99:4e:98:3b:c3:08:3e:13:4f:20:54:31:1a:76:38: 22:74:20:91:80:cc:b8:c3:56:f8:12:b7:2c:b0:df: 94:47:b6:41:1c:cc:2d:62:fb:70:6f:10:02:3f:9c: c2:63:a9:3e:31:ed:c6:a4:ce:96:b2:b1:61:dd:0b: 71:41:b6:26:56:8a:3a:f3:db:5c:8a:91:7d:07:7a: c7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F8:B4:D4:B9:3F:13:61:27:92:C0:C9:3D:BB:D6:88:C1:CA:D5:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb62787b-90c5-3a32-864c-cba2ee31983a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:c9:e0:8f:ee:3e:4a:6a:77:65:b6:a8:5a:9e:fb:46:a8:91: c3:b4:63:8c:cd:93:ea:c2:d1:c8:43:9d:cc:64:06:67:ac:33: c8:15:25:a4:f1:30:dd:81:fe:17:bc:89:0f:5e:52:5a:90:8b: 1f:e4:c9:65:91:4a:ee:b3:d7:bc:1c:b4:97:19:3c:c1:01:14: 73:a6:ea:9d:f6:f4:47:cc:c6:97:98:41:30:9a:b8:78:07:2a: 1e:03:80:a3:24:aa:05:66:b4:89:17:20:0e:62:0d:59:a7:86: d0:86:e8:89:0e:8d:cc:0c:89:2a:c3:51:61:ab:0c:fe:c1:7a: b9:8c:80:8d:fc:1e:fb:fe:40:4f:71:31:ae:8b:db:9d:a1:50: e3:f3:27:73:6d:f1:c2:7e:4b:23:7e:6a:49:fa:0d:92:fe:f5: 7b:c1:0e:8e:f2:c7:78:6a:ec:09:d8:26:f8:12:09:95:d3:62: 86:78:0e:3f:5d:bc:57:2a:88:6f:75:bf:d4:13:76:3a:24:d4: 94:26:6e:18:65:90:e7:b3:2f:03:39:6a:1f:97:e3:5f:43:41: d3:e2:ed:08:ef:e9:ff:30:22:f1:31:c4:69:7a:e9:e9:99:bf: 20:ed:b5:dc:df:43:89:63:10:8d:ff:d3:7a:69:1f:31:e5:4c: 50:24:75:59 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF6C85HMrAsib4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk NGM4NzQ0ZGUtOWE1YS00OWQwLWE1ZmMtMmI4NmVkNmI2YjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMuH2mKYTXtuXND93ku+tNwDhLCeoXO4FQPQ j1eyszesL4/udkgHOFdd26C1PU8PCkk90lYOrZwdr8TaRj/XksIbVurcyeFNkuZr N1BlMC5k/xvd0J62jqd7HYMZOmuClBttL9lcG4cd8el9XR2iecIkGFkyvy6vi0vH fKK05Vfm7SGisMXom6IAfV0c8flf7jPTRMGBQjY6S7IU9PZn3Y/wgRC/22rAcBQ4 lL4EyZ2pnA2ZTpg7wwg+E08gVDEadjgidCCRgMy4w1b4ErcssN+UR7ZBHMwtYvtw bxACP5zCY6k+Me3GpM6WsrFh3QtxQbYmVoo689tcipF9B3rHhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLb4tNS5PxNhJ5LAyT271ojBytVAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmI2Mjc4N2ItOTBjNS0z YTMyLTg2NGMtY2JhMmVlMzE5ODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjyeCP7j5KandltqhanvtGqJHDtGOMzZPqwtHIQ53MZAZnrDPIFSWk 8TDdgf4XvIkPXlJakIsf5MllkUrus9e8HLSXGTzBARRzpuqd9vRHzMaXmEEwmrh4 ByoeA4CjJKoFZrSJFyAOYg1Zp4bQhuiJDo3MDIkqw1Fhqwz+wXq5jICN/B77/kBP cTGui9udoVDj8ydzbfHCfksjfmpJ+g2S/vV7wQ6O8sd4auwJ2Cb4EgmV02KGeA4/ XbxXKohvdb/UE3Y6JNSUJm4YZZDnsy8DOWofl+NfQ0HT4u0I7+n/MCLxMcRpeunp mb8g7bXc30OJYxCN/9N6aR8x5UxQJHVZ -----END CERTIFICATE-----Generated at Mon Mar 2 02:19:53 2026 by rpki-client