$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c34f924c-10f3-3f1a-882e-56663b0511c4.roa File: c34f924c-10f3-3f1a-882e-56663b0511c4.roa (raw, json) Hash identifier: y4l+Blg68fswxpUx2E5jDaqtYy9lIua8JMV7FuY7rYg= Subject key identifier: B4:22:59:AA:8B:88:B9:FE:0A:0F:B8:38:55:C7:5F:3D:B9:95:9A:1A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217A2F9E61025EDBB67D900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c34f924c-10f3-3f1a-882e-56663b0511c4.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396597 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:a2:f9:e6:10:25:ed:bb:67:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=fd0bc1ab-7311-4022-9719-868f9bc6516c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cb:95:72:2e:e2:33:ff:87:ec:64:f1:ce:43: 00:d7:a6:71:b7:c1:04:8a:a0:10:79:9b:15:83:19: 54:5a:17:4a:75:93:55:53:77:bb:2e:d9:14:12:6f: f7:f5:01:bc:29:84:ce:29:27:e9:e2:6f:1e:2f:54: 62:4c:8f:5b:f3:61:92:e9:bd:96:9c:ee:83:ac:06: 92:fc:12:bf:2b:96:2b:47:ce:0a:d1:e9:c0:21:b5: cb:71:fb:e9:5f:0d:c1:ac:bf:9e:d0:db:37:ef:ee: a3:e6:35:76:57:3a:ca:5d:8e:48:a3:04:32:e2:e3: a9:de:7a:68:88:94:00:24:da:59:fd:e5:8d:f0:63: 91:bf:57:9f:6a:a2:d2:e9:61:3a:67:09:e4:c7:63: 9e:0e:09:a3:1d:ed:3a:65:da:c2:f6:38:0a:11:6b: 16:25:8f:a2:2a:b5:04:ef:0d:97:ce:59:b6:7a:18: 41:03:59:27:12:43:da:f6:e7:02:aa:0e:f5:16:1a: 58:a3:f6:42:3b:4d:09:f4:48:60:be:af:cc:c7:28: 95:6f:5f:4a:4f:dd:4b:43:9a:eb:7e:1b:5d:3e:b9: 21:ac:6e:ec:ce:8f:e2:76:49:2c:6e:86:43:31:b0: 1e:49:c6:ba:90:e3:c0:e5:d9:80:61:54:de:88:3a: bd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:22:59:AA:8B:88:B9:FE:0A:0F:B8:38:55:C7:5F:3D:B9:95:9A:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c34f924c-10f3-3f1a-882e-56663b0511c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:36:31:c6:9d:f0:7e:86:f5:74:92:af:b5:b2:9f:c1:36:07: af:97:a8:1d:55:b3:68:69:bd:f2:2d:99:18:88:54:7f:50:cb: f9:80:3e:42:ce:b7:05:f0:92:1c:8d:e4:f9:b3:23:da:1a:a9: 91:89:70:27:f9:92:1f:3e:3e:0e:fb:04:a2:7f:24:98:97:c5: fa:ad:c5:c2:f0:04:71:6b:28:70:41:9f:fa:8d:1e:d8:f6:08: c9:fd:ad:42:83:9d:79:41:36:dd:39:e7:db:25:f4:b5:fc:8e: e9:5e:4f:64:a0:e4:1d:61:33:c6:88:4f:4a:be:3f:80:11:4f: 03:73:ae:2d:b3:2b:68:07:22:10:25:04:f5:1d:29:86:d5:08: dd:2e:0b:40:7b:af:13:fd:fe:51:18:64:32:c1:df:68:2d:aa: cd:57:d1:fd:31:a1:80:5e:c9:f4:7b:71:d6:dd:79:ea:62:0c: a9:41:76:cd:ee:c1:f3:ba:18:47:a5:27:88:05:9d:ae:54:43: f6:54:5c:aa:37:a3:9c:3c:21:67:54:a6:9d:9c:cb:6f:28:4e: 92:2c:54:a8:2b:c2:ab:f1:07:9c:0e:46:00:cc:97:78:1f:ea: 9f:43:53:b1:ab:9f:28:78:42:16:09:74:00:01:74:98:9a:64: 66:71:95:db -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF6L55hAl7btn2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmQwYmMxYWItNzMxMS00MDIyLTk3MTktODY4ZjliYzY1MTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsuVci7iM/+H7GTxzkMA16Zxt8EEiqAQeZsV gxlUWhdKdZNVU3e7LtkUEm/39QG8KYTOKSfp4m8eL1RiTI9b82GS6b2WnO6DrAaS /BK/K5YrR84K0enAIbXLcfvpXw3BrL+e0Ns37+6j5jV2VzrKXY5IowQy4uOp3npo iJQAJNpZ/eWN8GORv1efaqLS6WE6Zwnkx2OeDgmjHe06ZdrC9jgKEWsWJY+iKrUE 7w2Xzlm2ehhBA1knEkPa9ucCqg71FhpYo/ZCO00J9Ehgvq/MxyiVb19KT91LQ5rr fhtdPrkhrG7szo/idkksboZDMbAeSca6kOPA5dmAYVTeiDq9pwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLQiWaqLiLn+Cg+4OFXHXz25lZoaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzM0ZjkyNGMtMTBmMy0z ZjFhLTg4MmUtNTY2NjNiMDUxMWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCNNjHGnfB+hvV0kq+1sp/BNgevl6gdVbNoab3yLZkYiFR/UMv5gD5C zrcF8JIcjeT5syPaGqmRiXAn+ZIfPj4O+wSifySYl8X6rcXC8ARxayhwQZ/6jR7Y 9gjJ/a1Cg515QTbdOefbJfS1/I7pXk9koOQdYTPGiE9Kvj+AEU8Dc64tsytoByIQ JQT1HSmG1QjdLgtAe68T/f5RGGQywd9oLarNV9H9MaGAXsn0e3HW3XnqYgypQXbN 7sHzuhhHpSeIBZ2uVEP2VFyqN6OcPCFnVKadnMtvKE6SLFSoK8Kr8QecDkYAzJd4 H+qfQ1Oxq58oeEIWCXQAAXSYmmRmcZXb -----END CERTIFICATE-----Generated at Mon Mar 2 21:10:23 2026 by rpki-client