$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c94d6964-346a-351b-80d6-bc38161ce464.roa File: c94d6964-346a-351b-80d6-bc38161ce464.roa (raw, json) Hash identifier: bGHF2bnOdE1XyJIO+0BROsaaJBQYFo1s+UJ1HH6LQ64= Subject key identifier: C5:9E:20:81:0A:36:EE:1C:29:00:80:71:35:5A:6F:13:1C:69:B4:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D021792E39060D4CEC6BBBA40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c94d6964-346a-351b-80d6-bc38161ce464.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396602 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:92:e3:90:60:d4:ce:c6:bb:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=dd0cc7a3-7b97-4803-b72f-81b64ab0520f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:87:2d:e3:7e:e4:f6:79:98:70:e8:f1:58: f5:75:8d:82:20:13:47:5a:8c:5e:94:3c:3b:d1:3b: c8:37:8d:7f:e5:88:df:6d:e3:66:f7:fc:17:11:ac: 8e:e2:a7:92:da:b4:7e:ed:60:a7:4b:4e:b2:32:c4: 51:74:d8:bd:86:8f:6d:be:9e:94:f3:8e:99:f7:1a: 52:26:60:73:8b:1f:68:a5:9e:fd:f9:ab:58:2e:26: 52:1f:db:2c:cd:e0:27:bc:4e:4a:2b:13:92:0e:2e: 6c:cc:31:40:8a:34:1f:ce:66:2e:0e:5f:b6:6f:7e: 97:50:90:ad:61:cc:1b:29:4e:1c:14:f5:9a:76:9c: 19:5f:7d:55:63:9b:8f:c1:fc:76:b0:bb:ac:11:16: d1:87:85:b7:88:8a:9f:d6:19:32:98:82:d6:99:a7: f0:85:29:fb:29:55:54:35:59:c8:7b:0f:8b:4a:92: 21:62:4c:fe:9a:ee:df:bd:07:19:fa:4e:50:2b:3e: cc:6f:99:44:0a:84:71:1b:0f:60:13:56:86:0a:56: d5:47:27:77:7d:13:49:4f:74:f0:43:07:fb:33:f5: 7f:29:28:2e:0e:7c:ef:29:e3:15:6c:b5:af:ef:42: f7:75:2b:ea:35:91:19:cb:97:8e:cb:68:e8:0a:fc: c3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9E:20:81:0A:36:EE:1C:29:00:80:71:35:5A:6F:13:1C:69:B4:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c94d6964-346a-351b-80d6-bc38161ce464.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a7:dc:cd:50:22:ec:09:af:89:3f:b1:5c:d7:a3:a9:1a:c6: cf:c7:e8:d7:58:6e:5c:87:71:17:0d:dd:89:26:26:04:bc:4e: be:b0:98:6d:65:9b:9c:2e:30:27:4b:f5:1d:2b:0c:7f:5c:81: 15:3a:df:51:28:87:f5:48:90:7e:80:02:7c:ae:30:22:08:8b: c4:d5:eb:f8:34:8a:da:23:c3:b3:56:58:46:ee:2b:c5:24:bc: 49:70:0a:03:0f:bc:53:49:1f:ce:19:cb:73:77:a9:5a:da:6c: 7f:f6:5a:da:a9:7c:a4:9b:c7:86:d1:57:ad:c1:9b:f0:90:b2: 26:64:65:61:59:e9:f9:d6:20:51:0c:da:f1:ae:bb:ae:99:e9: ed:3d:b0:c5:c0:3d:8d:d0:6f:fb:84:5d:71:66:c4:a8:af:45: 4e:c8:af:03:41:02:d8:c4:1d:9d:46:92:fb:c4:09:93:a3:e9: e7:50:41:5c:8f:23:40:87:db:29:f8:33:3a:48:71:b2:7a:0f: 1d:fd:de:47:56:b1:7e:5a:0a:db:68:12:eb:55:d0:e3:39:10: 28:1b:d7:84:5a:a1:67:2a:10:6e:c2:e2:bb:e6:0a:b0:24:e2: f4:71:ac:e1:2f:87:c3:7c:f8:86:10:09:98:73:13:15:b0:68: e4:f6:e8:cd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF5LjkGDUzsa7ukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZGQwY2M3YTMtN2I5Ny00ODAzLWI3MmYtODFiNjRhYjA1MjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4uHLeN+5PZ5mHDo8Vj1dY2CIBNHWoxelDw7 0TvIN41/5YjfbeNm9/wXEayO4qeS2rR+7WCnS06yMsRRdNi9ho9tvp6U846Z9xpS JmBzix9opZ79+atYLiZSH9sszeAnvE5KKxOSDi5szDFAijQfzmYuDl+2b36XUJCt YcwbKU4cFPWadpwZX31VY5uPwfx2sLusERbRh4W3iIqf1hkymILWmafwhSn7KVVU NVnIew+LSpIhYkz+mu7fvQcZ+k5QKz7Mb5lECoRxGw9gE1aGClbVRyd3fRNJT3Tw Qwf7M/V/KSguDnzvKeMVbLWv70L3dSvqNZEZy5eOy2joCvzDDQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMWeIIEKNu4cKQCAcTVabxMcabTJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzk0ZDY5NjQtMzQ2YS0z NTFiLTgwZDYtYmMzODE2MWNlNDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAUp9zNUCLsCa+JP7Fc16OpGsbPx+jXWG5ch3EXDd2JJiYEvE6+sJht ZZucLjAnS/UdKwx/XIEVOt9RKIf1SJB+gAJ8rjAiCIvE1ev4NIraI8OzVlhG7ivF JLxJcAoDD7xTSR/OGctzd6la2mx/9lraqXykm8eG0VetwZvwkLImZGVhWen51iBR DNrxrruumentPbDFwD2N0G/7hF1xZsSor0VOyK8DQQLYxB2dRpL7xAmTo+nnUEFc jyNAh9sp+DM6SHGyeg8d/d5HVrF+WgrbaBLrVdDjORAoG9eEWqFnKhBuwuK75gqw JOL0cazhL4fDfPiGEAmYcxMVsGjk9ujN -----END CERTIFICATE-----Generated at Mon Mar 2 08:03:42 2026 by rpki-client