$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf57e6de-89da-30d1-aea8-b79080996615.roa File: cf57e6de-89da-30d1-aea8-b79080996615.roa (raw, json) Hash identifier: oI1LfQISw0Ja+9HLuel5ixOTxaIAnGmP6wrnOVsMRvY= Subject key identifier: 60:F2:00:A3:00:E7:A9:08:B5:B0:14:05:EA:C2:69:42:20:8E:4D:F6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217B1C3ECB26BC360A1BE00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf57e6de-89da-30d1-aea8-b79080996615.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396610 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:b1:c3:ec:b2:6b:c3:60:a1:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=eb99f24b-e9b7-4943-a2e2-a89fc77e6c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e0:06:ce:54:06:b1:83:c2:77:cf:27:da:34: 24:d3:a9:e0:4f:0b:84:37:9e:f9:8d:45:b7:25:42: 93:15:1b:81:ea:9d:c0:42:71:20:e5:2f:f8:01:0a: 83:cc:24:d9:ba:ab:0d:cb:3b:6d:ba:51:0b:10:b0: e5:30:ea:4f:3a:ba:b9:a4:ac:2e:2f:ff:36:95:fe: a8:0a:09:09:bd:9e:c1:4c:29:a1:d5:28:51:7a:af: 91:df:28:e1:5a:45:b3:0d:e7:a3:a9:af:a6:f7:a0: 85:97:f8:f9:29:38:07:66:b4:0c:9f:90:fc:c1:8c: ae:e3:50:34:7a:f8:ec:6c:ee:10:41:f3:86:d4:18: c8:24:2c:df:0b:e2:b3:10:74:8a:a8:e8:d9:ca:02: f7:80:09:99:4d:1b:e0:9f:c1:18:db:ae:39:33:c4: ac:f7:97:3d:02:ba:66:5b:1f:ec:2c:1b:a4:a5:e4: 5d:5d:cf:e9:04:b7:6d:6c:f5:49:8d:e6:8e:a6:ee: a2:30:fe:1c:39:c0:7f:a8:0a:48:5a:59:b9:90:15: 84:9b:76:ae:8f:b1:ee:4f:4b:a1:29:61:11:19:cc: c0:a5:54:6d:9d:b8:91:8e:a4:03:ed:f4:62:d7:f5: 5f:50:dd:92:93:56:3e:0f:ae:2a:0a:d9:eb:ab:42: 33:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F2:00:A3:00:E7:A9:08:B5:B0:14:05:EA:C2:69:42:20:8E:4D:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf57e6de-89da-30d1-aea8-b79080996615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:fe:b2:46:3b:62:e4:29:7e:ce:05:bc:81:be:eb:14:6f:26: 08:97:51:62:68:10:b9:e5:db:ad:84:3f:ab:16:1b:e4:2d:94: 29:f2:38:9a:e3:25:19:bc:62:af:28:07:49:5b:a8:65:21:af: d2:f0:85:28:ed:5c:29:c6:77:1b:48:e0:18:c0:6c:b5:05:51: 64:44:63:e0:1c:85:b3:4b:44:9d:1a:23:c2:07:43:9a:d3:e1: 04:ff:2e:32:76:6d:a7:e6:30:1a:40:1e:9c:ff:b2:2a:a0:e7: a2:3b:75:a4:44:97:2c:54:b2:ed:93:5c:57:11:3d:44:e8:c1: 7b:3f:1e:58:44:a2:70:c2:ab:bc:b2:38:b0:48:59:17:62:71: ac:4e:ed:39:fa:69:2e:bc:ac:2b:27:0f:16:ec:3b:06:54:82: 7c:34:f6:6e:08:9a:42:78:9d:8f:8c:55:59:43:d2:c3:8e:32: 73:db:77:ff:49:e4:65:f3:81:72:15:db:d6:ed:ff:f2:31:3c: ad:88:f1:83:19:14:47:6e:65:c7:e2:37:9b:23:ec:67:34:70: 1a:c3:be:33:7d:d3:e5:92:6e:cd:77:be:5f:3e:b4:8f:2e:17: 58:d5:be:f3:8a:70:82:09:28:d3:06:97:aa:70:a6:00:9c:9b: b5:60:2b:24 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF7HD7LJrw2ChvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZWI5OWYyNGItZTliNy00OTQzLWEyZTItYTg5ZmM3N2U2YzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+AGzlQGsYPCd88n2jQk06ngTwuEN575jUW3 JUKTFRuB6p3AQnEg5S/4AQqDzCTZuqsNyzttulELELDlMOpPOrq5pKwuL/82lf6o CgkJvZ7BTCmh1ShReq+R3yjhWkWzDeejqa+m96CFl/j5KTgHZrQMn5D8wYyu41A0 evjsbO4QQfOG1BjIJCzfC+KzEHSKqOjZygL3gAmZTRvgn8EY2645M8Ss95c9Arpm Wx/sLBukpeRdXc/pBLdtbPVJjeaOpu6iMP4cOcB/qApIWlm5kBWEm3auj7HuT0uh KWERGczApVRtnbiRjqQD7fRi1/VfUN2Sk1Y+D64qCtnrq0IzDwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGDyAKMA56kItbAUBerCaUIgjk32MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Y1N2U2ZGUtODlkYS0z MGQxLWFlYTgtYjc5MDgwOTk2NjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAd/rJGO2LkKX7OBbyBvusUbyYIl1FiaBC55duthD+rFhvkLZQp8jia 4yUZvGKvKAdJW6hlIa/S8IUo7VwpxncbSOAYwGy1BVFkRGPgHIWzS0SdGiPCB0Oa 0+EE/y4ydm2n5jAaQB6c/7IqoOeiO3WkRJcsVLLtk1xXET1E6MF7Px5YRKJwwqu8 sjiwSFkXYnGsTu05+mkuvKwrJw8W7DsGVIJ8NPZuCJpCeJ2PjFVZQ9LDjjJz23f/ SeRl84FyFdvW7f/yMTytiPGDGRRHbmXH4jebI+xnNHAaw74zfdPlkm7Nd75fPrSP LhdY1b7zinCCCSjTBpeqcKYAnJu1YCsk -----END CERTIFICATE-----Generated at Mon Mar 2 16:24:54 2026 by rpki-client