$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf88fa62-e643-34be-8af3-3968ec0754dc.roa File: cf88fa62-e643-34be-8af3-3968ec0754dc.roa (raw, json) Hash identifier: HB1RC0QCkl1rc7uArqAckCR+vvUt/FTsci1mtk7M+Cw= Subject key identifier: A5:D3:66:88:B7:8C:52:38:B6:07:E0:B5:5A:EB:81:8E:32:B6:43:7F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D02178E84A3C0A4084570E108 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf88fa62-e643-34be-8af3-3968ec0754dc.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 397193 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:8e:84:a3:c0:a4:08:45:70:e1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=8be06ba2-6768-4f61-8b59-34a699bebb35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:5b:ed:b1:99:bd:46:78:a4:0e:99:14:8b: 09:ef:e1:44:04:82:18:a6:6a:1f:de:86:01:0a:d0: cf:e1:8f:79:a1:d1:75:f0:36:38:ee:e9:44:85:56: d7:21:11:42:68:ac:04:b6:fa:c5:ac:22:9e:ff:bd: d3:12:60:23:b8:97:55:15:78:ef:10:9d:2e:5b:66: 1a:40:0e:9c:c5:ba:a8:22:c4:b5:12:46:13:4d:c7: fb:89:76:fd:06:25:cb:6e:dd:f2:35:58:25:ea:20: 4c:5d:95:30:aa:47:be:52:35:bc:e8:40:12:c0:46: e9:a7:f8:46:e1:07:db:02:1e:87:85:61:5f:d9:ef: fd:f0:34:bd:b8:ee:a0:4d:ac:6a:40:99:fa:ae:61: 9e:a5:fa:4a:93:52:1a:09:57:60:21:ac:24:3d:53: ea:56:1e:5f:da:fa:2c:ab:d3:40:fb:ab:6c:e4:71: a1:dd:36:54:47:69:f0:26:71:65:16:cf:08:34:73: aa:ff:00:ef:8f:74:24:75:b2:69:7c:e3:f2:5c:01: 59:c1:a8:4c:df:d5:d8:34:da:8b:cf:95:58:c8:79: ee:28:bf:18:e7:15:aa:7f:f1:b5:9f:0d:9b:b7:fc: b7:9f:c7:3f:78:8c:8d:fa:6e:d0:0b:b1:3e:9c:e4: 81:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D3:66:88:B7:8C:52:38:B6:07:E0:B5:5A:EB:81:8E:32:B6:43:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf88fa62-e643-34be-8af3-3968ec0754dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:5d:32:e4:e9:70:1b:5b:e3:31:57:52:6c:69:bf:d2:f9:f9: 45:83:73:1c:e2:1a:33:6a:a4:5a:57:47:90:81:32:c1:10:56: 9f:9f:93:c0:e5:22:21:ce:f9:51:f3:c0:85:ab:7d:b1:f3:71: 61:a7:2d:8f:e9:b0:ec:cf:7d:05:04:a6:70:75:d8:42:bc:8b: 5e:0c:75:2f:02:b1:82:8f:63:1b:9e:ff:a2:a2:d3:d5:73:d0: 9d:1c:fc:48:69:38:51:bc:70:89:51:7e:c4:1b:1c:17:8f:69: 4c:b1:80:9e:3c:da:e8:6b:eb:ae:7a:be:b7:4a:c6:2f:ae:19: 43:95:ba:8f:11:b5:f2:fa:a3:2c:66:73:5f:56:de:6b:65:4b: 47:5e:88:b9:4c:10:03:85:e9:4e:4f:12:0a:72:fd:b6:93:3c: 5d:ed:61:16:23:e9:1c:6c:a6:f9:3c:7d:e7:56:cf:61:70:76: 52:8b:ca:63:66:ec:77:11:18:cb:97:19:c7:47:29:e8:79:ad: 0b:81:72:4c:db:76:3a:c3:8e:6a:97:75:d0:97:11:1a:7a:0f: 18:68:9e:25:9c:59:db:b3:2a:53:61:05:d8:01:2e:55:98:88: 23:69:0d:7b:a7:30:5b:a3:12:57:d3:1d:67:e6:fd:06:75:21: e7:a8:f9:17 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF46Eo8CkCEVw4QgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk OGJlMDZiYTItNjc2OC00ZjYxLThiNTktMzRhNjk5YmViYjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6Bb7bGZvUZ4pA6ZFIsJ7+FEBIIYpmof3oYB CtDP4Y95odF18DY47ulEhVbXIRFCaKwEtvrFrCKe/73TEmAjuJdVFXjvEJ0uW2Ya QA6cxbqoIsS1EkYTTcf7iXb9BiXLbt3yNVgl6iBMXZUwqke+UjW86EASwEbpp/hG 4QfbAh6HhWFf2e/98DS9uO6gTaxqQJn6rmGepfpKk1IaCVdgIawkPVPqVh5f2vos q9NA+6ts5HGh3TZUR2nwJnFlFs8INHOq/wDvj3QkdbJpfOPyXAFZwahM39XYNNqL z5VYyHnuKL8Y5xWqf/G1nw2bt/y3n8c/eIyN+m7QC7E+nOSBfQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKXTZoi3jFI4tgfgtVrrgY4ytkN/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Y4OGZhNjItZTY0My0z NGJlLThhZjMtMzk2OGVjMDc1NGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQArXTLk6XAbW+MxV1Jsab/S+flFg3Mc4hozaqRaV0eQgTLBEFafn5PA 5SIhzvlR88CFq32x83Fhpy2P6bDsz30FBKZwddhCvIteDHUvArGCj2Mbnv+iotPV c9CdHPxIaThRvHCJUX7EGxwXj2lMsYCePNroa+uuer63SsYvrhlDlbqPEbXy+qMs ZnNfVt5rZUtHXoi5TBADhelOTxIKcv22kzxd7WEWI+kcbKb5PH3nVs9hcHZSi8pj Zux3ERjLlxnHRynoea0LgXJM23Y6w45ql3XQlxEaeg8YaJ4lnFnbsypTYQXYAS5V mIgjaQ17pzBboxJX0x1n5v0GdSHnqPkX -----END CERTIFICATE-----Generated at Mon Mar 2 05:40:45 2026 by rpki-client