$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d22d31e4-dc77-3911-b319-38170ae00070.roa File: d22d31e4-dc77-3911-b319-38170ae00070.roa (raw, json) Hash identifier: ZXFu27GZCLYQey4UAwhkAHokQVXsYMjZwlYCJO7kbcs= Subject key identifier: 1A:CD:33:F7:7C:33:5C:E7:D7:FF:AB:30:5C:EE:DD:0E:77:29:0A:A4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217A452A8BF570D88953F10 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d22d31e4-dc77-3911-b319-38170ae00070.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 397205 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:a4:52:a8:bf:57:0d:88:95:3f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=349995fd-0f0b-4c64-8bd9-ae96980d1e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:03:10:44:0a:e9:1f:e6:83:68:71:bf:56:3a: 75:96:45:cb:97:8d:94:45:6c:f2:e5:e1:b7:11:75: 30:54:b4:6c:21:f8:16:ee:22:57:1b:d1:59:2c:7f: b9:2c:a2:7d:72:a9:ad:10:16:43:b0:73:d9:28:2a: 57:f1:8f:3a:db:fd:1c:71:72:b0:a8:ec:84:7d:9e: 58:7a:b3:88:67:78:77:57:9f:2d:63:0c:09:28:95: 1a:85:0c:af:14:8b:f7:15:89:59:3e:4e:b4:3a:b6: e4:2a:bc:28:fa:4e:fd:75:92:40:4c:4c:1c:ea:2f: cf:15:c9:df:ce:13:82:56:ef:8f:dc:b5:72:50:59: 07:eb:35:3c:bd:81:d6:4e:10:72:d9:33:5e:c1:6d: 5a:c5:55:1d:95:0f:22:5f:b0:fe:ad:82:ed:96:4e: d8:62:7f:6f:5c:fd:78:f2:95:d0:aa:f5:07:ef:56: b2:0b:99:d9:f5:a2:6a:95:54:dc:64:1d:a6:e5:09: ea:4b:1d:25:38:83:df:9a:1e:5f:a6:d0:dd:21:16: 6a:0c:3b:c0:ba:46:2c:17:71:4b:fc:c6:33:ce:11: 3e:b1:a4:a8:9f:63:44:46:ea:66:70:c1:76:43:08: 37:4a:ee:ab:be:a3:c2:ad:37:5a:ed:71:92:e0:1e: d7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CD:33:F7:7C:33:5C:E7:D7:FF:AB:30:5C:EE:DD:0E:77:29:0A:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d22d31e4-dc77-3911-b319-38170ae00070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:9b:cc:ae:42:36:d8:9e:27:79:7e:c4:c3:99:0a:fb:a3:7b: 7a:a0:36:a3:f3:43:77:d1:da:46:dd:0c:0b:17:f6:44:8a:b3: 45:06:11:46:f9:da:38:2d:d0:3b:a2:cf:d7:8b:10:84:43:64: dc:b8:4e:30:14:fb:c8:a3:9f:c1:8b:39:5a:81:fa:3a:ac:d6: 10:95:06:e4:b0:b4:ea:93:47:3c:23:7c:c3:ff:5c:f7:cb:0e: 2c:2e:51:11:d5:1a:5e:dd:58:ac:f0:7d:b2:8c:fd:2e:ff:94: fb:bb:5f:7a:37:82:e2:57:ea:83:43:ad:15:82:d8:9f:5e:64: a9:49:38:eb:71:b2:73:e5:ab:cb:73:c8:e3:86:4d:e3:76:54: 07:01:e8:93:9c:20:b5:31:08:62:88:50:63:64:4a:1f:9f:2b: 0f:ab:ff:7a:93:83:59:cd:37:b0:23:8b:ce:6a:21:4e:ba:82: 56:29:57:3b:3d:61:49:88:5b:12:6a:6e:2c:e9:ef:09:37:8d: 5a:e9:db:fc:11:cc:b8:bf:ff:0e:6d:c0:35:62:a3:78:22:8c: eb:59:26:09:ba:62:ec:44:ec:25:15:4b:9e:13:99:f1:3b:fa: b4:16:2f:fc:e8:6a:41:55:00:5a:52:d9:4a:68:aa:71:0f:06: 08:4e:c0:f2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF6RSqL9XDYiVPxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MzQ5OTk1ZmQtMGYwYi00YzY0LThiZDktYWU5Njk4MGQxZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAMQRArpH+aDaHG/Vjp1lkXLl42URWzy5eG3 EXUwVLRsIfgW7iJXG9FZLH+5LKJ9cqmtEBZDsHPZKCpX8Y862/0ccXKwqOyEfZ5Y erOIZ3h3V58tYwwJKJUahQyvFIv3FYlZPk60OrbkKrwo+k79dZJATEwc6i/PFcnf zhOCVu+P3LVyUFkH6zU8vYHWThBy2TNewW1axVUdlQ8iX7D+rYLtlk7YYn9vXP14 8pXQqvUH71ayC5nZ9aJqlVTcZB2m5QnqSx0lOIPfmh5fptDdIRZqDDvAukYsF3FL /MYzzhE+saSon2NERupmcMF2Qwg3Su6rvqPCrTda7XGS4B7X+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBrNM/d8M1zn1/+rMFzu3Q53KQqkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDIyZDMxZTQtZGM3Ny0z OTExLWIzMTktMzgxNzBhZTAwMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBcm8yuQjbYnid5fsTDmQr7o3t6oDaj80N30dpG3QwLF/ZEirNFBhFG +do4LdA7os/XixCEQ2TcuE4wFPvIo5/Bizlagfo6rNYQlQbksLTqk0c8I3zD/1z3 yw4sLlER1Rpe3Vis8H2yjP0u/5T7u196N4LiV+qDQ60VgtifXmSpSTjrcbJz5avL c8jjhk3jdlQHAeiTnCC1MQhiiFBjZEofnysPq/96k4NZzTewI4vOaiFOuoJWKVc7 PWFJiFsSam4s6e8JN41a6dv8Ecy4v/8ObcA1YqN4IozrWSYJumLsROwlFUueE5nx O/q0Fi/86GpBVQBaUtlKaKpxDwYITsDy -----END CERTIFICATE-----Generated at Mon Mar 2 18:49:21 2026 by rpki-client