$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5238087-88e7-3c78-b426-0573772472b6.roa File: e5238087-88e7-3c78-b426-0573772472b6.roa (raw, json) Hash identifier: 8EQs61oiOTjOzAgG3kcXhHthTwhI8b+Z5zTJiTFpRVE= Subject key identifier: 9C:8E:C8:15:00:AA:6F:B6:89:20:02:81:B6:8E:BC:FB:91:3B:31:35 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217924BC448C2DA5B170000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5238087-88e7-3c78-b426-0573772472b6.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396578 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:92:4b:c4:48:c2:da:5b:17:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=0fa6dbdc-d40f-4f79-95f1-cfb9ad97e4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ef:ac:40:71:e0:db:5c:1f:eb:49:16:06:6c: dd:eb:7c:7b:fb:8a:68:ba:d5:a3:7a:e9:8d:aa:75: a7:bf:78:69:4c:16:cb:0d:ed:fd:ed:23:b8:e8:90: 44:ac:99:f3:d8:95:da:a5:b6:06:73:e9:a2:d5:e2: 64:cf:26:15:09:a8:09:c6:fc:9e:bf:ac:e3:fa:e1: 04:a6:4e:10:85:71:98:5f:2a:8d:07:a3:ce:0d:7c: d9:26:28:c8:26:2d:7a:1a:e2:61:ed:c4:00:16:ea: 48:24:a9:98:60:6c:fb:2b:96:b0:9e:12:45:dd:30: 35:c0:16:e3:e4:09:81:5a:f8:24:ba:da:5f:f6:70: 99:43:1c:d3:bf:d4:34:5b:8a:2d:d2:93:b6:9e:a1: 72:e4:09:40:fe:f2:cd:3c:59:30:88:f8:9a:ba:b6: b4:d9:75:2f:3c:27:3b:df:02:2d:bf:cf:1b:af:45: 1a:f1:2a:68:58:8e:5a:10:7c:2e:87:c6:18:bd:7e: 56:65:5f:9b:52:06:bc:e3:5e:97:cb:bd:80:a5:43: 99:0e:72:c4:f0:6a:98:e4:e5:97:9f:e9:63:e4:09: d5:94:f7:1b:5e:39:14:04:43:56:e6:d9:97:b1:f8: 64:7c:5e:54:18:29:49:db:86:65:7e:de:d4:d2:8b: 5b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8E:C8:15:00:AA:6F:B6:89:20:02:81:B6:8E:BC:FB:91:3B:31:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5238087-88e7-3c78-b426-0573772472b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:cd:1a:5b:a9:0f:19:fa:3d:2a:a3:97:d2:4e:2d:ec:5f:d9: 3d:42:d0:9d:11:6e:f7:31:5b:9e:fa:59:d1:57:63:b8:87:3a: 73:fe:52:09:13:ad:3e:6b:f0:93:03:0c:68:41:36:bc:f5:74: e3:5a:41:9b:8b:5a:70:d4:b4:35:f3:ea:59:ca:f1:a7:fc:5d: f5:96:62:5f:ce:0e:ac:7e:05:df:d7:fe:c2:b7:15:d4:9e:09: 2d:99:11:d9:11:13:b3:7b:19:75:32:de:9a:94:1f:8e:c1:ea: 9f:e9:c8:cb:c4:13:f5:3e:64:fd:9c:77:58:12:30:b4:27:51: 6c:8e:62:65:7d:35:bd:f1:fc:95:b7:b5:3c:4a:a3:6e:73:e5: 45:fa:14:71:f0:7b:06:29:fa:86:79:d6:a9:25:e7:a7:8f:b0: 4b:d0:84:4d:4b:4d:41:b5:bb:fb:da:4b:c8:a4:03:c6:51:e9: b3:cf:19:6a:7c:4e:e2:2a:9e:7e:15:8b:bc:5f:a8:44:4f:f2: 7d:96:74:c2:bc:3d:fb:be:ce:12:33:23:80:da:ab:16:b9:82: 76:87:9f:44:0a:1d:1b:10:a9:42:cb:db:4d:65:76:0e:81:5c: 26:08:d9:51:29:a8:12:df:46:b9:72:18:fa:0c:5c:ed:29:6b: 40:a3:b4:40 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF5JLxEjC2lsXAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MGZhNmRiZGMtZDQwZi00Zjc5LTk1ZjEtY2ZiOWFkOTdlNGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO+sQHHg21wf60kWBmzd63x7+4poutWjeumN qnWnv3hpTBbLDe397SO46JBErJnz2JXapbYGc+mi1eJkzyYVCagJxvyev6zj+uEE pk4QhXGYXyqNB6PODXzZJijIJi16GuJh7cQAFupIJKmYYGz7K5awnhJF3TA1wBbj 5AmBWvgkutpf9nCZQxzTv9Q0W4ot0pO2nqFy5AlA/vLNPFkwiPiaura02XUvPCc7 3wItv88br0Ua8SpoWI5aEHwuh8YYvX5WZV+bUga8416Xy72ApUOZDnLE8GqY5OWX n+lj5AnVlPcbXjkUBENW5tmXsfhkfF5UGClJ24Zlft7U0otb0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJyOyBUAqm+2iSACgbaOvPuROzE1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTUyMzgwODctODhlNy0z Yzc4LWI0MjYtMDU3Mzc3MjQ3MmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQADzRpbqQ8Z+j0qo5fSTi3sX9k9QtCdEW73MVue+lnRV2O4hzpz/lIJ E60+a/CTAwxoQTa89XTjWkGbi1pw1LQ18+pZyvGn/F31lmJfzg6sfgXf1/7CtxXU ngktmRHZEROzexl1Mt6alB+Oweqf6cjLxBP1PmT9nHdYEjC0J1FsjmJlfTW98fyV t7U8SqNuc+VF+hRx8HsGKfqGedapJeenj7BL0IRNS01Btbv72kvIpAPGUemzzxlq fE7iKp5+FYu8X6hET/J9lnTCvD37vs4SMyOA2qsWuYJ2h59ECh0bEKlCy9tNZXYO gVwmCNlRKagS30a5chj6DFztKWtAo7RA -----END CERTIFICATE-----Generated at Mon Mar 2 23:53:46 2026 by rpki-client