$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea5f76c1-35bf-3152-82db-f09dcba4abbb.roa File: ea5f76c1-35bf-3152-82db-f09dcba4abbb.roa (raw, json) Hash identifier: d9McaCjae46fmshA2Y0Fri62tjlK5aQfFXeWT2GHai4= Subject key identifier: 8E:A8:D2:D2:D3:6B:C1:1C:92:30:85:A7:66:DE:27:49:05:E0:D2:0D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217A37D9FA271C6E0C93380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea5f76c1-35bf-3152-82db-f09dcba4abbb.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 397199 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:a3:7d:9f:a2:71:c6:e0:c9:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=01a0ddb7-cefc-4a1f-80e9-00a9aba8a9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a4:47:72:5e:a9:07:d2:1a:7f:33:c3:46:1c: b6:f4:28:c6:2d:b6:99:1d:75:48:49:92:bc:c1:e0: 7c:f9:88:9e:29:ea:e6:73:ff:28:50:c6:cd:8c:3c: cf:1a:54:9e:32:a8:ae:19:73:ae:40:b0:ff:81:6a: 37:d5:dc:56:fb:0b:86:75:38:16:21:56:c3:25:c3: e7:18:79:1b:dd:da:6e:2b:53:61:5c:66:de:c4:fa: 8b:23:de:84:d0:07:c5:c4:4f:cb:1a:77:36:cf:02: 6c:02:0f:58:68:c4:5c:22:15:b8:9a:de:a0:93:49: 8f:26:6e:b9:c7:62:4a:5e:38:d3:99:21:74:34:3c: fe:4b:53:3f:9a:db:ce:24:62:27:bd:c0:36:35:43: 7a:e9:e5:53:f9:9e:ea:90:40:9f:50:55:d2:b6:57: b7:f9:ee:30:3f:a4:d7:49:44:08:a5:dd:c4:11:35: 47:64:33:19:af:80:b3:1a:7b:a7:2f:56:b0:04:7a: 4d:79:a7:a7:46:3e:6f:31:55:9f:35:27:64:65:ee: 13:75:e8:99:b0:f9:97:38:dc:f8:4e:99:d0:37:81: 92:02:55:c7:8b:23:59:7c:c1:e4:a3:b1:ac:22:29: 91:dd:6c:9e:c0:6d:ef:9a:5a:85:b8:b7:e4:d8:db: 32:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A8:D2:D2:D3:6B:C1:1C:92:30:85:A7:66:DE:27:49:05:E0:D2:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea5f76c1-35bf-3152-82db-f09dcba4abbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:52:c6:45:b5:3d:24:3c:41:ef:53:58:b4:d5:ef:fe:b9:3f: cf:eb:50:82:98:da:b4:79:ca:63:e4:9b:17:73:5f:fb:6b:8b: 2c:30:eb:d1:bf:c8:4a:5a:46:cd:ca:17:b3:63:d9:35:80:ec: 1d:ea:9f:33:4f:b1:4e:55:37:86:52:d7:be:f2:e4:7b:ac:b5: 90:7c:d1:a8:42:07:d6:68:b2:e8:f3:53:ef:59:7a:86:24:d5: c2:75:1f:85:0d:d1:94:b1:e1:40:e8:12:24:e8:1b:93:3c:65: ba:10:1f:c8:a8:a0:f1:0f:c2:07:67:40:6a:9d:52:56:95:ac: 18:0e:80:c1:a4:ca:a0:92:60:34:39:fe:68:bf:89:e5:52:23: 05:07:93:dc:ef:e8:de:e7:86:70:fa:6e:52:5c:94:1f:4c:fa: 58:ec:d5:ac:ad:81:ee:d1:d4:19:39:59:c0:16:14:07:de:d8: de:67:6b:31:b0:05:b6:c4:8e:32:41:df:36:6b:8c:f1:e1:bb: 1c:86:ba:06:c4:91:4d:f6:25:76:63:20:cf:05:67:60:48:14: eb:c5:a5:86:1d:fa:32:b7:1e:43:a1:72:25:9c:01:21:9f:0d: 55:a6:51:e4:10:26:fb:89:9d:49:12:d0:7c:d6:22:07:a2:f5: b5:0f:31:5f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF6N9n6JxxuDJM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MDFhMGRkYjctY2VmYy00YTFmLTgwZTktMDBhOWFiYThhOWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaRHcl6pB9IafzPDRhy29CjGLbaZHXVISZK8 weB8+YieKermc/8oUMbNjDzPGlSeMqiuGXOuQLD/gWo31dxW+wuGdTgWIVbDJcPn GHkb3dpuK1NhXGbexPqLI96E0AfFxE/LGnc2zwJsAg9YaMRcIhW4mt6gk0mPJm65 x2JKXjjTmSF0NDz+S1M/mtvOJGInvcA2NUN66eVT+Z7qkECfUFXStle3+e4wP6TX SUQIpd3EETVHZDMZr4CzGnunL1awBHpNeaenRj5vMVWfNSdkZe4TdeiZsPmXONz4 TpnQN4GSAlXHiyNZfMHko7GsIimR3WyewG3vmlqFuLfk2Nsy1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI6o0tLTa8EckjCFp2beJ0kF4NINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWE1Zjc2YzEtMzViZi0z MTUyLTgyZGItZjA5ZGNiYTRhYmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAGUsZFtT0kPEHvU1i01e/+uT/P61CCmNq0ecpj5JsXc1/7a4ssMOvR v8hKWkbNyhezY9k1gOwd6p8zT7FOVTeGUte+8uR7rLWQfNGoQgfWaLLo81PvWXqG JNXCdR+FDdGUseFA6BIk6BuTPGW6EB/IqKDxD8IHZ0BqnVJWlawYDoDBpMqgkmA0 Of5ov4nlUiMFB5Pc7+je54Zw+m5SXJQfTPpY7NWsrYHu0dQZOVnAFhQH3tjeZ2sx sAW2xI4yQd82a4zx4bschroGxJFN9iV2YyDPBWdgSBTrxaWGHfoytx5DoXIlnAEh nw1VplHkECb7iZ1JEtB81iIHovW1DzFf -----END CERTIFICATE-----Generated at Mon Mar 2 04:06:26 2026 by rpki-client