$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec9ae2be-56f7-352c-b3fd-e349668c11b1.roa File: ec9ae2be-56f7-352c-b3fd-e349668c11b1.roa (raw, json) Hash identifier: niifseXq5Oqnl0+oAi2oLHMORSV6rB1XSeg44Mn/svY= Subject key identifier: 57:60:4F:02:68:7C:74:40:DE:F3:D3:3C:45:B5:72:AF:F9:36:94:DE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217A25A0017F052503D9300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec9ae2be-56f7-352c-b3fd-e349668c11b1.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 397197 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:a2:5a:00:17:f0:52:50:3d:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=9819cc18-4673-4e76-8d21-ff30eca9f0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ed:fd:84:20:30:e7:26:4b:3a:8b:95:e7:32: 32:56:79:66:cf:2d:31:9b:bd:67:6a:30:da:fa:ef: 43:9f:d2:34:e9:d5:c3:94:cd:ee:ca:2e:25:aa:58: 4e:6f:5a:fd:dc:ed:30:8d:d6:9c:99:32:d5:86:71: 2d:61:44:fc:3e:fa:45:32:ba:ef:ed:87:e4:f3:2e: 6f:4d:c5:78:83:82:3b:80:18:55:42:5e:71:34:f3: 78:17:05:f6:25:d2:47:6c:11:29:d3:ca:c7:1a:f2: 1b:0b:6e:a9:9f:97:1e:55:41:ec:33:19:64:ec:e2: e7:9a:bb:8b:79:25:a7:5f:f6:9f:d0:64:8e:a9:da: 7e:08:38:9e:4e:36:e8:ba:d6:d9:b4:6b:65:a1:77: 96:b5:e2:78:08:a5:2f:23:e3:e3:67:66:ae:58:7e: a2:63:5a:7f:c7:fa:70:bd:7e:76:79:12:17:e1:98: 9b:f3:96:e2:0d:d8:0e:d9:aa:80:09:4f:1c:c0:2a: 87:c8:e9:c2:c2:b6:79:08:00:47:a9:4f:26:66:42: 5e:10:68:4e:42:75:1f:fb:8a:96:10:4f:99:69:58: fb:67:96:62:eb:07:9d:09:11:09:b9:e4:6b:5d:88: 1c:bc:b3:5f:7b:72:95:12:5a:6e:bb:dd:03:96:9b: 19:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:60:4F:02:68:7C:74:40:DE:F3:D3:3C:45:B5:72:AF:F9:36:94:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec9ae2be-56f7-352c-b3fd-e349668c11b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:b3:aa:cd:bf:82:43:3e:1c:58:8a:d6:31:d5:4a:6e:75:a1: 0c:e6:bc:c9:fc:bf:4c:47:5f:a0:4c:c4:3a:ce:01:db:45:50: 5c:79:56:c9:19:cf:9e:d9:f8:f4:dd:85:10:8e:dd:01:fd:f8: 68:79:61:17:c1:af:90:79:51:7d:fa:d6:e0:10:30:2a:ab:a0: 68:9d:ff:13:ee:f8:5a:ac:09:1f:1f:99:32:0a:78:14:12:2c: 96:f9:2a:dc:71:40:6c:7e:f4:f4:78:80:cc:50:9e:34:75:d6: de:a7:b8:92:a3:55:12:1d:42:69:eb:14:4f:91:6a:a2:20:ab: bb:89:7e:83:59:40:51:d8:69:61:19:c2:bd:ad:a9:4b:4a:b4: 63:76:de:52:c1:de:5d:ad:b7:aa:29:0f:4a:01:cc:4f:b9:11: be:7a:23:bc:e1:c5:e3:ff:dc:38:2e:0a:86:be:4c:f9:0c:8d: b9:f3:22:08:64:45:1f:2f:8d:55:50:fe:a4:c3:58:07:57:5c: 2d:a7:b8:e6:52:d2:96:09:a9:b4:5c:c4:ed:ea:9c:fe:73:b8: 8d:2c:42:72:21:d6:ed:38:82:2a:4b:33:4e:8f:4a:6e:cf:91: 3c:1c:b9:72:9e:e2:37:33:4b:ae:ae:ec:b9:15:96:bf:b9:13: fd:0e:71:bc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF6JaABfwUlA9kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk OTgxOWNjMTgtNDY3My00ZTc2LThkMjEtZmYzMGVjYTlmMGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4e39hCAw5yZLOouV5zIyVnlmzy0xm71najDa +u9Dn9I06dXDlM3uyi4lqlhOb1r93O0wjdacmTLVhnEtYUT8PvpFMrrv7Yfk8y5v TcV4g4I7gBhVQl5xNPN4FwX2JdJHbBEp08rHGvIbC26pn5ceVUHsMxlk7OLnmruL eSWnX/af0GSOqdp+CDieTjboutbZtGtloXeWteJ4CKUvI+PjZ2auWH6iY1p/x/pw vX52eRIX4Zib85biDdgO2aqACU8cwCqHyOnCwrZ5CABHqU8mZkJeEGhOQnUf+4qW EE+ZaVj7Z5Zi6wedCREJueRrXYgcvLNfe3KVElpuu90DlpsZwwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFdgTwJofHRA3vPTPEW1cq/5NpTeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWM5YWUyYmUtNTZmNy0z NTJjLWIzZmQtZTM0OTY2OGMxMWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBIs6rNv4JDPhxYitYx1UpudaEM5rzJ/L9MR1+gTMQ6zgHbRVBceVbJ Gc+e2fj03YUQjt0B/fhoeWEXwa+QeVF9+tbgEDAqq6Bonf8T7vharAkfH5kyCngU EiyW+SrccUBsfvT0eIDMUJ40ddbep7iSo1USHUJp6xRPkWqiIKu7iX6DWUBR2Glh GcK9ralLSrRjdt5Swd5drbeqKQ9KAcxPuRG+eiO84cXj/9w4LgqGvkz5DI258yII ZEUfL41VUP6kw1gHV1wtp7jmUtKWCam0XMTt6pz+c7iNLEJyIdbtOIIqSzNOj0pu z5E8HLlynuI3M0uuruy5FZa/uRP9DnG8 -----END CERTIFICATE-----Generated at Mon Mar 2 08:02:11 2026 by rpki-client