$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef3910e3-9fe5-34e7-9a8f-6ed148b22856.roa File: ef3910e3-9fe5-34e7-9a8f-6ed148b22856.roa (raw, json) Hash identifier: 9CJ1WGxfZYftqFRx/Fx7f1YV7leKiZ8eDrVu5jXWK6g= Subject key identifier: A4:ED:5C:FA:62:03:6A:24:CA:B1:FA:8D:11:65:6C:E0:D9:69:D1:A2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217B1D65ED3D56EDC053380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef3910e3-9fe5-34e7-9a8f-6ed148b22856.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 211369 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:b1:d6:5e:d3:d5:6e:dc:05:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=306155bc-68e9-429e-95f4-509c00175762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:48:9a:3e:92:5a:7f:0d:9c:a3:73:11:67:ee: e3:ed:bb:44:13:f3:b0:7e:3e:65:9b:63:7e:da:1a: c6:39:dc:87:5b:18:62:55:0a:0b:61:a8:69:b1:b8: 9e:e4:c8:ea:16:df:4b:2e:34:06:fe:4b:a0:e2:4e: f3:18:df:99:8e:8e:ac:5c:c0:a2:12:5a:a5:68:89: 4f:de:1c:4f:c1:21:44:d5:1f:92:85:49:94:21:d7: 7e:3a:9a:c5:f2:be:ad:d3:0e:10:50:9b:2e:91:b3: f4:ec:e8:0a:58:59:c8:81:f1:20:7d:36:54:0d:4b: f8:4d:88:51:ef:af:b9:b7:66:49:f1:76:c8:40:66: 59:81:ef:51:7e:be:21:e0:5a:c7:9d:86:4a:9b:56: 1f:e3:d1:cf:74:70:0c:34:ad:76:a3:53:3a:6e:87: 66:e6:5a:19:89:bd:e2:f8:fe:1b:aa:85:69:36:bd: 87:e7:3d:43:11:6a:3e:19:2f:03:c1:d1:3a:49:93: ab:1b:24:7e:75:c3:c5:90:3f:72:21:c4:56:18:93: 50:77:e7:6a:17:82:2a:db:0b:0b:7d:30:fd:2f:8f: 9a:f9:85:13:17:ce:5c:72:26:d6:f3:31:29:ea:19: b7:34:45:b2:33:7b:ba:2a:37:33:2c:64:60:12:6b: b7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:ED:5C:FA:62:03:6A:24:CA:B1:FA:8D:11:65:6C:E0:D9:69:D1:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef3910e3-9fe5-34e7-9a8f-6ed148b22856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a7:72:a9:06:7f:16:46:c3:46:0c:9a:72:5e:49:a8:1e:e0: 18:7b:83:bb:07:b3:90:57:5a:52:cc:e1:e6:c0:76:06:d9:57: e4:67:60:ac:81:29:01:1c:8d:08:06:41:9a:e6:15:6c:18:b9: 05:a5:0d:a5:5d:1d:9a:93:1c:93:a1:25:0b:01:16:c6:72:40: bd:da:4c:94:4f:4b:d0:0f:f8:c0:5b:17:36:51:a8:2a:5a:1f: aa:e0:45:37:9d:ce:2c:45:8f:18:b1:d8:0e:e4:e9:68:ea:e8: 9e:50:f4:aa:54:a3:78:ae:a6:51:0a:a6:0d:5e:bf:e6:7d:8e: 80:5c:2b:cc:5d:d8:56:57:36:4d:a2:5f:46:83:18:37:bb:b7: 3e:31:18:74:85:dc:0e:f7:56:4e:d3:b3:70:4c:f6:4b:af:dd: 2d:4e:46:7e:a5:f7:08:8f:99:14:0b:d3:28:c1:7c:56:30:54: cb:8d:8e:85:6c:7b:1a:4f:ca:cc:e2:5b:21:96:60:e4:1e:32: 59:ce:bf:7d:d0:fd:25:39:c1:75:3c:2a:e7:d2:f2:7c:f7:53: 0c:cd:d5:28:99:4a:e6:56:d9:98:54:51:86:6a:48:92:2a:c2: ea:f8:09:2d:98:0a:11:fe:97:64:91:e6:43:97:2c:4e:06:8f: 36:1e:ca:97 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF7HWXtPVbtwFM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MzA2MTU1YmMtNjhlOS00MjllLTk1ZjQtNTA5YzAwMTc1NzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEiaPpJafw2co3MRZ+7j7btEE/Owfj5lm2N+ 2hrGOdyHWxhiVQoLYahpsbie5MjqFt9LLjQG/kug4k7zGN+Zjo6sXMCiElqlaIlP 3hxPwSFE1R+ShUmUIdd+OprF8r6t0w4QUJsukbP07OgKWFnIgfEgfTZUDUv4TYhR 76+5t2ZJ8XbIQGZZge9Rfr4h4FrHnYZKm1Yf49HPdHAMNK12o1M6bodm5loZib3i +P4bqoVpNr2H5z1DEWo+GS8DwdE6SZOrGyR+dcPFkD9yIcRWGJNQd+dqF4Iq2wsL fTD9L4+a+YUTF85ccibW8zEp6hm3NEWyM3u6KjczLGRgEmu3FQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKTtXPpiA2okyrH6jRFlbODZadGiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWYzOTEwZTMtOWZlNS0z NGU3LTlhOGYtNmVkMTQ4YjIyODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCBp3KpBn8WRsNGDJpyXkmoHuAYe4O7B7OQV1pSzOHmwHYG2VfkZ2Cs gSkBHI0IBkGa5hVsGLkFpQ2lXR2akxyToSULARbGckC92kyUT0vQD/jAWxc2Uagq Wh+q4EU3nc4sRY8YsdgO5Olo6uieUPSqVKN4rqZRCqYNXr/mfY6AXCvMXdhWVzZN ol9Ggxg3u7c+MRh0hdwO91ZO07NwTPZLr90tTkZ+pfcIj5kUC9MowXxWMFTLjY6F bHsaT8rM4lshlmDkHjJZzr990P0lOcF1PCrn0vJ891MMzdUomUrmVtmYVFGGakiS KsLq+AktmAoR/pdkkeZDlyxOBo82HsqX -----END CERTIFICATE-----Generated at Mon Mar 2 08:01:43 2026 by rpki-client