$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f57f0e84-9cc0-342b-87d1-9679cb68c7da.roa File: f57f0e84-9cc0-342b-87d1-9679cb68c7da.roa (raw, json) Hash identifier: ssYKu9zOv4Qi41O5sGWZhRBX0DuhExE7iGmsmGnbsW0= Subject key identifier: AA:E2:05:9A:C5:DF:1E:A3:C9:37:95:CB:3C:21:2E:1F:30:6A:53:30 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217B5EFE69DB3455A1A0600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f57f0e84-9cc0-342b-87d1-9679cb68c7da.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 10515 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:b5:ef:e6:9d:b3:45:5a:1a:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=2fff8a5c-9375-44f0-b753-4aea88ad59d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:82:b4:4b:a4:b6:cc:8f:37:99:d3:41:2e:6a: 53:6a:c0:a4:60:f7:15:ea:08:b8:94:e8:5e:cc:01: ac:f2:3e:16:5d:1c:d5:80:27:7c:9e:97:55:c0:ca: da:69:4b:a5:87:05:b1:09:a3:1f:76:14:9d:1d:70: 6c:71:de:4b:13:9e:84:3f:05:d6:9b:a2:65:ec:01: 49:10:19:52:b0:c9:23:74:2c:42:e4:06:a6:36:d9: 33:5f:d8:be:68:a3:4e:d9:a7:a5:30:c5:a9:52:09: 27:82:90:f1:87:a3:37:61:cf:54:fb:79:60:1c:9e: 75:d3:56:ba:2f:b6:93:57:09:89:c1:20:e9:fb:95: ad:bf:91:38:c9:cd:42:dc:45:26:d4:ed:11:9e:5f: 9e:0e:95:67:12:bf:f1:87:79:dd:c7:1c:1b:58:ec: 29:ea:ef:14:f5:c3:12:be:09:9a:c6:0f:46:6d:33: 45:74:57:cd:d0:58:d1:bb:49:11:3c:79:f6:31:42: 3f:f6:d8:92:38:2d:a9:cb:bf:f5:51:ed:80:26:6f: a4:34:45:1f:83:ed:3b:7f:23:a8:6e:cc:9c:dc:d3: a5:b9:da:df:8d:d5:8a:18:8f:54:72:ad:9d:37:96: bd:82:3c:e8:a8:83:2e:16:5b:df:b7:ae:e3:f0:d9: d2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E2:05:9A:C5:DF:1E:A3:C9:37:95:CB:3C:21:2E:1F:30:6A:53:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f57f0e84-9cc0-342b-87d1-9679cb68c7da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:25:14:f4:e1:35:95:6e:e0:32:8e:99:0a:63:76:b6:f4:f6: e4:77:5c:ad:dc:cd:a7:8e:6b:57:04:89:29:87:b4:05:53:d2: 6b:6e:82:7a:ba:10:bb:c1:ff:e3:03:48:64:67:cc:c9:11:d1: 5c:75:83:76:36:c7:ea:f2:81:a7:34:2a:e7:75:8c:6a:51:85: a9:66:c5:2d:0c:19:4f:06:cc:78:08:2d:32:54:44:16:b5:40: 3f:2a:98:d4:3c:c8:e1:44:43:0c:d4:ed:82:82:15:0d:c4:ae: d4:70:0f:cc:d6:f3:48:d0:8f:71:5f:f7:18:20:52:bf:69:91: 50:47:42:60:f8:81:c5:52:5b:6d:e4:7e:4d:40:bf:70:33:af: 06:26:e1:b4:d4:a3:69:37:92:4a:6a:21:13:6b:d5:dd:c8:97: 2e:67:8d:2e:da:3e:34:fe:48:da:c6:c2:ac:22:59:5d:4f:58: 3c:a0:2f:d9:9b:5c:12:e4:af:43:ed:49:c9:a7:99:ef:93:ee: d4:2b:0f:4a:dc:c4:1c:e5:65:7c:24:39:db:73:44:ec:a7:38: 01:7c:02:1d:bc:87:c7:b8:4a:63:46:78:ae:4c:1b:d9:b6:67: ad:72:87:6f:1a:f6:30:74:81:0a:a3:32:fe:f5:8a:22:a0:01: f2:f6:5e:9c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF7Xv5p2zRVoaBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MmZmZjhhNWMtOTM3NS00NGYwLWI3NTMtNGFlYTg4YWQ1OWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YK0S6S2zI83mdNBLmpTasCkYPcV6gi4lOhe zAGs8j4WXRzVgCd8npdVwMraaUulhwWxCaMfdhSdHXBscd5LE56EPwXWm6Jl7AFJ EBlSsMkjdCxC5AamNtkzX9i+aKNO2aelMMWpUgkngpDxh6M3Yc9U+3lgHJ5101a6 L7aTVwmJwSDp+5Wtv5E4yc1C3EUm1O0Rnl+eDpVnEr/xh3ndxxwbWOwp6u8U9cMS vgmaxg9GbTNFdFfN0FjRu0kRPHn2MUI/9tiSOC2py7/1Ue2AJm+kNEUfg+07fyOo bsyc3NOludrfjdWKGI9Ucq2dN5a9gjzoqIMuFlvft67j8NnSWQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKriBZrF3x6jyTeVyzwhLh8walMwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjU3ZjBlODQtOWNjMC0z NDJiLTg3ZDEtOTY3OWNiNjhjN2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAdJRT04TWVbuAyjpkKY3a29Pbkd1yt3M2njmtXBIkph7QFU9JrboJ6 uhC7wf/jA0hkZ8zJEdFcdYN2Nsfq8oGnNCrndYxqUYWpZsUtDBlPBsx4CC0yVEQW tUA/KpjUPMjhREMM1O2CghUNxK7UcA/M1vNI0I9xX/cYIFK/aZFQR0Jg+IHFUltt 5H5NQL9wM68GJuG01KNpN5JKaiETa9XdyJcuZ40u2j40/kjaxsKsIlldT1g8oC/Z m1wS5K9D7UnJp5nvk+7UKw9K3MQc5WV8JDnbc0TspzgBfAIdvIfHuEpjRniuTBvZ tmetcodvGvYwdIEKozL+9YoioAHy9l6c -----END CERTIFICATE-----Generated at Mon Mar 2 09:15:19 2026 by rpki-client