$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f79e7ef1-73b1-34f1-9454-4a0c3034dd80.roa File: f79e7ef1-73b1-34f1-9454-4a0c3034dd80.roa (raw, json) Hash identifier: 0tiHigZnSGnMEmOTj1iI0I5HUkDAqpoOPxZ+cVIMNPY= Subject key identifier: 2D:75:40:88:30:0D:C4:0C:7F:5A:B9:25:BD:96:21:96:37:58:52:5E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217BE202860F3D0C4ABF9D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f79e7ef1-73b1-34f1-9454-4a0c3034dd80.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 396609 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:be:20:28:60:f3:d0:c4:ab:f9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=db1812e3-ab36-433c-ba1b-bab35477048e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:42:c6:7d:be:8e:1e:c4:48:0d:86:93:bf:c9: 42:13:a1:12:f5:b8:a2:bd:ec:d0:16:ff:39:95:4c: ca:01:4f:5a:20:a3:ae:31:08:37:a5:55:69:ff:72: 6a:0d:22:a4:e7:58:70:7b:47:2b:a3:eb:a6:2d:1e: a9:78:3d:05:07:de:79:a7:37:8d:29:e1:26:1c:a8: 83:f0:b9:e2:18:30:d5:dd:1c:c4:91:6d:5a:52:0b: 8b:a0:21:b3:bd:d7:82:34:5a:ff:e6:86:0f:30:21: 20:9a:2f:04:d9:37:de:04:3f:a7:7f:5a:00:e5:0f: a5:5c:40:33:31:f2:64:f9:99:d7:08:43:29:31:64: 5f:c5:0e:27:7b:e5:79:09:e1:15:fe:7f:df:d5:da: da:ea:a0:80:54:b2:f8:1b:13:06:0b:2d:e8:92:fb: 16:fb:98:11:6b:b9:e2:4a:cc:a6:1f:b0:e5:96:3b: ec:10:87:b8:f8:c4:c2:5c:c6:55:0c:79:26:e5:25: 51:d1:33:f9:83:f5:5f:75:e4:23:ea:a4:1d:dd:e6: 81:c8:85:87:da:39:85:3e:1f:22:28:62:43:b0:88: 51:06:fc:09:4b:71:82:ad:bb:4d:d0:7e:36:37:5c: 21:d5:b6:d6:5c:4d:16:65:b3:3d:33:6a:de:8d:5e: 80:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:75:40:88:30:0D:C4:0C:7F:5A:B9:25:BD:96:21:96:37:58:52:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f79e7ef1-73b1-34f1-9454-4a0c3034dd80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:4c:be:41:3c:e4:ba:b9:df:83:26:74:ea:19:70:e6:fa:4a: 79:b5:5f:a6:09:32:a2:5b:36:bd:bf:92:7f:e4:4c:82:7d:ae: da:61:c0:b8:33:c4:91:8c:93:59:5d:f1:aa:16:cb:d3:f9:e6: 7f:59:ed:ab:bf:6c:f0:e4:af:73:4e:3e:82:ab:6e:30:ed:c1: a3:7b:ad:69:cb:6a:58:23:41:31:57:69:b9:c9:36:f4:2a:b3: a7:02:73:23:2d:4c:fc:f4:6c:ce:a1:e8:db:7d:3e:8f:c3:60: 8f:c5:88:28:3e:b2:e0:08:6a:ed:fc:75:9a:7f:02:87:0e:87: 78:0a:94:dc:6a:cd:82:7c:94:e6:d6:6c:65:49:05:59:b8:13: 8c:e5:fa:b4:3d:8c:95:b0:92:3f:12:08:c8:ca:c9:7d:fe:dc: 58:b6:61:1a:67:f5:2d:46:85:b0:46:a2:93:d0:c9:83:3b:0a: 3e:df:a9:cc:79:63:04:4a:1b:48:2c:34:e7:a0:49:f5:49:2d: 97:75:43:31:a5:fa:62:23:77:c7:9d:66:b5:e8:93:b8:f1:4b: 27:23:07:74:e2:98:07:99:17:25:a6:a1:c8:01:25:98:16:8a: 37:6a:29:3f:55:95:38:da:4d:49:96:1e:fe:66:d1:b2:da:db: 07:64:f3:f5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF74gKGDz0MSr+dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZGIxODEyZTMtYWIzNi00MzNjLWJhMWItYmFiMzU0NzcwNDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0LGfb6OHsRIDYaTv8lCE6ES9biivezQFv85 lUzKAU9aIKOuMQg3pVVp/3JqDSKk51hwe0cro+umLR6peD0FB955pzeNKeEmHKiD 8LniGDDV3RzEkW1aUguLoCGzvdeCNFr/5oYPMCEgmi8E2TfeBD+nf1oA5Q+lXEAz MfJk+ZnXCEMpMWRfxQ4ne+V5CeEV/n/f1dra6qCAVLL4GxMGCy3okvsW+5gRa7ni SsymH7DlljvsEIe4+MTCXMZVDHkm5SVR0TP5g/VfdeQj6qQd3eaByIWH2jmFPh8i KGJDsIhRBvwJS3GCrbtN0H42N1wh1bbWXE0WZbM9M2rejV6AaQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC11QIgwDcQMf1q5Jb2WIZY3WFJeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjc5ZTdlZjEtNzNiMS0z NGYxLTk0NTQtNGEwYzMwMzRkZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCFTL5BPOS6ud+DJnTqGXDm+kp5tV+mCTKiWza9v5J/5EyCfa7aYcC4 M8SRjJNZXfGqFsvT+eZ/We2rv2zw5K9zTj6Cq24w7cGje61py2pYI0ExV2m5yTb0 KrOnAnMjLUz89GzOoejbfT6Pw2CPxYgoPrLgCGrt/HWafwKHDod4CpTcas2CfJTm 1mxlSQVZuBOM5fq0PYyVsJI/EgjIysl9/txYtmEaZ/UtRoWwRqKT0MmDOwo+36nM eWMEShtILDTnoEn1SS2XdUMxpfpiI3fHnWa16JO48UsnIwd04pgHmRclpqHIASWY Foo3aik/VZU42k1Jlh7+ZtGy2tsHZPP1 -----END CERTIFICATE-----Generated at Mon Mar 2 02:29:35 2026 by rpki-client