$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7e8e74a-76ca-38ba-8970-8b8d4f85baff.roa File: f7e8e74a-76ca-38ba-8970-8b8d4f85baff.roa (raw, json) Hash identifier: Mn86Gl5SJ9E6lbpDBQB89zCq7EqoFGNMiX9osP1L55g= Subject key identifier: 9A:51:AB:85:70:D8:B5:DB:33:63:DA:B3:E1:FB:DB:C9:0E:DF:B0:CB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D02179057EF98133EC08DBF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7e8e74a-76ca-38ba-8970-8b8d4f85baff.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 397202 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:90:57:ef:98:13:3e:c0:8d:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=f3f9064b-399b-4566-82b4-ee17221afff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:01:0c:fa:d4:5a:5c:7e:b9:65:c6:bb:a6:58: 02:5d:ff:18:a5:e5:83:db:c1:db:9a:73:69:ae:66: 39:f8:1b:35:b1:eb:ab:d9:29:30:a6:49:8c:66:75: 5b:2d:63:8c:62:8b:a1:05:6e:20:f8:d6:67:0d:a0: d8:d9:f2:9c:45:e4:58:ef:d4:8b:e2:98:61:cd:62: 02:e8:a5:45:93:e4:55:66:a2:25:60:5d:1f:ad:9b: 1d:b4:68:6e:d2:57:b4:44:32:b1:37:a1:8e:35:24: 9c:88:1e:ca:e7:b9:11:5c:41:18:88:d2:9a:0c:8e: 99:30:f7:c4:18:e9:38:41:ed:35:4c:31:ab:b2:1d: aa:f8:a6:4f:be:ee:52:66:de:1a:f8:f9:c4:04:74: 79:17:31:c1:eb:6b:f5:ea:39:ab:83:97:d3:d2:c4: f0:82:e6:12:c9:de:c0:2c:09:fa:be:f7:8e:d5:06: 67:97:16:1d:f7:e1:5c:d0:3d:52:72:1a:12:64:71: 03:94:62:b1:f1:06:40:64:ac:0e:32:1c:6d:bb:5a: b0:07:f4:65:5c:07:d7:c4:99:27:3f:21:1a:d5:0b: 6c:42:ef:24:0b:9b:59:42:0a:13:e2:78:2a:e3:4c: 4e:e9:92:17:44:b7:9b:eb:58:e6:b5:f9:42:b8:d2: 9c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:51:AB:85:70:D8:B5:DB:33:63:DA:B3:E1:FB:DB:C9:0E:DF:B0:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7e8e74a-76ca-38ba-8970-8b8d4f85baff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c8:db:d9:51:b7:5d:7a:4c:2c:87:c9:61:31:2e:16:02:19: bd:0b:4d:aa:8e:1b:68:74:82:66:2f:25:b2:ac:f7:af:12:f1: 65:bd:85:c4:94:c5:b3:f6:08:a3:83:9c:1a:9f:dd:94:64:ad: ce:a2:7e:cc:74:3f:4e:3f:6e:ec:f3:02:6e:32:9b:44:cb:ac: f3:ae:cd:41:ec:31:01:57:3d:a2:e0:65:05:a0:92:e9:a6:30: 11:31:80:fc:2f:e9:fe:6a:06:97:a4:08:7e:8a:5f:51:21:f8: c4:ed:72:e4:27:38:3d:8b:62:dc:38:ef:18:35:e5:b5:eb:19: 9e:b2:e3:05:48:2c:9f:19:46:04:59:02:18:d8:c9:ab:bf:26: 24:03:cc:77:2a:7e:4c:b2:24:29:cd:06:b2:3f:e8:d2:37:7b: ba:13:49:40:9e:17:0c:cc:46:32:bd:db:65:1f:a4:5d:45:3e: 16:90:4a:35:b6:ca:29:f8:7b:40:0b:d2:66:2c:75:f5:27:44: 78:1f:be:ab:6a:30:e5:11:6f:e7:ac:57:9b:fe:f6:be:d3:63: ba:a0:f1:19:57:55:ae:f4:b6:ba:09:f1:d1:2c:67:7c:f4:48: 6f:5f:a8:af:98:cd:f6:be:dc:13:17:ae:93:47:8e:d8:a0:b9: 2d:07:b6:04 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF5BX75gTPsCNv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZjNmOTA2NGItMzk5Yi00NTY2LTgyYjQtZWUxNzIyMWFmZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AEM+tRaXH65Zca7plgCXf8YpeWD28HbmnNp rmY5+Bs1seur2SkwpkmMZnVbLWOMYouhBW4g+NZnDaDY2fKcReRY79SL4phhzWIC 6KVFk+RVZqIlYF0frZsdtGhu0le0RDKxN6GONSSciB7K57kRXEEYiNKaDI6ZMPfE GOk4Qe01TDGrsh2q+KZPvu5SZt4a+PnEBHR5FzHB62v16jmrg5fT0sTwguYSyd7A LAn6vveO1QZnlxYd9+Fc0D1SchoSZHEDlGKx8QZAZKwOMhxtu1qwB/RlXAfXxJkn PyEa1QtsQu8kC5tZQgoT4ngq40xO6ZIXRLeb61jmtflCuNKcbwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJpRq4Vw2LXbM2Pas+H728kO37DLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjdlOGU3NGEtNzZjYS0z OGJhLTg5NzAtOGI4ZDRmODViYWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAcyNvZUbddekwsh8lhMS4WAhm9C02qjhtodIJmLyWyrPevEvFlvYXE lMWz9gijg5wan92UZK3Oon7MdD9OP27s8wJuMptEy6zzrs1B7DEBVz2i4GUFoJLp pjARMYD8L+n+agaXpAh+il9RIfjE7XLkJzg9i2LcOO8YNeW16xmesuMFSCyfGUYE WQIY2MmrvyYkA8x3Kn5MsiQpzQayP+jSN3u6E0lAnhcMzEYyvdtlH6RdRT4WkEo1 tsop+HtAC9JmLHX1J0R4H76rajDlEW/nrFeb/va+02O6oPEZV1Wu9La6CfHRLGd8 9EhvX6ivmM32vtwTF66TR47YoLktB7YE -----END CERTIFICATE-----Generated at Mon Mar 2 05:44:35 2026 by rpki-client