$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8e395c5-40db-3949-82ef-49f34c2a5c8b.roa File: f8e395c5-40db-3949-82ef-49f34c2a5c8b.roa (raw, json) Hash identifier: IPiLzyvWD4FzyYd5ZzEsk8v9iKgm9xJ8xXOWRxXxI2U= Subject key identifier: 22:95:24:02:73:CA:4F:B1:72:79:9D:A2:71:48:74:17:BB:52:D5:7D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D0217A1998B3A9F7D4C904F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8e395c5-40db-3949-82ef-49f34c2a5c8b.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 36628 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:a1:99:8b:3a:9f:7d:4c:90:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=089ef1df-39a2-4369-b541-698ead0ec2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:09:e0:56:3d:0c:36:4a:ec:be:ee:78:a4:52: 2f:51:95:ac:7e:8a:c3:3f:64:f2:aa:25:a3:16:b6: 87:69:1a:d1:e1:89:cb:c3:75:bc:de:69:ec:b5:79: 7b:52:10:b7:e2:aa:c4:b3:8c:0a:b0:ce:81:19:13: be:44:d5:a4:fd:5a:75:76:74:b6:0a:89:6c:04:5c: de:fa:3b:97:e9:42:9a:f0:01:85:f2:de:f5:a3:4d: a2:b0:bf:fe:16:af:51:2b:02:3a:3f:22:6a:81:1b: 3e:5d:af:43:60:b8:09:7e:b4:2c:9a:93:e3:41:98: 2a:d9:53:f0:6c:84:40:c6:f2:f4:54:b4:03:4b:aa: ea:dd:97:dc:68:4e:81:22:32:80:77:cd:60:bf:6c: 1c:19:5c:0b:21:39:f0:d0:74:fd:2b:cc:4b:98:3b: 8c:42:6a:8e:4d:0b:5c:1f:b8:ab:30:b8:15:9c:57: 2d:2d:92:2c:be:28:01:49:6b:d0:16:70:95:e0:77: 64:c4:09:d7:16:07:35:10:9b:60:61:e5:da:72:1f: a7:c7:a2:53:06:05:ac:42:dc:c3:0a:f7:9a:5b:ad: ce:f7:97:75:17:56:7e:b6:32:9d:8f:d7:04:dd:78: 67:bf:9d:79:27:01:a7:95:5d:36:d4:dc:e6:38:de: 9f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:95:24:02:73:CA:4F:B1:72:79:9D:A2:71:48:74:17:BB:52:D5:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8e395c5-40db-3949-82ef-49f34c2a5c8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:9d:34:d3:42:9f:d8:47:e8:19:9e:e1:0c:e0:4c:ee:8f:94: 26:e8:74:6d:1c:68:ca:52:a7:b8:60:2b:16:e3:dc:26:bf:9f: b0:72:80:26:22:21:65:ca:5a:22:a9:a3:5f:1f:a6:f6:fe:2c: ba:d6:30:02:c6:f1:35:12:38:d9:eb:e4:e2:ba:ea:8e:3b:43: d7:72:03:4c:1e:99:31:29:24:32:53:fa:ec:cd:02:41:23:81: 61:8e:f3:dd:dd:ca:78:66:27:17:57:85:1d:3d:4c:21:eb:5f: c0:42:13:ca:70:65:19:62:4f:6e:8e:7e:9e:87:eb:06:bc:8c: 38:94:a7:85:0e:41:44:1a:03:91:1d:ca:41:0a:5d:75:cd:3d: c6:27:8a:09:d4:fa:7a:9a:65:f3:d9:5d:b4:69:09:67:3c:98: a7:cd:e2:bc:ad:48:ce:76:d2:d5:ef:6b:16:8e:0d:42:65:d7: dd:d9:90:3d:85:6b:39:1b:9d:34:44:a1:8b:54:ef:fb:eb:f8: 25:8d:da:7d:5f:11:21:95:4e:91:52:fc:66:40:f0:ca:70:14: 3c:27:8c:0d:1b:d2:2b:70:3e:b3:fd:7d:5a:d4:cd:aa:b8:dc: 0d:ac:73:12:74:ee:3f:20:fd:6a:80:0d:ac:79:38:bb:16:fa: 49:13:5c:a7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0CF6GZizqffUyQT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk MDg5ZWYxZGYtMzlhMi00MzY5LWI1NDEtNjk4ZWFkMGVjMmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngngVj0MNkrsvu54pFIvUZWsforDP2TyqiWj FraHaRrR4YnLw3W83mnstXl7UhC34qrEs4wKsM6BGRO+RNWk/Vp1dnS2ColsBFze +juX6UKa8AGF8t71o02isL/+Fq9RKwI6PyJqgRs+Xa9DYLgJfrQsmpPjQZgq2VPw bIRAxvL0VLQDS6rq3ZfcaE6BIjKAd81gv2wcGVwLITnw0HT9K8xLmDuMQmqOTQtc H7irMLgVnFctLZIsvigBSWvQFnCV4HdkxAnXFgc1EJtgYeXach+nx6JTBgWsQtzD CveaW63O95d1F1Z+tjKdj9cE3Xhnv515JwGnlV021NzmON6fDwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCKVJAJzyk+xcnmdonFIdBe7UtV9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjhlMzk1YzUtNDBkYi0z OTQ5LTgyZWYtNDlmMzRjMmE1YzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBUnTTTQp/YR+gZnuEM4Ezuj5Qm6HRtHGjKUqe4YCsW49wmv5+wcoAm IiFlyloiqaNfH6b2/iy61jACxvE1EjjZ6+TiuuqOO0PXcgNMHpkxKSQyU/rszQJB I4FhjvPd3cp4ZicXV4UdPUwh61/AQhPKcGUZYk9ujn6eh+sGvIw4lKeFDkFEGgOR HcpBCl11zT3GJ4oJ1Pp6mmXz2V20aQlnPJinzeK8rUjOdtLV72sWjg1CZdfd2ZA9 hWs5G500RKGLVO/76/gljdp9XxEhlU6RUvxmQPDKcBQ8J4wNG9IrcD6z/X1a1M2q uNwNrHMSdO4/IP1qgA2seTi7FvpJE1yn -----END CERTIFICATE-----Generated at Mon Mar 2 11:17:20 2026 by rpki-client