$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f1b1e97-2489-3d9a-b658-7894e5aec93e.roa File: 0f1b1e97-2489-3d9a-b658-7894e5aec93e.roa (raw, json) Hash identifier: 3cNhF3vtr1b27dUwqjkYHFeAbUduJYA2wDfP4bviPDU= Subject key identifier: BA:27:EC:55:5D:C8:A0:85:66:46:51:94:DA:5B:9D:CF:EB:EC:B6:E6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD6E6C2EAA1FC6E5BE060 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f1b1e97-2489-3d9a-b658-7894e5aec93e.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396605 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d6:e6:c2:ea:a1:fc:6e:5b:e0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=660d6630-b492-4f8e-a8c9-f31010e5ccec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ae:5d:bf:b4:6d:58:ea:ec:a6:bd:3b:2d:40: 07:87:84:9a:fb:89:40:52:b5:8c:82:24:ca:41:10: 7c:cb:d0:b1:b5:4b:3e:82:e9:51:43:37:82:c4:22: 1d:8c:c4:c5:e3:22:05:de:a5:ef:a2:2d:9e:41:28: 70:de:dc:84:bb:16:80:13:32:ce:23:d5:19:86:00: 08:cb:24:e9:0f:36:85:71:37:41:cb:b4:3d:9d:a0: c3:60:2b:7a:a2:fc:8d:1e:71:9f:e2:c9:74:e4:da: d7:b1:a6:ac:f4:06:7e:4b:a2:6e:9c:9d:41:77:c1: db:c7:6d:bc:28:eb:da:83:7b:0b:67:47:8b:96:94: d8:06:a2:6a:6d:8d:42:16:3f:aa:29:c6:db:2f:0a: d8:5c:b0:5d:5f:9e:a2:52:b7:71:c6:3b:84:ab:42: 6a:ae:d1:12:b4:d5:83:47:be:e3:f7:ad:9f:9b:74: 29:a2:ba:9e:66:d8:cb:79:07:55:1f:6a:30:65:80: c9:a6:e0:8a:4b:5d:d5:d0:50:b2:d6:d6:27:e5:f9: 23:68:2f:ba:2f:20:fc:b2:92:63:eb:40:1f:8b:a5: 5c:44:9c:1e:13:64:dd:31:31:97:e3:18:99:b2:fb: 40:13:92:2c:84:8c:bf:25:9b:ff:7c:bc:50:d0:76: 17:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:27:EC:55:5D:C8:A0:85:66:46:51:94:DA:5B:9D:CF:EB:EC:B6:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f1b1e97-2489-3d9a-b658-7894e5aec93e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:56:38:5c:4e:74:d0:9e:78:bd:93:2c:5e:55:d7:4a:9a:62: 8a:9b:28:af:e6:5a:c7:f1:b0:7e:1c:d8:20:57:73:ce:2d:53: ba:21:f8:df:c7:2f:ce:c8:b8:cd:e0:1e:ab:07:cf:90:32:af: 6a:1a:83:b6:bb:1e:4c:93:62:05:4a:40:64:65:0c:4b:52:60: 75:76:58:72:7a:1a:18:9e:09:35:67:ab:14:a6:c4:52:60:92: 63:04:ef:6c:a8:0c:ee:32:50:5f:a5:61:dd:26:65:2d:f5:31: e3:12:4c:ff:b5:84:8a:a8:b2:33:91:c7:f7:62:7d:e3:b4:5b: a7:55:ce:01:56:10:ba:4b:c0:f9:bf:5d:f6:e7:f0:dd:e4:f3: 64:7f:be:1a:e2:1e:1c:10:b3:17:a2:d7:7a:07:fc:32:3a:cc: d7:45:01:46:a6:1b:9e:fb:ce:03:12:dc:bf:a5:10:ea:ec:23: cc:aa:ba:d5:cc:d7:05:34:e6:cd:b9:87:38:16:fb:46:0d:f7: 2e:11:33:53:de:80:0d:b9:a3:37:61:58:b5:aa:b9:5b:ba:8a: 7c:16:5f:18:bf:01:25:59:38:7e:c6:98:ca:4f:6f:8d:05:a6: 7a:0c:f2:4e:80:4e:1d:86:31:95:7a:f3:e3:2d:b4:69:d6:3e: 94:d1:aa:fd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9bmwuqh/G5b4GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NjYwZDY2MzAtYjQ5Mi00ZjhlLWE4YzktZjMxMDEwZTVjY2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK5dv7RtWOrspr07LUAHh4Sa+4lAUrWMgiTK QRB8y9CxtUs+gulRQzeCxCIdjMTF4yIF3qXvoi2eQShw3tyEuxaAEzLOI9UZhgAI yyTpDzaFcTdBy7Q9naDDYCt6ovyNHnGf4sl05NrXsaas9AZ+S6JunJ1Bd8Hbx228 KOvag3sLZ0eLlpTYBqJqbY1CFj+qKcbbLwrYXLBdX56iUrdxxjuEq0JqrtEStNWD R77j962fm3QporqeZtjLeQdVH2owZYDJpuCKS13V0FCy1tYn5fkjaC+6LyD8spJj 60Afi6VcRJweE2TdMTGX4xiZsvtAE5IshIy/JZv/fLxQ0HYXZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLon7FVdyKCFZkZRlNpbnc/r7LbmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGYxYjFlOTctMjQ4OS0z ZDlhLWI2NTgtNzg5NGU1YWVjOTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBGVjhcTnTQnni9kyxeVddKmmKKmyiv5lrH8bB+HNggV3POLVO6Ifjf xy/OyLjN4B6rB8+QMq9qGoO2ux5Mk2IFSkBkZQxLUmB1dlhyehoYngk1Z6sUpsRS YJJjBO9sqAzuMlBfpWHdJmUt9THjEkz/tYSKqLIzkcf3Yn3jtFunVc4BVhC6S8D5 v1325/Dd5PNkf74a4h4cELMXotd6B/wyOszXRQFGphue+84DEty/pRDq7CPMqrrV zNcFNObNuYc4FvtGDfcuETNT3oANuaM3YVi1qrlbuop8Fl8YvwElWTh+xpjKT2+N BaZ6DPJOgE4dhjGVevPjLbRp1j6U0ar9 -----END CERTIFICATE-----Generated at Thu Mar 26 11:18:30 2026 by rpki-client