$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f3ad2b4-9337-3ee6-91d4-72b2889a7d41.roa File: 0f3ad2b4-9337-3ee6-91d4-72b2889a7d41.roa (raw, json) Hash identifier: rJmw6F7iEz/eUUHplsz0mepO7SrpH6ed23Q2JwCFFB8= Subject key identifier: 92:58:C0:B8:85:34:6C:66:95:AB:5E:C2:EE:0F:4F:82:5D:FE:D5:46 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFE22BD44F2E09196A2AE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f3ad2b4-9337-3ee6-91d4-72b2889a7d41.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 211369 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:e2:2b:d4:4f:2e:09:19:6a:2a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=a0188b38-1a07-430b-8671-2daa17ed1b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9b:29:a1:61:fb:bf:8a:bd:99:ad:f6:46:b3: 89:cc:31:23:80:f7:d8:9b:22:bf:fb:df:80:1e:c3: fa:d5:bb:06:f7:1b:9a:6e:bc:63:37:fb:c7:78:0a: b2:d6:fd:e6:0f:a4:e2:e8:55:00:7a:e2:52:42:ad: 0d:74:57:85:bf:9a:7b:a1:59:57:a8:eb:68:3d:f9: 93:53:b8:af:20:aa:18:ed:78:1a:1d:e0:51:d7:10: 0d:f7:80:66:e8:1c:62:19:c7:78:66:7d:f7:c0:64: b8:34:e5:80:6f:a5:61:26:4c:df:46:21:ef:68:8f: f2:66:4c:f8:24:fe:45:91:5e:38:71:04:92:93:d2: 16:8c:f1:93:48:bf:f0:c4:29:a0:af:9e:72:e7:ad: dd:a3:35:4f:b5:cc:75:fc:40:9c:7d:29:72:6c:63: 36:81:e2:a4:cb:e5:81:b0:63:da:9c:4c:9a:df:0a: 66:61:33:4d:9d:f7:d3:62:3d:93:c7:d0:1c:ac:93: cb:43:ad:41:66:49:3f:ef:14:9a:7b:03:05:da:0d: fb:a8:e0:48:75:0f:0e:49:80:1b:c8:27:4d:63:7a: 78:5f:e4:a6:9e:a1:01:bd:c9:ff:cd:48:7f:d3:c4: 7b:36:e7:0f:cf:0f:8d:71:06:c6:9c:3a:86:f7:da: a8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:58:C0:B8:85:34:6C:66:95:AB:5E:C2:EE:0F:4F:82:5D:FE:D5:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f3ad2b4-9337-3ee6-91d4-72b2889a7d41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b2:5a:c8:f8:f1:a3:38:9a:5b:f9:e4:32:57:4b:25:d4:c6: c7:ac:17:1e:8f:08:f4:17:80:e4:24:de:d4:db:89:7b:fe:7a: 80:24:e4:25:e0:4c:ed:02:63:20:a3:03:d8:d5:5e:c5:02:07: a1:f8:22:e2:2b:9c:a9:21:8a:9e:04:50:bc:08:95:63:19:cc: bc:6f:cb:d3:3e:a9:6a:4d:82:09:c0:71:ae:5c:58:4d:83:e4: 25:43:db:2d:9d:37:9a:9b:19:d7:47:b2:19:be:ed:a9:fa:5e: 68:b1:53:a7:0a:c4:d4:38:90:77:36:34:51:ae:8c:17:17:5d: 8e:79:c3:f1:c2:a7:d5:5f:34:10:f3:43:e3:e3:0f:e8:89:df: 9b:5f:4d:83:96:e5:3b:a0:92:52:04:01:83:2a:b1:9a:7d:93: 27:f3:6b:9d:13:3b:e2:b4:03:a7:3e:ba:a7:92:d1:be:35:23: c4:be:cd:63:f1:38:1b:93:6f:a9:6f:43:fa:da:76:4f:55:d4: 45:91:0c:28:49:5f:62:8a:5d:a2:fe:21:02:c0:36:ff:d4:07: 31:55:b5:3d:f1:df:0b:f9:a3:68:5e:be:2b:30:fa:b8:3a:3b: dc:2c:68:20:d0:25:81:26:82:db:2a:05:22:ca:7a:bb:91:23: 87:c0:2e:11 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/+Ir1E8uCRlqKuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YTAxODhiMzgtMWEwNy00MzBiLTg2NzEtMmRhYTE3ZWQxYjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5spoWH7v4q9ma32RrOJzDEjgPfYmyK/+9+A HsP61bsG9xuabrxjN/vHeAqy1v3mD6Ti6FUAeuJSQq0NdFeFv5p7oVlXqOtoPfmT U7ivIKoY7XgaHeBR1xAN94Bm6BxiGcd4Zn33wGS4NOWAb6VhJkzfRiHvaI/yZkz4 JP5FkV44cQSSk9IWjPGTSL/wxCmgr55y563dozVPtcx1/ECcfSlybGM2geKky+WB sGPanEya3wpmYTNNnffTYj2Tx9AcrJPLQ61BZkk/7xSaewMF2g37qOBIdQ8OSYAb yCdNY3p4X+SmnqEBvcn/zUh/08R7NucPzw+NcQbGnDqG99qo1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJJYwLiFNGxmlatewu4PT4Jd/tVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGYzYWQyYjQtOTMzNy0z ZWU2LTkxZDQtNzJiMjg4OWE3ZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB0slrI+PGjOJpb+eQyV0sl1MbHrBcejwj0F4DkJN7U24l7/nqAJOQl 4EztAmMgowPY1V7FAgeh+CLiK5ypIYqeBFC8CJVjGcy8b8vTPqlqTYIJwHGuXFhN g+QlQ9stnTeamxnXR7IZvu2p+l5osVOnCsTUOJB3NjRRrowXF12OecPxwqfVXzQQ 80Pj4w/oid+bX02DluU7oJJSBAGDKrGafZMn82udEzvitAOnPrqnktG+NSPEvs1j 8Tgbk2+pb0P62nZPVdRFkQwoSV9iil2i/iECwDb/1AcxVbU98d8L+aNoXr4rMPq4 OjvcLGgg0CWBJoLbKgUiynq7kSOHwC4R -----END CERTIFICATE-----Generated at Thu Mar 26 11:34:46 2026 by rpki-client