$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19287df1-a883-3e43-8399-5b7b51e72aad.roa File: 19287df1-a883-3e43-8399-5b7b51e72aad.roa (raw, json) Hash identifier: Ls2syNlV78+aSf4CukBra1un4Xipzml0uRkI8T148VE= Subject key identifier: D5:01:C9:1A:2A:89:40:99:98:3D:D6:21:33:E6:B0:41:06:46:2E:0A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFE34A0E2214B3249A2DA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19287df1-a883-3e43-8399-5b7b51e72aad.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396575 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:e3:4a:0e:22:14:b3:24:9a:2d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=83167e41-476f-4811-9dd5-6d4fba1e0763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e2:9f:72:73:f2:b2:25:da:3f:72:62:a9:07: 36:b8:6a:41:27:6b:ea:68:e4:3f:c1:78:16:51:03: 97:ca:aa:3d:d3:33:20:42:e6:15:bd:53:4f:f8:45: 96:85:fe:57:30:12:7c:d0:62:5c:b7:1f:9a:4d:36: 7a:f4:c2:e9:8e:8f:3e:ac:9a:88:fa:f6:19:ae:50: a4:93:7a:00:a8:d2:9e:57:d3:0d:30:73:37:e7:0b: 7e:45:22:e2:97:6b:07:4d:42:3b:17:a3:98:59:b6: 21:b7:59:ed:67:59:f7:60:76:e5:1b:c7:d6:87:b2: ec:d2:df:f5:c5:b6:b2:35:be:13:cf:5d:73:b7:5f: cf:82:47:62:fc:84:d1:b9:9a:2a:d6:d5:92:d3:25: 93:a5:64:49:25:cb:0e:2f:7b:89:f6:6f:29:d0:c1: 11:74:e9:9a:a6:c4:18:a5:d1:4a:61:7a:61:f8:5f: 2b:31:a6:cf:ce:7b:41:ea:3b:24:ca:b4:ec:fd:47: 41:a3:45:34:91:f7:43:ae:c8:e0:33:41:16:36:5c: 63:d8:bf:80:cd:79:69:12:ce:a2:4a:87:83:99:58: 7e:9b:3d:a6:4b:65:41:25:8f:bc:ee:73:fe:f8:42: e5:03:26:89:7a:9f:9b:14:b3:f4:18:65:18:6b:27: d6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:01:C9:1A:2A:89:40:99:98:3D:D6:21:33:E6:B0:41:06:46:2E:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19287df1-a883-3e43-8399-5b7b51e72aad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:75:3b:58:6b:1a:99:6b:41:9c:34:ed:ad:f3:a4:44:1e:88: f1:1e:18:e2:ae:10:1a:e5:5f:db:9e:c9:3d:29:65:a5:3b:b6: 79:bd:e3:e6:bb:b4:a2:4e:51:e6:9f:cd:d9:a3:cd:99:a5:fc: 7f:8a:1e:26:0b:f4:92:70:49:f3:4c:d8:74:a7:40:70:ff:2f: fc:1f:60:e7:6a:21:0f:64:9c:a3:13:2a:45:3b:ad:22:5a:92: 39:ef:19:b3:ca:69:ca:73:fc:87:03:08:e9:22:b6:6f:36:08: ec:bd:dc:73:cc:d4:9f:59:86:cd:70:a1:bc:6d:90:4b:f4:ea: 33:9b:c2:37:3a:4b:fb:a7:20:79:6d:23:f2:32:fe:35:9d:eb: 81:17:72:87:5a:96:63:61:b2:af:9b:c8:9f:b5:d6:d8:f4:c4: b5:ac:71:8e:e1:36:79:df:94:a6:7a:05:2c:f8:18:a6:8c:2f: e7:c0:c0:ec:41:96:f9:5e:c9:e1:22:cf:52:7b:43:50:de:75: b9:4c:d0:0f:22:38:c9:fa:5c:4c:a0:eb:44:21:c6:a7:15:d1: 06:92:34:b2:72:a0:3a:f6:5a:0e:96:0a:c3:6f:c7:0c:31:ae: a4:5b:6d:91:d6:28:23:b4:1d:a5:a3:30:96:94:ec:db:aa:af: 19:df:94:d5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/+NKDiIUsySaLaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ODMxNjdlNDEtNDc2Zi00ODExLTlkZDUtNmQ0ZmJhMWUwNzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeKfcnPysiXaP3JiqQc2uGpBJ2vqaOQ/wXgW UQOXyqo90zMgQuYVvVNP+EWWhf5XMBJ80GJctx+aTTZ69MLpjo8+rJqI+vYZrlCk k3oAqNKeV9MNMHM35wt+RSLil2sHTUI7F6OYWbYht1ntZ1n3YHblG8fWh7Ls0t/1 xbayNb4Tz11zt1/Pgkdi/ITRuZoq1tWS0yWTpWRJJcsOL3uJ9m8p0MERdOmapsQY pdFKYXph+F8rMabPzntB6jskyrTs/UdBo0U0kfdDrsjgM0EWNlxj2L+AzXlpEs6i SoeDmVh+mz2mS2VBJY+87nP++ELlAyaJep+bFLP0GGUYayfWOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNUByRoqiUCZmD3WITPmsEEGRi4KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTkyODdkZjEtYTg4My0z ZTQzLTgzOTktNWI3YjUxZTcyYWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBWdTtYaxqZa0GcNO2t86REHojxHhjirhAa5V/bnsk9KWWlO7Z5vePm u7SiTlHmn83Zo82Zpfx/ih4mC/SScEnzTNh0p0Bw/y/8H2DnaiEPZJyjEypFO60i WpI57xmzymnKc/yHAwjpIrZvNgjsvdxzzNSfWYbNcKG8bZBL9Oozm8I3Okv7pyB5 bSPyMv41neuBF3KHWpZjYbKvm8iftdbY9MS1rHGO4TZ535SmegUs+BimjC/nwMDs QZb5XsnhIs9Se0NQ3nW5TNAPIjjJ+lxMoOtEIcanFdEGkjSycqA69loOlgrDb8cM Ma6kW22R1igjtB2lozCWlOzbqq8Z35TV -----END CERTIFICATE-----Generated at Thu Mar 26 11:16:06 2026 by rpki-client