$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19523cd6-18e4-370d-89bc-41844d5a5a37.roa File: 19523cd6-18e4-370d-89bc-41844d5a5a37.roa (raw, json) Hash identifier: oLLfqwrGfdQ+cy8LBxc7b1iREBucrONTSQ8NCCO9U8g= Subject key identifier: C8:7C:87:61:F1:01:3E:7E:38:25:F8:CC:9D:0F:40:0D:11:23:9D:75 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD50A4370177BE3CD1F60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19523cd6-18e4-370d-89bc-41844d5a5a37.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396576 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d5:0a:43:70:17:7b:e3:cd:1f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=87e1d994-315d-4429-9836-ad8399308cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3f:c5:d3:93:a1:fb:16:4b:f9:d6:5b:57:2c: b1:5e:4d:d1:74:e6:d3:f3:4e:ef:53:f5:ce:1d:a6: 04:47:9c:29:cf:18:4b:3e:c7:31:2d:96:99:6e:90: 5c:26:47:01:c2:91:04:26:67:b3:7b:ed:36:cf:65: 99:71:83:8d:e5:ef:70:8b:7d:90:61:c2:f0:10:2a: b8:d4:5f:d0:9f:7e:14:da:ad:35:2a:9c:b7:ac:eb: f8:60:75:1e:2c:1a:19:f2:05:bf:f3:a8:a2:c0:1c: ee:96:8f:bf:a1:bf:1a:d4:15:30:24:07:27:9e:9d: 4b:10:ab:26:25:f8:a7:44:6d:79:11:12:6d:25:a1: 7f:c2:4a:5c:ed:b3:e3:c6:c6:18:01:0d:9d:4d:69: 01:61:2d:54:04:6d:23:80:ae:27:d8:f1:7f:57:64: de:93:b4:d8:54:ea:60:b6:62:68:f0:4c:39:01:75: db:2c:f3:ba:ee:53:d2:59:3b:92:0d:c9:9c:cc:c9: d9:c0:9b:cb:0c:3c:d9:4b:2d:d4:0e:70:af:37:e8: 74:bb:61:fb:04:d9:33:6c:83:b2:d2:65:7c:cf:ea: 06:96:56:e0:5a:be:f4:15:a5:4f:a5:79:5a:9c:88: 0f:90:e8:fd:8f:3b:9b:6e:2a:26:97:11:a4:bd:41: 68:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7C:87:61:F1:01:3E:7E:38:25:F8:CC:9D:0F:40:0D:11:23:9D:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19523cd6-18e4-370d-89bc-41844d5a5a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:e8:1b:f9:76:a2:62:1e:a5:63:1c:5b:c6:98:17:cb:26:41: 45:10:71:8f:b4:b0:b5:48:40:50:fa:8f:f8:f8:19:ca:ef:41: ce:25:02:46:c8:00:ca:ec:ca:63:59:98:6a:d3:bb:24:e1:b0: c3:4c:be:67:c7:f4:26:f4:24:f6:22:eb:47:98:0e:d4:21:64: 11:98:5c:54:ba:4e:60:59:5d:2e:44:e8:0e:14:2e:4c:1d:9b: 18:03:9d:13:51:62:dc:20:f1:52:22:7c:c9:33:1f:44:d4:2f: cd:83:a4:a8:19:67:85:9f:ac:a0:ba:87:08:98:e8:8d:94:5d: 96:87:10:10:10:7b:63:8a:4c:5a:19:dc:fb:01:ef:21:39:70: 61:46:11:45:43:1d:88:34:29:76:1f:eb:ee:d0:05:62:9e:78: 6f:ab:36:3f:13:a0:cb:0a:09:fd:8b:9d:26:bd:3e:a2:a8:d9: 05:da:aa:4e:1a:0e:71:4d:39:e6:2d:21:65:71:4e:ca:85:ed: 1d:c9:ba:70:43:b8:4b:3e:59:94:6a:31:36:1b:56:ce:f3:3a: 67:68:df:2a:1e:f2:2f:02:ec:73:1f:c3:e1:45:3e:2f:62:57: ca:39:18:f4:69:e9:19:53:ae:2f:05:52:38:ea:4a:23:12:a6: ed:94:c9:a7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9UKQ3AXe+PNH2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ODdlMWQ5OTQtMzE1ZC00NDI5LTk4MzYtYWQ4Mzk5MzA4Y2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz/F05Oh+xZL+dZbVyyxXk3RdObT807vU/XO HaYER5wpzxhLPscxLZaZbpBcJkcBwpEEJmeze+02z2WZcYON5e9wi32QYcLwECq4 1F/Qn34U2q01Kpy3rOv4YHUeLBoZ8gW/86iiwBzulo+/ob8a1BUwJAcnnp1LEKsm JfinRG15ERJtJaF/wkpc7bPjxsYYAQ2dTWkBYS1UBG0jgK4n2PF/V2Tek7TYVOpg tmJo8Ew5AXXbLPO67lPSWTuSDcmczMnZwJvLDDzZSy3UDnCvN+h0u2H7BNkzbIOy 0mV8z+oGllbgWr70FaVPpXlanIgPkOj9jzubbiomlxGkvUForwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMh8h2HxAT5+OCX4zJ0PQA0RI511MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTk1MjNjZDYtMThlNC0z NzBkLTg5YmMtNDE4NDRkNWE1YTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBq6Bv5dqJiHqVjHFvGmBfLJkFFEHGPtLC1SEBQ+o/4+BnK70HOJQJG yADK7MpjWZhq07sk4bDDTL5nx/Qm9CT2IutHmA7UIWQRmFxUuk5gWV0uROgOFC5M HZsYA50TUWLcIPFSInzJMx9E1C/Ng6SoGWeFn6yguocImOiNlF2WhxAQEHtjikxa Gdz7Ae8hOXBhRhFFQx2INCl2H+vu0AVinnhvqzY/E6DLCgn9i50mvT6iqNkF2qpO Gg5xTTnmLSFlcU7Khe0dybpwQ7hLPlmUajE2G1bO8zpnaN8qHvIvAuxzH8PhRT4v YlfKORj0aekZU64vBVI46kojEqbtlMmn -----END CERTIFICATE-----Generated at Thu Mar 26 18:01:08 2026 by rpki-client