$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22b6330a-a303-3425-89a5-50a7a762ca1e.roa File: 22b6330a-a303-3425-89a5-50a7a762ca1e.roa (raw, json) Hash identifier: xiWmyU4pXnI5yEtdcME9QO7SCt0G/dF3DnTG43jfRfI= Subject key identifier: F0:07:D3:D9:7A:81:0E:14:61:9E:7C:6A:91:7B:72:E6:B9:4B:DA:37 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD4A3D23CE6673F07A740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22b6330a-a303-3425-89a5-50a7a762ca1e.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396551 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d4:a3:d2:3c:e6:67:3f:07:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=15583e61-8efa-4b5b-9184-0ac6d716f3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:14:13:88:dd:2c:68:fe:d3:3a:ed:36:02:4a: 10:31:9d:1b:d1:7f:7f:ce:4e:19:75:66:0e:df:af: 0c:78:24:c6:f7:cd:43:19:24:49:fb:f7:9d:e6:37: 64:e8:32:a4:6f:20:bd:11:b1:98:18:9c:40:35:67: 10:3c:63:8f:f9:65:e0:9b:07:59:84:f3:d3:7c:fd: 7f:93:7a:cf:19:11:61:0e:72:22:75:59:b0:7d:80: 5f:9e:e9:a6:2a:d4:3e:1b:48:c1:e3:9b:0a:6b:d6: cc:52:8c:de:f9:13:a2:e3:f8:52:30:7b:36:61:60: 47:cf:12:fb:6e:60:6f:3e:23:03:1f:69:a6:f4:15: 61:53:9e:9a:74:75:5c:42:1c:76:bd:55:ec:65:72: ca:fb:07:cf:a7:33:66:5b:02:28:8c:be:13:8d:88: 6f:38:dd:ab:ad:72:39:1a:6b:f2:8c:76:89:04:cb: 52:02:46:4f:cc:ca:d8:89:dd:e7:ee:44:b4:ed:8c: 1f:16:9b:b0:a3:a5:34:57:6e:a6:e2:bf:a4:e6:39: c8:09:9b:9f:d6:a9:e2:01:98:c9:4f:a1:c0:ea:62: 93:51:92:43:91:a1:4a:a7:fa:6e:8f:f8:c1:5f:04: d8:54:bd:ec:97:58:33:35:66:6f:f0:6f:aa:a0:36: 6e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:07:D3:D9:7A:81:0E:14:61:9E:7C:6A:91:7B:72:E6:B9:4B:DA:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22b6330a-a303-3425-89a5-50a7a762ca1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d7:53:f1:2a:cd:da:c8:70:72:a6:95:c9:fe:ea:4f:0b:86: 3c:78:89:d0:39:70:88:53:f1:83:82:d1:32:d2:94:59:5d:85: 27:2e:3a:af:f2:56:6c:f3:33:d0:f0:95:8c:02:3e:ad:3b:6a: 02:67:26:76:bb:5c:b8:a1:a7:37:61:e4:ca:c7:f4:af:db:ff: c7:27:8a:45:57:4a:3c:45:26:10:fd:31:65:e2:94:d6:a8:d7: 2c:59:2e:77:e9:f9:7e:20:5d:5d:10:f8:dd:c3:e0:50:a8:fa: cd:a7:1e:f3:4f:47:21:98:19:fb:52:1d:bc:6a:b3:dc:fa:0f: d4:d7:de:97:55:1a:3c:07:c5:35:af:94:8b:1b:a7:bc:25:57: 5f:0c:68:27:38:c2:6a:7d:ec:a3:b9:30:8b:61:b6:d6:13:91: 68:4f:53:70:be:01:f3:76:0b:cd:9b:13:e9:04:67:9f:a8:8f: 66:cf:bd:5a:be:7b:7f:02:72:7a:ad:de:e0:4c:8a:68:d3:a9: 51:c9:4f:72:2c:19:29:3c:e7:d3:5c:39:d1:89:32:f1:5b:c8: eb:3c:29:47:05:c6:3d:25:d0:02:da:e0:83:3f:15:ec:65:ec: 86:07:33:b7:bb:7c:f8:cd:29:ff:a8:2d:99:01:02:02:07:c0: aa:c5:21:41 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9Sj0jzmZz8Hp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MTU1ODNlNjEtOGVmYS00YjViLTkxODQtMGFjNmQ3MTZmM2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRQTiN0saP7TOu02AkoQMZ0b0X9/zk4ZdWYO 368MeCTG981DGSRJ+/ed5jdk6DKkbyC9EbGYGJxANWcQPGOP+WXgmwdZhPPTfP1/ k3rPGRFhDnIidVmwfYBfnummKtQ+G0jB45sKa9bMUoze+ROi4/hSMHs2YWBHzxL7 bmBvPiMDH2mm9BVhU56adHVcQhx2vVXsZXLK+wfPpzNmWwIojL4TjYhvON2rrXI5 GmvyjHaJBMtSAkZPzMrYid3n7kS07YwfFpuwo6U0V26m4r+k5jnICZuf1qniAZjJ T6HA6mKTUZJDkaFKp/puj/jBXwTYVL3sl1gzNWZv8G+qoDZuPwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPAH09l6gQ4UYZ58apF7cua5S9o3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjJiNjMzMGEtYTMwMy0z NDI1LTg5YTUtNTBhN2E3NjJjYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB611PxKs3ayHByppXJ/upPC4Y8eInQOXCIU/GDgtEy0pRZXYUnLjqv 8lZs8zPQ8JWMAj6tO2oCZyZ2u1y4oac3YeTKx/Sv2//HJ4pFV0o8RSYQ/TFl4pTW qNcsWS536fl+IF1dEPjdw+BQqPrNpx7zT0chmBn7Uh28arPc+g/U196XVRo8B8U1 r5SLG6e8JVdfDGgnOMJqfeyjuTCLYbbWE5FoT1NwvgHzdgvNmxPpBGefqI9mz71a vnt/AnJ6rd7gTIpo06lRyU9yLBkpPOfTXDnRiTLxW8jrPClHBcY9JdAC2uCDPxXs ZeyGBzO3u3z4zSn/qC2ZAQICB8CqxSFB -----END CERTIFICATE-----Generated at Thu Mar 26 13:01:15 2026 by rpki-client