$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23fecb44-7421-362d-ba40-5b6c6d7a3112.roa File: 23fecb44-7421-362d-ba40-5b6c6d7a3112.roa (raw, json) Hash identifier: NA5xrUJssNo2knIdsvwYL73RpKrAvxgDI/scn95CpK8= Subject key identifier: 07:15:87:21:0A:B4:24:CD:77:04:57:F4:6C:BF:A7:E3:98:7C:4D:57 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD6F79D21CE96CA162B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23fecb44-7421-362d-ba40-5b6c6d7a3112.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396602 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d6:f7:9d:21:ce:96:ca:16:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=d841b7ea-3f49-4418-a19d-a2b7b92baf53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:01:73:d9:3c:d5:f2:3d:80:9d:59:cc:96:d0: 23:82:ff:44:20:94:88:74:1b:e5:4b:94:59:96:f9: 0c:83:6d:42:80:8f:b6:ee:b6:8a:88:8c:fd:47:86: 5a:65:02:f5:38:54:22:40:20:2e:4b:84:5e:36:f1: 03:4a:f0:99:2d:2f:7f:eb:2f:d1:76:80:a3:26:65: 6f:d6:30:b0:97:94:06:24:5b:b7:57:97:3a:1f:bc: 0b:66:d4:d4:90:26:3d:31:1c:61:c5:75:7a:c6:78: da:28:62:4a:3a:fe:b0:c7:0e:63:99:11:0d:3e:ba: 0a:8a:e9:89:96:c4:6c:1f:6a:4d:14:9e:57:ee:1f: 51:7e:cb:e6:03:02:63:55:c4:d8:14:8a:8c:07:d9: cf:df:1d:04:d7:21:17:3c:af:24:ed:63:44:2d:d8: a8:7b:86:0b:a0:79:44:7c:fc:b6:40:8d:99:82:5d: 99:f4:8e:ec:b2:a4:00:32:5f:95:55:96:00:ae:c9: 70:62:29:7d:e7:fa:81:ff:d2:40:1c:96:db:89:21: 00:5d:ad:14:48:9d:8d:7d:60:44:e2:56:cc:ad:5e: 46:9c:12:cb:ef:71:a4:21:8a:33:bf:3d:fd:96:9a: a8:34:b0:5f:e8:5d:72:b8:a6:6d:e4:bd:7b:d6:32: fe:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:15:87:21:0A:B4:24:CD:77:04:57:F4:6C:BF:A7:E3:98:7C:4D:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23fecb44-7421-362d-ba40-5b6c6d7a3112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ef:54:0e:d1:70:85:d9:60:29:d3:05:3a:03:be:80:04:21: 05:4c:6f:59:1e:0a:91:cb:aa:84:6d:a4:b8:21:6a:39:d2:a8: 02:7c:20:ac:fe:c7:38:bb:a6:9d:f8:65:25:65:47:0b:41:a3: a3:68:17:c6:1b:47:40:f9:e6:5c:e6:59:39:3e:c5:3a:81:60: 2f:d6:94:ca:0e:ad:33:d0:3c:3f:4c:c9:a2:d8:ed:0b:d4:45: 4d:4b:34:c2:9d:89:0f:26:ea:e4:11:5b:32:24:63:87:23:75: 80:5a:ea:a0:4c:c7:4c:50:1e:80:a5:8f:72:5f:60:c4:78:e3: b6:70:7e:90:9b:3f:8f:f9:8a:68:e8:2b:d9:d4:3b:f9:9d:67: d5:06:d5:93:3e:e4:09:17:aa:cc:44:1c:a7:b5:42:da:6f:7a: 3e:ea:c1:89:f8:6a:f9:d1:91:b8:28:79:3f:61:f7:3f:7e:90: 78:90:dc:a4:e9:3b:a0:8b:ce:f8:16:9a:6f:e2:a3:4d:57:5a: 89:d7:50:43:29:50:0d:75:e1:28:f2:1f:b5:9c:2f:4d:11:ae: 39:77:e7:bf:31:5e:e0:2d:dd:97:32:2e:f8:e6:2d:6d:d8:49: 89:db:23:99:f2:0f:11:02:09:7f:ae:41:1c:1b:a2:35:94:a4: 67:bc:bf:da -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9b3nSHOlsoWK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZDg0MWI3ZWEtM2Y0OS00NDE4LWExOWQtYTJiN2I5MmJhZjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQFz2TzV8j2AnVnMltAjgv9EIJSIdBvlS5RZ lvkMg21CgI+27raKiIz9R4ZaZQL1OFQiQCAuS4ReNvEDSvCZLS9/6y/RdoCjJmVv 1jCwl5QGJFu3V5c6H7wLZtTUkCY9MRxhxXV6xnjaKGJKOv6wxw5jmRENProKiumJ lsRsH2pNFJ5X7h9RfsvmAwJjVcTYFIqMB9nP3x0E1yEXPK8k7WNELdioe4YLoHlE fPy2QI2Zgl2Z9I7ssqQAMl+VVZYArslwYil95/qB/9JAHJbbiSEAXa0USJ2NfWBE 4lbMrV5GnBLL73GkIYozvz39lpqoNLBf6F1yuKZt5L171jL+aQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAcVhyEKtCTNdwRX9Gy/p+OYfE1XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjNmZWNiNDQtNzQyMS0z NjJkLWJhNDAtNWI2YzZkN2EzMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBR71QO0XCF2WAp0wU6A76ABCEFTG9ZHgqRy6qEbaS4IWo50qgCfCCs /sc4u6ad+GUlZUcLQaOjaBfGG0dA+eZc5lk5PsU6gWAv1pTKDq0z0Dw/TMmi2O0L 1EVNSzTCnYkPJurkEVsyJGOHI3WAWuqgTMdMUB6ApY9yX2DEeOO2cH6Qmz+P+Ypo 6CvZ1Dv5nWfVBtWTPuQJF6rMRByntULab3o+6sGJ+Gr50ZG4KHk/Yfc/fpB4kNyk 6Tugi874Fppv4qNNV1qJ11BDKVANdeEo8h+1nC9NEa45d+e/MV7gLd2XMi745i1t 2EmJ2yOZ8g8RAgl/rkEcG6I1lKRnvL/a -----END CERTIFICATE-----Generated at Thu Mar 26 11:15:17 2026 by rpki-client