$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37432031-824b-389e-8e2d-eddf0a49dcd6.roa File: 37432031-824b-389e-8e2d-eddf0a49dcd6.roa (raw, json) Hash identifier: Cb+LOA1mmEXWI3SOP5sNncxojRZHckT2k4ep9kluCeY= Subject key identifier: 85:08:6E:0A:9F:55:16:14:E0:58:2C:C0:BB:DC:E7:4A:5D:81:00:CB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFDD73833E01C7AADC6D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37432031-824b-389e-8e2d-eddf0a49dcd6.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396550 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:dd:73:83:3e:01:c7:aa:dc:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=7680ab00-e4f6-4aa9-bb46-fbf7174768ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:30:ae:a5:69:84:6e:e4:f8:31:d7:4c:42:6c: 77:89:75:c0:a8:a2:f4:88:84:ff:ab:fd:4e:1e:f7: e5:4d:53:40:bd:bd:15:b1:ad:60:ac:e0:ec:f1:33: e2:04:7c:80:d2:8d:08:91:ac:87:96:f6:1b:73:ec: 5e:e9:af:b4:e4:92:b2:22:12:80:c8:e7:53:d2:29: 78:f1:72:dd:dd:14:53:8f:8a:c0:9f:70:02:bd:91: 83:c1:33:58:b5:51:90:52:0b:12:b8:7f:a4:cd:a5: 17:67:02:47:bd:a2:30:26:89:73:ff:bb:38:0b:a6: 0f:a6:78:c3:8f:1b:a6:7e:25:2b:85:e5:a0:29:40: 00:bf:dc:b2:f5:6e:be:24:61:7a:94:a3:0f:c4:44: df:4f:54:40:a0:12:63:fb:e7:b0:04:c3:72:39:b7: 34:72:ab:53:b6:3c:75:5d:c9:56:cb:a4:25:f3:95: 19:76:2d:be:52:44:36:73:ce:d4:cb:eb:f9:fa:10: 55:c1:93:f1:2c:9d:b6:38:3e:b7:a7:aa:1b:93:00: 13:10:65:ad:6c:a4:d4:26:25:08:41:e8:d2:cc:8a: a9:01:2f:22:3f:cb:09:ce:e7:f8:e0:d4:3e:12:9e: 49:14:87:24:66:4c:2b:28:cd:bd:03:0e:97:ef:09: 03:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:08:6E:0A:9F:55:16:14:E0:58:2C:C0:BB:DC:E7:4A:5D:81:00:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37432031-824b-389e-8e2d-eddf0a49dcd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a4:ae:24:cc:7f:ef:05:90:24:89:08:18:c1:ff:31:19:de: 8d:3f:32:6b:08:f7:a0:33:92:0f:f8:69:22:52:89:47:40:67: 85:a5:3e:6f:b9:a8:45:ed:2e:ff:3f:42:c0:ff:b3:63:30:8a: b1:f8:72:8f:2f:1b:6e:68:29:34:f8:e7:3c:a9:db:98:07:e7: d5:47:9a:15:6c:ae:71:1c:14:f7:6b:42:7c:28:99:99:33:16: 10:65:03:9e:50:ab:c2:92:e9:93:3f:8d:91:0d:b5:4d:4d:d9: 35:57:a2:9a:05:a1:eb:fc:52:c0:71:17:f8:c5:c2:91:9c:b3: 56:1c:b1:71:8d:f2:96:13:a4:31:50:8e:83:8f:11:49:fd:61: 9e:c5:05:34:55:5c:b8:48:c6:6b:68:a0:11:67:40:dc:ae:fb: d4:0b:6e:ad:cc:c3:8d:f6:09:c4:26:eb:ee:fd:45:19:ec:4c: 44:cc:9b:ce:b4:d1:fe:53:5f:73:74:09:a4:6e:66:e7:4a:a9: df:f9:54:37:4b:27:56:5b:8e:48:64:07:db:23:66:fd:14:be: fe:75:69:7d:f1:04:49:f1:70:fa:bb:64:3d:43:27:b4:12:17: 57:9f:14:15:9c:1c:ed:6f:ab:63:9c:e7:d3:b0:73:23:b6:57: 03:a3:bf:7a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/91zgz4Bx6rcbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NzY4MGFiMDAtZTRmNi00YWE5LWJiNDYtZmJmNzE3NDc2OGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDCupWmEbuT4MddMQmx3iXXAqKL0iIT/q/1O HvflTVNAvb0Vsa1grODs8TPiBHyA0o0IkayHlvYbc+xe6a+05JKyIhKAyOdT0il4 8XLd3RRTj4rAn3ACvZGDwTNYtVGQUgsSuH+kzaUXZwJHvaIwJolz/7s4C6YPpnjD jxumfiUrheWgKUAAv9yy9W6+JGF6lKMPxETfT1RAoBJj++ewBMNyObc0cqtTtjx1 XclWy6Ql85UZdi2+UkQ2c87Uy+v5+hBVwZPxLJ22OD63p6obkwATEGWtbKTUJiUI QejSzIqpAS8iP8sJzuf44NQ+Ep5JFIckZkwrKM29Aw6X7wkDYQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIUIbgqfVRYU4FgswLvc50pdgQDLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzc0MzIwMzEtODI0Yi0z ODllLThlMmQtZWRkZjBhNDlkY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA3pK4kzH/vBZAkiQgYwf8xGd6NPzJrCPegM5IP+GkiUolHQGeFpT5v uahF7S7/P0LA/7NjMIqx+HKPLxtuaCk0+Oc8qduYB+fVR5oVbK5xHBT3a0J8KJmZ MxYQZQOeUKvCkumTP42RDbVNTdk1V6KaBaHr/FLAcRf4xcKRnLNWHLFxjfKWE6Qx UI6DjxFJ/WGexQU0VVy4SMZraKARZ0DcrvvUC26tzMON9gnEJuvu/UUZ7ExEzJvO tNH+U19zdAmkbmbnSqnf+VQ3SydWW45IZAfbI2b9FL7+dWl98QRJ8XD6u2Q9Qye0 EhdXnxQVnBztb6tjnOfTsHMjtlcDo796 -----END CERTIFICATE-----Generated at Thu Mar 26 11:19:53 2026 by rpki-client