$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38e76479-d368-3e6a-bc5b-36cc20eaa82b.roa File: 38e76479-d368-3e6a-bc5b-36cc20eaa82b.roa (raw, json) Hash identifier: 17nhhC9YNWJ4uOaI2GpgK61MZLfa3lymCseIMc7NzgQ= Subject key identifier: 3B:37:6D:F5:A6:11:7C:6A:C3:B9:D2:C9:06:A7:B8:51:B1:D3:CC:2B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFE0306A9179D97D8D0E60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38e76479-d368-3e6a-bc5b-36cc20eaa82b.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 397210 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:e0:30:6a:91:79:d9:7d:8d:0e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=1d985dac-79da-4e67-90fc-5d299715ddf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:eb:06:d9:70:f3:0c:7a:7f:14:12:31:46: 27:f3:47:02:e4:19:97:8a:6d:fd:97:5d:85:4f:ce: 55:96:a9:bb:b4:27:06:df:2d:e6:d7:80:e0:55:2b: 65:26:f4:7a:e8:4c:9a:14:d9:4e:03:96:f1:a6:c1: 8f:82:15:a7:bc:75:0d:3b:de:03:6a:1c:7c:bb:82: 7a:e6:b4:fb:0c:82:88:83:25:e9:92:71:80:b6:0c: a5:bb:a4:d1:89:a2:f2:12:9f:7a:12:31:4d:39:d5: e8:1f:b4:7c:e8:a4:e1:b4:26:77:80:79:41:07:55: 50:36:a0:98:87:71:66:1c:bc:11:23:c7:27:38:6d: 4b:98:c3:e7:6f:36:9d:55:37:78:a1:03:6c:e3:be: 52:aa:00:14:2e:5a:90:f8:2b:58:42:8c:c0:4d:6c: 27:77:47:a7:39:3d:17:15:5b:7b:aa:93:0c:06:69: fc:83:cb:33:ba:74:79:f9:24:89:25:12:e0:7e:0c: 86:73:aa:f7:1c:57:fa:5a:ff:30:14:f5:27:fb:fd: 1d:8d:96:b9:4a:d7:43:eb:84:a3:ca:18:81:60:c7: 6b:06:c8:8d:80:54:f3:ab:77:7f:d2:f3:4d:db:1d: 8c:27:ab:dc:73:c9:05:b5:03:4f:cb:c0:08:f7:a7: 76:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:37:6D:F5:A6:11:7C:6A:C3:B9:D2:C9:06:A7:B8:51:B1:D3:CC:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38e76479-d368-3e6a-bc5b-36cc20eaa82b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e7:27:d5:31:3c:b4:3b:cd:30:de:f9:7b:f5:cb:2c:0e:d9: cb:1a:dd:92:77:73:ab:72:d4:88:c2:2a:ac:d1:7e:46:6f:0b: 83:35:44:b2:c2:d5:9e:70:71:c5:49:a9:50:21:bd:d5:9a:3b: 16:ae:63:33:5e:9b:30:22:62:c9:9f:45:3d:12:b3:be:79:10: 05:08:ee:53:f2:08:0b:b2:e9:5f:9c:8d:02:bc:a9:49:82:b4: 9b:6d:d9:33:3c:6f:fe:b4:73:9e:77:00:c8:b6:ab:f3:db:1e: d3:2a:30:a1:39:9f:19:c8:69:8c:32:c1:df:c6:46:78:64:25: 4d:52:e4:50:fc:db:da:20:a0:ce:04:b8:69:95:66:69:96:b6: e0:5f:07:36:cc:39:c9:c0:5b:65:5d:e3:f1:96:a3:e1:ff:1b: 2c:68:0a:02:7a:87:ac:2e:5d:40:43:8a:6c:d3:53:36:e6:e7: f4:4e:73:4a:27:c9:3e:11:19:51:81:7c:0d:44:6f:ef:9d:28: 53:9f:66:04:58:09:d0:39:32:f0:7a:63:31:83:38:3b:79:94: 5c:7c:85:dd:c9:a6:37:e8:8b:fb:a2:e5:0b:f0:a7:80:92:e1: 9a:93:5e:80:e4:1d:18:13:18:9a:ba:84:6a:ce:b3:f2:05:74: de:0f:25:f8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/+AwapF52X2NDmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MWQ5ODVkYWMtNzlkYS00ZTY3LTkwZmMtNWQyOTk3MTVkZGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtarrBtlw8wx6fxQSMUYn80cC5BmXim39l12F T85Vlqm7tCcG3y3m14DgVStlJvR66EyaFNlOA5bxpsGPghWnvHUNO94Dahx8u4J6 5rT7DIKIgyXpknGAtgylu6TRiaLyEp96EjFNOdXoH7R86KThtCZ3gHlBB1VQNqCY h3FmHLwRI8cnOG1LmMPnbzadVTd4oQNs475SqgAULlqQ+CtYQozATWwnd0enOT0X FVt7qpMMBmn8g8szunR5+SSJJRLgfgyGc6r3HFf6Wv8wFPUn+/0djZa5StdD64Sj yhiBYMdrBsiNgFTzq3d/0vNN2x2MJ6vcc8kFtQNPy8AI96d2WQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDs3bfWmEXxqw7nSyQanuFGx08wrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzhlNzY0NzktZDM2OC0z ZTZhLWJjNWItMzZjYzIwZWFhODJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA15yfVMTy0O80w3vl79cssDtnLGt2Sd3OrctSIwiqs0X5GbwuDNUSy wtWecHHFSalQIb3VmjsWrmMzXpswImLJn0U9ErO+eRAFCO5T8ggLsulfnI0CvKlJ grSbbdkzPG/+tHOedwDItqvz2x7TKjChOZ8ZyGmMMsHfxkZ4ZCVNUuRQ/NvaIKDO BLhplWZplrbgXwc2zDnJwFtlXePxlqPh/xssaAoCeoesLl1AQ4ps01M25uf0TnNK J8k+ERlRgXwNRG/vnShTn2YEWAnQOTLwemMxgzg7eZRcfIXdyaY36Iv7ouUL8KeA kuGak16A5B0YExiauoRqzrPyBXTeDyX4 -----END CERTIFICATE-----Generated at Thu Mar 26 16:00:40 2026 by rpki-client