$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b17fe67-f014-318e-a766-667fa5056720.roa File: 3b17fe67-f014-318e-a766-667fa5056720.roa (raw, json) Hash identifier: ZatavMu8KYBu64rZGFSIR1S+wsXJNl4vNjLdL4uufVI= Subject key identifier: 3B:20:80:DA:48:9B:88:CC:92:A3:16:A0:0F:80:9B:C8:26:1E:AA:0B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFDA3EC97F7D6D63991500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b17fe67-f014-318e-a766-667fa5056720.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396611 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:da:3e:c9:7f:7d:6d:63:99:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=524fcc45-e2c8-4098-a501-4b06a0730856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:16:68:f7:08:70:dc:eb:86:13:ce:a9:5a:85: 5e:35:bc:29:e1:0d:e4:d5:99:03:64:96:f8:b6:04: 45:20:87:4f:1a:ac:d5:7c:7e:a0:61:29:51:1b:2a: 95:8b:f5:bf:ab:e7:97:e7:45:f2:3c:d9:b6:ba:0b: 27:fd:df:9c:fb:92:59:4b:40:54:43:b6:86:e6:48: 65:72:e6:a9:79:61:bf:e9:4c:97:38:00:ce:53:9d: 61:85:d0:e3:b4:66:d4:84:df:b4:eb:6c:2b:ba:02: 53:23:4b:5b:57:02:f5:f3:38:a8:b9:e5:2d:cd:ce: ec:b1:c9:29:7e:44:a2:49:89:d6:b9:78:54:6f:3b: cb:d4:98:b3:26:1c:41:a7:35:6f:16:32:74:91:d7: db:49:ad:0a:2c:74:03:1e:66:0e:98:00:37:aa:a6: f4:32:a5:f8:47:8f:99:fa:37:bc:67:a6:40:12:98: d0:e3:d3:5a:66:d1:26:64:97:5c:40:0f:93:3d:97: d0:61:d1:50:a3:f5:0d:37:65:a1:90:1b:ee:d8:58: 67:cb:96:b4:12:75:cb:87:c7:70:69:f5:b4:49:92: 53:fd:1c:1b:1a:68:60:27:b8:51:8b:70:f2:c7:47: 2b:da:f9:14:ec:d0:3e:24:e8:b5:38:df:f8:c9:97: 31:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:20:80:DA:48:9B:88:CC:92:A3:16:A0:0F:80:9B:C8:26:1E:AA:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b17fe67-f014-318e-a766-667fa5056720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:38:91:94:74:f7:ff:94:eb:84:39:29:89:44:f6:e4:d2:21: 50:fa:cf:b3:8f:c6:17:22:e4:dc:35:e4:d0:35:f4:f9:f5:65: 90:86:af:26:38:b8:dd:e0:c3:b8:5a:5c:f7:50:bc:51:dc:26: 06:8b:1a:ee:c0:79:78:c2:a2:47:8f:01:ee:8f:74:b2:4c:67: 83:da:17:e6:5b:bf:57:03:cd:67:de:90:86:39:87:c3:d1:43: c5:a6:aa:b4:7e:74:35:64:3c:8e:f2:c9:c6:42:6c:48:46:9b: be:40:59:37:77:7d:d9:6b:b9:4c:11:3f:b3:4f:86:b6:36:0f: bb:ef:3d:dd:e5:dc:43:3c:03:1e:b3:60:0a:20:4b:0f:13:f6: b0:ff:42:7b:71:33:d3:08:3d:d4:a9:97:c1:b6:ab:37:42:20: 20:a5:dd:e4:93:6d:e7:dc:ba:5e:60:bb:3c:ea:d2:2c:93:48: 4f:70:93:40:ef:d7:c2:25:17:51:3d:75:d3:06:a4:41:0e:a7: 1b:48:b6:a2:5c:2d:cc:82:1f:d1:ee:a9:66:e5:4d:2d:69:13: 7c:ea:c9:67:41:10:f5:56:a6:d4:31:b7:ef:fd:c9:af:06:42: aa:64:c2:cd:ad:b2:45:43:9f:64:25:e4:c4:40:e1:f6:33:ca: 6d:fe:12:a5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9o+yX99bWOZFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NTI0ZmNjNDUtZTJjOC00MDk4LWE1MDEtNGIwNmEwNzMwODU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRZo9whw3OuGE86pWoVeNbwp4Q3k1ZkDZJb4 tgRFIIdPGqzVfH6gYSlRGyqVi/W/q+eX50XyPNm2ugsn/d+c+5JZS0BUQ7aG5khl cuapeWG/6UyXOADOU51hhdDjtGbUhN+062wrugJTI0tbVwL18zioueUtzc7ssckp fkSiSYnWuXhUbzvL1JizJhxBpzVvFjJ0kdfbSa0KLHQDHmYOmAA3qqb0MqX4R4+Z +je8Z6ZAEpjQ49NaZtEmZJdcQA+TPZfQYdFQo/UNN2WhkBvu2Fhny5a0EnXLh8dw afW0SZJT/RwbGmhgJ7hRi3Dyx0cr2vkU7NA+JOi1ON/4yZcx5QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDsggNpIm4jMkqMWoA+Am8gmHqoLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2IxN2ZlNjctZjAxNC0z MThlLWE3NjYtNjY3ZmE1MDU2NzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAcOJGUdPf/lOuEOSmJRPbk0iFQ+s+zj8YXIuTcNeTQNfT59WWQhq8m OLjd4MO4Wlz3ULxR3CYGixruwHl4wqJHjwHuj3SyTGeD2hfmW79XA81n3pCGOYfD 0UPFpqq0fnQ1ZDyO8snGQmxIRpu+QFk3d33Za7lMET+zT4a2Ng+77z3d5dxDPAMe s2AKIEsPE/aw/0J7cTPTCD3UqZfBtqs3QiAgpd3kk23n3LpeYLs86tIsk0hPcJNA 79fCJRdRPXXTBqRBDqcbSLaiXC3Mgh/R7qlm5U0taRN86slnQRD1VqbUMbfv/cmv BkKqZMLNrbJFQ59kJeTEQOH2M8pt/hKl -----END CERTIFICATE-----Generated at Thu Mar 26 17:54:35 2026 by rpki-client