$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3dc95ed3-1e40-32f1-a1e6-3033ff88e4ee.roa File: 3dc95ed3-1e40-32f1-a1e6-3033ff88e4ee.roa (raw, json) Hash identifier: assxc2XfY/8ZPtV1cWZevt6sVHpM8DIDhIybPh+wElM= Subject key identifier: 1B:B8:FF:FE:41:F6:09:1F:41:5C:97:1B:33:63:08:FF:50:4E:D8:65 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFDA8F8720D1A3BE30F980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3dc95ed3-1e40-32f1-a1e6-3033ff88e4ee.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396608 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:da:8f:87:20:d1:a3:be:30:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=39eb71e2-c44a-4cc6-89d7-cbcd9d65ad48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7b:48:ea:0a:ad:23:ee:74:81:12:cf:b7:97: 50:13:80:88:88:a3:5e:9d:7a:e1:bc:a0:a2:2c:62: d5:42:d2:dc:82:17:8e:f2:52:22:42:db:47:98:bb: 11:71:6c:da:26:df:40:e1:ad:4d:a4:71:86:1f:bd: 6c:dc:5f:b2:17:90:48:e6:9f:9e:e0:22:02:8f:2b: 10:02:46:8c:22:95:3c:09:dd:29:b0:50:23:0d:88: 4f:78:67:b1:50:6f:69:89:62:ea:82:0f:2e:7d:d3: b8:a8:82:a7:50:35:28:e7:76:77:64:ed:ea:1a:61: d6:13:5e:bd:6d:6e:49:d7:57:85:a8:83:34:48:2d: 4a:a5:2b:65:63:44:0e:c0:1b:ad:59:d2:ec:e0:45: 5d:2e:4d:62:01:3d:aa:c5:f9:56:f8:d2:24:02:c6: 46:37:a2:c4:ec:e6:1b:a5:a8:39:4f:4f:01:f2:e0: 95:a3:68:86:74:18:ca:7c:64:cc:cc:8f:26:da:87: 9c:cd:22:73:3b:80:60:af:9e:d2:20:89:20:b2:a3: 32:14:d7:e3:b5:60:f1:1d:d8:3e:df:78:e0:0d:30: 0a:87:8a:85:bc:93:0b:e5:1b:f2:46:e6:bb:51:e8: 17:15:45:2d:1a:7d:18:8a:14:c8:06:c8:90:d6:0a: 99:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B8:FF:FE:41:F6:09:1F:41:5C:97:1B:33:63:08:FF:50:4E:D8:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3dc95ed3-1e40-32f1-a1e6-3033ff88e4ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:fd:91:ed:c6:f8:d1:ba:f3:d3:04:a0:2a:d2:ff:8d:8d:4b: 35:4a:71:cb:fb:15:9f:37:7a:73:ad:56:54:b7:b9:f6:df:35: cf:14:02:18:70:50:de:98:9a:51:69:08:c1:4a:fd:2d:29:54: c6:47:f8:e5:3e:11:a3:9c:4e:13:58:18:c2:cf:26:cb:45:54: f8:80:3d:92:f6:6e:07:a7:a8:37:f6:78:22:0c:53:47:78:2a: 4b:fd:49:bd:17:b1:28:a8:8f:2e:8b:88:90:f6:4c:71:c3:de: 93:92:e9:be:21:e7:68:2b:b0:3b:69:97:47:00:c9:ec:cd:3c: ec:c6:f7:77:3d:8c:9a:e5:72:59:36:2b:41:ee:3b:b2:e7:f3: 83:7f:85:fb:cd:f2:21:7b:6a:a9:14:fe:22:e4:20:57:79:49: e8:aa:ef:23:13:a8:5d:90:66:bb:a8:ff:0b:d6:f3:8a:37:d2: 2f:0c:14:a3:e8:3e:53:a2:ab:9d:1b:ca:ca:c7:6e:49:fa:ce: 47:ca:2b:60:15:c1:49:81:e3:91:55:28:56:7c:0b:5e:5c:54: da:62:59:b8:67:71:13:a3:dd:6b:1a:ee:27:17:84:57:ff:64: 93:df:d7:6d:38:54:14:3a:6a:de:ec:fa:2d:51:f4:b8:fb:ec: ec:0f:70:8e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9qPhyDRo74w+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MzllYjcxZTItYzQ0YS00Y2M2LTg5ZDctY2JjZDlkNjVhZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHtI6gqtI+50gRLPt5dQE4CIiKNenXrhvKCi LGLVQtLcgheO8lIiQttHmLsRcWzaJt9A4a1NpHGGH71s3F+yF5BI5p+e4CICjysQ AkaMIpU8Cd0psFAjDYhPeGexUG9piWLqgg8ufdO4qIKnUDUo53Z3ZO3qGmHWE169 bW5J11eFqIM0SC1KpStlY0QOwButWdLs4EVdLk1iAT2qxflW+NIkAsZGN6LE7OYb pag5T08B8uCVo2iGdBjKfGTMzI8m2oeczSJzO4Bgr57SIIkgsqMyFNfjtWDxHdg+ 33jgDTAKh4qFvJML5RvyRua7UegXFUUtGn0YihTIBsiQ1gqZ6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBu4//5B9gkfQVyXGzNjCP9QTthlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2RjOTVlZDMtMWU0MC0z MmYxLWExZTYtMzAzM2ZmODhlNGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCC/ZHtxvjRuvPTBKAq0v+NjUs1SnHL+xWfN3pzrVZUt7n23zXPFAIY cFDemJpRaQjBSv0tKVTGR/jlPhGjnE4TWBjCzybLRVT4gD2S9m4Hp6g39ngiDFNH eCpL/Um9F7EoqI8ui4iQ9kxxw96Tkum+IedoK7A7aZdHAMnszTzsxvd3PYya5XJZ NitB7juy5/ODf4X7zfIhe2qpFP4i5CBXeUnoqu8jE6hdkGa7qP8L1vOKN9IvDBSj 6D5ToqudG8rKx25J+s5HyitgFcFJgeORVShWfAteXFTaYlm4Z3ETo91rGu4nF4RX /2ST39dtOFQUOmre7PotUfS4++zsD3CO -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:51 2026 by rpki-client