
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ecd9ebd-5aca-3470-b0e7-3d749e98d3de.roa
File: 3ecd9ebd-5aca-3470-b0e7-3d749e98d3de.roa (raw, json)
Hash identifier: WBUFzaQbH4PokzF4rbMKuQb12eQPotGKmFUMxwuXdWE=
Subject key identifier: 35:24:3C:21:3B:B7:EE:6F:43:99:2A:11:D6:21:5A:76:C6:FF:BD:F0
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D3DFFD6087FFDB2504FD14A40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ecd9ebd-5aca-3470-b0e7-3d749e98d3de.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 396540
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:d6:08:7f:fd:b2:50:4f:d1:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=e4bd5a9b-5c1c-4044-8c62-b83222976716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:ae:8e:96:17:e7:a5:5c:72:a5:04:6a:e4:
25:8a:a1:ad:37:93:d9:5c:6e:e6:c4:7b:c1:f6:c0:
78:a4:b5:05:5f:5f:ee:e6:ff:1f:29:31:7b:af:d7:
dc:6a:cc:47:97:f7:32:37:e7:14:5f:5a:89:f6:f3:
aa:97:88:df:9b:1c:5e:22:e1:e6:64:ca:6d:22:80:
fd:56:de:12:5c:29:1f:ec:e5:76:49:2b:21:28:95:
79:22:7a:d0:31:79:bb:15:12:ac:5d:f8:9e:77:a1:
0a:ba:b2:f5:74:2f:21:56:46:b9:8a:0e:42:9b:6a:
2a:eb:a7:22:0d:10:40:91:65:df:c0:98:46:ef:36:
fb:5e:51:ad:48:77:ac:ca:9f:bd:b0:0b:46:9a:30:
23:9c:52:d6:ea:4a:30:81:a8:81:f2:b4:f3:80:fb:
1e:a5:a1:fe:d5:e4:ed:60:3e:b8:54:e8:d5:d9:9f:
45:8b:41:8a:fb:18:61:44:7e:08:24:97:0f:6b:98:
78:56:ef:8a:19:c5:24:6d:dc:d4:9b:4a:08:3b:f8:
ab:1e:1d:5f:b7:09:79:ab:33:c0:10:e5:98:fd:e7:
d6:d8:ed:00:b2:46:d5:63:8b:e6:34:49:58:f5:04:
50:9c:6f:e9:d5:ba:dc:a2:d0:df:fb:ee:bd:07:1b:
d2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:24:3C:21:3B:B7:EE:6F:43:99:2A:11:D6:21:5A:76:C6:FF:BD:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ecd9ebd-5aca-3470-b0e7-3d749e98d3de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:4f:6b:17:1e:14:65:dc:17:f4:60:63:c7:c6:e3:89:f6:ad:
1d:a8:f7:11:d0:7f:d4:8a:a1:e3:df:48:88:45:80:04:5a:4a:
93:28:32:7d:42:16:1f:73:8f:1d:93:91:35:35:89:a0:31:af:
40:d3:84:ad:44:a0:a7:a6:e2:fe:28:55:0a:a7:f5:95:03:99:
46:24:d3:aa:3c:e5:42:b7:aa:a2:82:d7:99:80:85:57:dc:c6:
17:bd:2f:1b:ab:5d:6e:fe:4e:34:a4:1f:bb:af:cd:d4:f8:e7:
c3:9f:60:bb:14:e1:32:bd:0d:d1:3a:25:06:27:87:89:f2:4c:
2f:9a:c4:b8:3a:05:b8:e7:ab:9d:cd:56:48:f5:0e:14:d9:bb:
9a:77:8c:1e:f0:06:fa:58:d8:72:6a:18:19:de:a0:3a:82:d3:
4a:1d:0f:1a:4f:88:42:06:69:1f:bc:bb:ce:60:96:ae:73:8d:
1d:9c:e3:56:1c:53:99:b1:ce:c3:6a:0e:f1:ce:a6:0c:85:b9:
b5:b8:78:7f:f9:6a:be:a2:57:8d:88:ef:e4:39:30:08:6c:f8:
87:cd:94:10:cd:34:96:3b:9d:31:8f:25:3f:0e:c5:7c:9d:27:
e3:49:92:4d:26:7d:de:7f:bd:56:a0:3b:aa:e8:23:4b:6a:59:
40:09:9e:cd
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9YIf/2yUE/RSkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
ZTRiZDVhOWItNWMxYy00MDQ0LThjNjItYjgzMjIyOTc2NzE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxyujpYX56VccqUEauQliqGtN5PZXG7mxHvB
9sB4pLUFX1/u5v8fKTF7r9fcasxHl/cyN+cUX1qJ9vOql4jfmxxeIuHmZMptIoD9
Vt4SXCkf7OV2SSshKJV5InrQMXm7FRKsXfied6EKurL1dC8hVka5ig5Cm2oq66ci
DRBAkWXfwJhG7zb7XlGtSHesyp+9sAtGmjAjnFLW6kowgaiB8rTzgPsepaH+1eTt
YD64VOjV2Z9Fi0GK+xhhRH4IJJcPa5h4Vu+KGcUkbdzUm0oIO/irHh1ftwl5qzPA
EOWY/efW2O0AskbVY4vmNElY9QRQnG/p1brcotDf++69BxvSZwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDUkPCE7t+5vQ5kqEdYhWnbG/73wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2VjZDllYmQtNWFjYS0z
NDcwLWIwZTctM2Q3NDllOThkM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBfT2sXHhRl3Bf0YGPHxuOJ9q0dqPcR0H/UiqHj30iIRYAEWkqTKDJ9
QhYfc48dk5E1NYmgMa9A04StRKCnpuL+KFUKp/WVA5lGJNOqPOVCt6qigteZgIVX
3MYXvS8bq11u/k40pB+7r83U+OfDn2C7FOEyvQ3ROiUGJ4eJ8kwvmsS4OgW456ud
zVZI9Q4U2buad4we8Ab6WNhyahgZ3qA6gtNKHQ8aT4hCBmkfvLvOYJauc40dnONW
HFOZsc7Dag7xzqYMhbm1uHh/+Wq+oleNiO/kOTAIbPiHzZQQzTSWO50xjyU/DsV8
nSfjSZJNJn3ef71WoDuq6CNLallACZ7N
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:58 2026 by rpki-client