$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f4a9125-8f6d-3a3e-ac3f-42ecf44f6087.roa File: 3f4a9125-8f6d-3a3e-ac3f-42ecf44f6087.roa (raw, json) Hash identifier: Js6byED+ayyuEY2rQRNhplk52PooZU7aQdCdnchfYSQ= Subject key identifier: A2:B3:58:06:73:28:9B:A3:74:A0:83:F5:DD:F8:E1:D9:A6:DB:2D:42 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFDEBBFF3B3E71203C9D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f4a9125-8f6d-3a3e-ac3f-42ecf44f6087.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 397198 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:de:bb:ff:3b:3e:71:20:3c:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=7b8f6dae-027c-41cd-96c5-d95c8f637b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3f:ac:60:67:b7:4d:de:7a:e2:a5:0b:5b:ed: a7:6c:29:fa:f2:19:84:99:b5:5f:00:85:40:5a:48: e6:8c:99:13:51:1d:31:94:5e:cd:3e:a9:65:02:7e: 36:44:f9:e3:76:0d:a5:4b:e4:98:8f:1b:00:df:db: cf:6e:dd:f0:fa:6f:26:90:93:81:44:50:a3:0e:79: 3d:86:26:45:df:48:48:94:3d:e4:c0:d7:45:fe:af: 5a:50:3c:94:10:20:d5:48:d5:7e:24:5f:d7:0a:ba: cf:c7:37:35:9b:f0:50:f5:80:c3:3b:ea:96:e4:b7: 63:20:ab:03:67:6d:54:d8:a1:02:98:d3:81:ec:ca: 41:ff:72:c6:51:09:fa:bd:e1:db:40:4b:0f:56:31: 93:e6:2d:63:74:5f:77:91:56:ee:2a:ea:51:8c:3f: 57:7d:47:00:68:c9:3a:7a:71:4e:29:42:6d:a9:8e: 39:32:5f:27:a2:ec:5a:6d:3b:28:48:6c:f5:de:71: b1:56:ed:b2:28:99:f4:00:52:ed:1e:eb:0e:b9:b9: a1:ab:ed:58:e9:53:f9:65:dc:a3:d6:e4:7d:4b:01: 05:dd:ff:e1:34:d8:a0:2a:ac:5f:11:58:bf:ca:b1: e8:0c:f1:cc:e6:ba:fb:0b:ee:c7:d2:67:6d:4f:3e: a0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B3:58:06:73:28:9B:A3:74:A0:83:F5:DD:F8:E1:D9:A6:DB:2D:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f4a9125-8f6d-3a3e-ac3f-42ecf44f6087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:cb:a1:2d:5d:41:be:15:08:e0:98:bb:91:da:8b:6d:24:1c: 8e:e1:5d:0a:fb:7a:29:22:03:97:53:f4:95:73:86:65:7a:ad: 7f:92:f5:7c:2b:aa:df:4f:4d:e9:bb:c3:ad:16:84:ed:21:ad: 3d:31:69:4d:b3:26:e7:cc:77:dc:5b:60:57:9b:fc:c6:64:69: 8a:32:86:eb:36:f6:18:d1:a8:40:3c:db:71:e8:4d:c8:7e:64: 4f:01:c5:41:94:32:e6:9e:04:ee:05:66:5b:d9:e4:9a:87:24: a7:f4:df:f1:3d:c2:e7:11:be:9c:4a:10:60:de:b1:40:fe:48: cb:9a:09:27:36:77:6b:42:41:c8:c0:d2:d2:23:53:8e:c7:ad: 4b:d1:83:69:3b:96:95:4e:03:07:03:88:6c:08:20:c6:90:55: f1:90:97:98:d9:ef:5d:07:a6:2f:28:dd:2b:39:e5:38:16:1e: 70:2e:82:6d:e9:ef:7c:ce:4e:ed:bb:db:0f:1b:f8:25:90:f3: 21:5e:70:9f:c6:33:6f:be:67:99:e1:8d:2a:6f:a0:63:a2:77: 1a:6a:04:05:de:fe:82:9f:9c:ba:4f:14:56:94:6b:60:e5:1f: 7c:34:a5:d5:4b:40:a5:07:5e:51:ba:cc:bf:cd:4c:4e:2d:91: f8:a6:a5:dd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/967/zs+cSA8nYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk N2I4ZjZkYWUtMDI3Yy00MWNkLTk2YzUtZDk1YzhmNjM3YjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D+sYGe3Td564qULW+2nbCn68hmEmbVfAIVA WkjmjJkTUR0xlF7NPqllAn42RPnjdg2lS+SYjxsA39vPbt3w+m8mkJOBRFCjDnk9 hiZF30hIlD3kwNdF/q9aUDyUECDVSNV+JF/XCrrPxzc1m/BQ9YDDO+qW5LdjIKsD Z21U2KECmNOB7MpB/3LGUQn6veHbQEsPVjGT5i1jdF93kVbuKupRjD9XfUcAaMk6 enFOKUJtqY45Ml8nouxabTsoSGz13nGxVu2yKJn0AFLtHusOubmhq+1Y6VP5Zdyj 1uR9SwEF3f/hNNigKqxfEVi/yrHoDPHM5rr7C+7H0mdtTz6gNQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKKzWAZzKJujdKCD9d344dmm2y1CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2Y0YTkxMjUtOGY2ZC0z YTNlLWFjM2YtNDJlY2Y0NGY2MDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQByy6EtXUG+FQjgmLuR2ottJByO4V0K+3opIgOXU/SVc4Zleq1/kvV8 K6rfT03pu8OtFoTtIa09MWlNsybnzHfcW2BXm/zGZGmKMobrNvYY0ahAPNtx6E3I fmRPAcVBlDLmngTuBWZb2eSahySn9N/xPcLnEb6cShBg3rFA/kjLmgknNndrQkHI wNLSI1OOx61L0YNpO5aVTgMHA4hsCCDGkFXxkJeY2e9dB6YvKN0rOeU4Fh5wLoJt 6e98zk7tu9sPG/glkPMhXnCfxjNvvmeZ4Y0qb6BjoncaagQF3v6Cn5y6TxRWlGtg 5R98NKXVS0ClB15Rusy/zUxOLZH4pqXd -----END CERTIFICATE-----Generated at Thu Mar 26 21:48:52 2026 by rpki-client