$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49b878ae-cfbb-33d6-a846-5101c41a6394.roa File: 49b878ae-cfbb-33d6-a846-5101c41a6394.roa (raw, json) Hash identifier: 1tm0PMKIdGNHqrLMcYQgJMl0c+sc8WRRtAnJK74NLOk= Subject key identifier: 2E:F3:54:61:DD:47:B4:29:65:0B:18:DC:51:2C:E3:F7:51:B7:18:17 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFDC8E2E54A62E53836FE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49b878ae-cfbb-33d6-a846-5101c41a6394.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396603 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:dc:8e:2e:54:a6:2e:53:83:6f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=8f6e1e6e-19d1-420c-8694-e51346bc2bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:59:1c:c9:50:27:79:71:9d:9f:ce:8c:21:3a: 19:fa:b5:40:cb:35:1a:d9:14:bc:e9:14:7a:f9:7c: 56:84:72:bb:09:87:a3:48:96:d3:4b:aa:ad:8b:3f: a9:82:e7:63:48:51:8d:62:d3:2c:7d:c4:ea:c7:cb: eb:10:97:7a:1d:4c:be:7d:75:9b:77:68:04:35:d4: 33:31:40:98:0a:78:e8:d3:86:13:d1:3d:e5:68:91: e1:84:e2:9f:a5:46:e2:60:53:d5:6b:75:b0:33:15: 5c:b9:2a:0a:11:af:e8:d1:0c:ec:0d:d7:02:20:85: 95:56:2c:1d:71:2f:f7:94:b7:52:19:b5:38:6e:ad: 43:31:1e:07:c7:6d:25:7f:6b:dd:5f:f0:84:db:4f: 9e:b1:70:d4:4c:94:de:0b:65:0a:38:6e:41:1c:2f: 47:9c:2f:36:af:59:ae:a1:44:e4:01:67:17:ae:e7: 85:d5:db:47:8a:e0:cf:3d:6d:7f:27:52:8e:65:11: 6d:63:54:69:f0:76:a9:88:c7:d7:7b:41:be:ad:f5: 17:b0:02:a4:48:72:37:90:2e:2f:71:cd:fa:27:65: 40:29:bb:4a:9f:e1:23:14:62:44:aa:09:81:59:6b: 3d:bc:41:28:f7:0b:6a:0e:99:7a:8d:af:13:5b:fc: 45:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F3:54:61:DD:47:B4:29:65:0B:18:DC:51:2C:E3:F7:51:B7:18:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49b878ae-cfbb-33d6-a846-5101c41a6394.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:60:7b:38:7d:13:6a:01:eb:7f:0f:54:74:30:c1:97:70:23: 71:d3:f1:cb:3f:52:e3:0a:9e:a1:8b:8e:00:7f:f4:a3:0e:33: 59:ab:d2:a3:ed:7c:1d:60:50:37:bc:72:04:5e:e1:6b:2d:79: 7d:5e:01:4f:65:d5:0e:29:9b:60:54:0a:e0:56:e1:5f:80:81: b7:c9:8f:dc:b2:48:c9:5b:fd:20:ab:0e:09:60:17:16:37:dc: 4b:a9:a5:ff:03:09:eb:31:ee:88:10:c9:47:a2:f8:78:17:eb: a1:7a:6e:43:7d:58:b6:4b:cb:6d:ab:41:0d:0e:e1:57:87:1a: 29:e2:ec:d5:c3:aa:b7:b0:7e:40:a0:f4:ca:ce:20:3c:a6:f7: 1c:86:b8:1e:e0:13:3a:c9:33:b5:f8:15:cb:19:5a:f0:56:eb: 4b:13:b6:29:41:eb:c7:af:d0:f2:3a:da:a6:6c:29:88:1b:9d: 83:0a:5f:1b:da:9d:26:4d:88:f4:bc:58:84:c4:ea:bb:e1:dc: ea:68:d0:c8:61:86:c9:13:d8:d4:6a:2a:e4:19:d0:56:0c:75: 36:46:79:8f:2b:53:12:37:1b:84:87:09:fd:3b:5a:a4:0f:c7: ae:26:f1:e5:fa:19:ba:97:56:ea:ce:e9:d5:58:4c:75:3d:c7: af:db:dc:e2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9yOLlSmLlODb+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OGY2ZTFlNmUtMTlkMS00MjBjLTg2OTQtZTUxMzQ2YmMyYmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1kcyVAneXGdn86MIToZ+rVAyzUa2RS86RR6 +XxWhHK7CYejSJbTS6qtiz+pgudjSFGNYtMsfcTqx8vrEJd6HUy+fXWbd2gENdQz MUCYCnjo04YT0T3laJHhhOKfpUbiYFPVa3WwMxVcuSoKEa/o0QzsDdcCIIWVViwd cS/3lLdSGbU4bq1DMR4Hx20lf2vdX/CE20+esXDUTJTeC2UKOG5BHC9HnC82r1mu oUTkAWcXrueF1dtHiuDPPW1/J1KOZRFtY1Rp8HapiMfXe0G+rfUXsAKkSHI3kC4v cc36J2VAKbtKn+EjFGJEqgmBWWs9vEEo9wtqDpl6ja8TW/xF0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC7zVGHdR7QpZQsY3FEs4/dRtxgXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDliODc4YWUtY2ZiYi0z M2Q2LWE4NDYtNTEwMWM0MWE2Mzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBAYHs4fRNqAet/D1R0MMGXcCNx0/HLP1LjCp6hi44Af/SjDjNZq9Kj 7XwdYFA3vHIEXuFrLXl9XgFPZdUOKZtgVArgVuFfgIG3yY/cskjJW/0gqw4JYBcW N9xLqaX/AwnrMe6IEMlHovh4F+uhem5DfVi2S8ttq0ENDuFXhxop4uzVw6q3sH5A oPTKziA8pvcchrge4BM6yTO1+BXLGVrwVutLE7YpQevHr9DyOtqmbCmIG52DCl8b 2p0mTYj0vFiExOq74dzqaNDIYYbJE9jUairkGdBWDHU2RnmPK1MSNxuEhwn9O1qk D8euJvHl+hm6l1bqzunVWEx1Pcev29zi -----END CERTIFICATE-----Generated at Thu Mar 26 20:27:51 2026 by rpki-client