$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4df9ddee-2cbd-3619-9d57-04b286b42dac.roa File: 4df9ddee-2cbd-3619-9d57-04b286b42dac.roa (raw, json) Hash identifier: xEBFZYGorQif95XlagmvfbJNF9nT44EzO3kcKV4PbWE= Subject key identifier: 44:AD:D8:6B:60:52:D7:DE:94:33:A6:11:4E:AC:E1:4F:AA:FC:65:05 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD8117A0AEED4133CE940 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4df9ddee-2cbd-3619-9d57-04b286b42dac.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396596 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d8:11:7a:0a:ee:d4:13:3c:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=f93fa9eb-a9b0-42c5-a450-207ffcef6be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:af:30:a1:3b:c1:0d:3a:2a:9f:cc:61:c8:5b: 27:ba:4d:af:aa:cd:a7:72:b6:af:4a:1a:ab:6a:8d: 3a:e2:d4:f5:5e:4c:4c:65:fc:9d:06:e0:a1:61:58: 96:ce:c5:e5:88:70:e7:04:9f:a3:8a:be:37:1e:9e: 47:e2:b0:be:b3:6a:78:ec:6f:31:8a:86:a7:12:5d: 3c:9b:67:48:32:b8:b1:d9:72:35:1e:79:71:ee:21: 5d:d4:2c:47:2b:22:95:54:cf:1a:91:6d:02:a9:18: 47:36:6a:a6:e7:76:81:37:8a:c3:a9:7f:bc:4c:43: 10:97:88:0e:41:19:b0:bc:ce:ad:d0:66:9a:d9:0e: 07:e4:c7:d8:f3:7b:77:e2:72:16:f0:d7:fe:84:04: 14:e9:bb:05:48:08:15:2c:fe:77:48:7a:3d:42:a6: 2a:8a:88:6c:e8:fc:37:8a:64:6a:6d:b9:98:68:b1: b6:a0:13:e9:38:d4:c9:53:91:fd:fe:57:54:18:c4: 49:91:2f:93:30:06:66:29:50:23:a4:c5:fd:0a:33: 3b:70:d3:84:4d:e2:29:96:6d:0e:8b:14:6a:b3:0b: f8:7f:f6:6a:a1:37:04:3d:85:d0:5e:14:4e:88:ca: 1d:82:84:26:3f:53:56:e0:8d:92:13:f0:d9:f3:f3: b8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AD:D8:6B:60:52:D7:DE:94:33:A6:11:4E:AC:E1:4F:AA:FC:65:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4df9ddee-2cbd-3619-9d57-04b286b42dac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:6e:c9:4f:a5:93:19:79:09:1e:e7:6c:90:94:fa:9a:3c:b6: cb:c3:05:c4:96:5e:dd:6b:66:46:6d:c0:fb:bf:a2:1e:ee:a7: ea:43:68:30:d3:f4:61:41:f4:f9:f8:62:c3:76:6f:dd:89:ff: 81:27:9b:11:89:26:20:58:3c:cb:65:e4:81:77:a2:d7:8b:e5: 18:92:1a:64:1f:32:83:3b:60:e3:f7:45:de:be:49:90:48:31: f8:6b:93:fc:7f:06:48:54:aa:32:56:d2:b9:2b:12:2b:61:30: 6c:79:18:be:f6:e1:50:2d:37:95:ff:dd:73:93:e5:c0:1a:81: 0c:fb:e5:ef:11:c7:18:77:14:bf:0c:46:2a:8c:26:48:3a:36: 09:32:d5:bf:97:f8:52:86:15:66:72:ef:c5:0e:85:9b:03:82: fd:2a:27:c4:24:9e:3b:f1:85:bf:78:05:5f:92:b7:51:20:f4: 97:66:0e:f4:e2:c7:ad:dc:9f:ee:1d:88:f0:3c:bd:70:7e:91: d9:19:55:87:c2:35:41:ba:e2:7f:49:a3:e0:ec:3f:77:09:e9: 36:10:cd:96:ec:2c:23:63:93:05:99:9f:a8:aa:43:12:d9:ab: 03:c7:75:e3:08:9a:1a:e6:fa:e6:ff:2c:e1:1d:44:0b:88:e7: b0:a5:80:95 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9gRegru1BM86UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZjkzZmE5ZWItYTliMC00MmM1LWE0NTAtMjA3ZmZjZWY2YmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK8woTvBDToqn8xhyFsnuk2vqs2ncravShqr ao064tT1XkxMZfydBuChYViWzsXliHDnBJ+jir43Hp5H4rC+s2p47G8xioanEl08 m2dIMrix2XI1Hnlx7iFd1CxHKyKVVM8akW0CqRhHNmqm53aBN4rDqX+8TEMQl4gO QRmwvM6t0Gaa2Q4H5MfY83t34nIW8Nf+hAQU6bsFSAgVLP53SHo9QqYqiohs6Pw3 imRqbbmYaLG2oBPpONTJU5H9/ldUGMRJkS+TMAZmKVAjpMX9CjM7cNOETeIplm0O ixRqswv4f/ZqoTcEPYXQXhROiModgoQmP1NW4I2SE/DZ8/O4+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFESt2GtgUtfelDOmEU6s4U+q/GUFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGRmOWRkZWUtMmNiZC0z NjE5LTlkNTctMDRiMjg2YjQyZGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAsbslPpZMZeQke52yQlPqaPLbLwwXEll7da2ZGbcD7v6Ie7qfqQ2gw 0/RhQfT5+GLDdm/dif+BJ5sRiSYgWDzLZeSBd6LXi+UYkhpkHzKDO2Dj90XevkmQ SDH4a5P8fwZIVKoyVtK5KxIrYTBseRi+9uFQLTeV/91zk+XAGoEM++XvEccYdxS/ DEYqjCZIOjYJMtW/l/hShhVmcu/FDoWbA4L9KifEJJ478YW/eAVfkrdRIPSXZg70 4set3J/uHYjwPL1wfpHZGVWHwjVBuuJ/SaPg7D93Cek2EM2W7CwjY5MFmZ+oqkMS 2asDx3XjCJoa5vrm/yzhHUQLiOewpYCV -----END CERTIFICATE-----Generated at Thu Mar 26 12:57:54 2026 by rpki-client