
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/509d4b5b-4f50-39ba-a1bc-64325743d7a5.roa
File: 509d4b5b-4f50-39ba-a1bc-64325743d7a5.roa (raw, json)
Hash identifier: C4XhuY2ZL4GOHRTT7lkAHRm3bmFiTzwGm5B0WKt9bns=
Subject key identifier: 0D:6F:62:63:59:D3:4F:34:46:A6:3A:A5:28:1C:C7:F0:92:BF:99:37
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584D3DFFDE79E6023C7E3F34C600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/509d4b5b-4f50-39ba-a1bc-64325743d7a5.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 396572
IP address blocks: 209.112.127.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:de:79:e6:02:3c:7e:3f:34:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=fa6e795a-d83c-42b2-9b34-d160a9689bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5c:e4:6e:62:1c:74:66:ce:ca:f9:65:c4:8f:
72:20:0e:9a:aa:fd:b9:7e:cd:35:72:ea:10:a5:8a:
65:45:98:b6:d3:39:d9:f1:24:cb:08:24:fb:3b:20:
37:2a:51:76:5d:fd:e2:0d:10:a6:6d:a9:fb:ad:c5:
ad:36:39:1d:7a:23:b7:1c:36:0e:c2:ce:aa:96:25:
2e:2f:45:91:b0:e7:9b:2b:83:32:49:4e:11:bb:26:
b1:cb:ce:dc:58:ed:be:21:41:4c:6e:d3:69:73:d5:
b4:f0:c9:ed:fd:ea:b5:eb:63:fc:88:37:95:41:91:
bf:fe:b0:23:11:bb:17:01:b8:33:d3:30:b2:91:04:
05:2f:48:45:34:36:55:d3:5d:9b:35:51:88:6c:9c:
3b:b8:df:bf:9a:6f:e9:b1:ba:fe:26:30:78:c8:75:
20:69:26:55:86:8a:17:ed:de:be:9a:5e:1a:f1:7c:
85:15:dc:61:15:e0:3e:78:92:25:8a:5a:bb:48:95:
be:46:10:53:54:5c:6c:52:7d:c2:92:33:3d:24:b0:
b6:30:49:ce:9e:c8:6a:16:3e:4d:d5:87:84:d4:96:
39:e8:15:6b:19:a8:e2:5b:aa:e6:e8:b9:49:88:84:
21:54:da:fe:d7:5c:2a:dc:09:72:5a:c4:c1:b1:a2:
e2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6F:62:63:59:D3:4F:34:46:A6:3A:A5:28:1C:C7:F0:92:BF:99:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/509d4b5b-4f50-39ba-a1bc-64325743d7a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:c5:bc:41:4f:e3:2d:bc:e3:b9:b5:df:69:da:a3:c7:95:3d:
c4:d5:61:75:16:c6:63:ee:9e:1e:9e:47:af:a6:00:c1:f7:30:
b2:dd:ec:cf:c6:78:2b:ba:84:65:0e:df:cc:6a:02:a7:66:f8:
53:fd:33:e4:0b:92:d6:c9:95:4a:f4:d3:42:9c:6a:b0:6a:b8:
a4:94:ea:26:08:21:67:13:f5:fd:b9:09:13:38:fa:23:18:e5:
7d:c5:a0:8e:d7:cb:64:ba:fd:cc:48:06:ba:bd:fd:60:4a:39:
2a:b9:82:c6:2c:f6:d0:1b:eb:e5:b9:4c:89:58:7c:11:ed:c0:
25:8a:60:49:23:87:ba:e5:46:26:8c:32:05:d4:3b:b5:07:55:
cf:a4:a8:1b:7a:af:66:21:2a:cc:aa:9f:cb:bf:ac:03:e1:de:
e0:b1:fe:3a:39:94:d2:c8:2d:ad:8f:9c:79:b0:82:1e:fd:ff:
68:94:60:af:55:b4:44:9e:a8:60:4e:7e:4a:12:b9:f2:08:c6:
09:80:f3:b7:00:32:52:1c:03:ba:16:3c:ce:98:8f:44:d5:26:
58:93:3b:e4:27:3f:01:05:03:94:12:9d:19:b5:35:18:e3:ee:
a1:e5:5c:93:d2:55:30:ab:f9:59:80:34:c8:51:4a:00:fb:43:
b3:72:c6:56
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9555gI8fj80xgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
ZmE2ZTc5NWEtZDgzYy00MmIyLTliMzQtZDE2MGE5Njg5YmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lzkbmIcdGbOyvllxI9yIA6aqv25fs01cuoQ
pYplRZi20znZ8STLCCT7OyA3KlF2Xf3iDRCmban7rcWtNjkdeiO3HDYOws6qliUu
L0WRsOebK4MySU4Ruyaxy87cWO2+IUFMbtNpc9W08Mnt/eq162P8iDeVQZG//rAj
EbsXAbgz0zCykQQFL0hFNDZV012bNVGIbJw7uN+/mm/psbr+JjB4yHUgaSZVhooX
7d6+ml4a8XyFFdxhFeA+eJIlilq7SJW+RhBTVFxsUn3CkjM9JLC2MEnOnshqFj5N
1YeE1JY56BVrGajiW6rm6LlJiIQhVNr+11wq3AlyWsTBsaLirQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFA1vYmNZ0080RqY6pSgcx/CSv5k3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTA5ZDRiNWItNGY1MC0z
OWJhLWExYmMtNjQzMjU3NDNkN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAkxbxBT+MtvOO5td9p2qPHlT3E1WF1FsZj7p4enkevpgDB9zCy3ezP
xngruoRlDt/MagKnZvhT/TPkC5LWyZVK9NNCnGqwariklOomCCFnE/X9uQkTOPoj
GOV9xaCO18tkuv3MSAa6vf1gSjkquYLGLPbQG+vluUyJWHwR7cAlimBJI4e65UYm
jDIF1Du1B1XPpKgbeq9mISrMqp/Lv6wD4d7gsf46OZTSyC2tj5x5sIIe/f9olGCv
VbREnqhgTn5KErnyCMYJgPO3ADJSHAO6FjzOmI9E1SZYkzvkJz8BBQOUEp0ZtTUY
4+6h5VyT0lUwq/lZgDTIUUoA+0OzcsZW
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:53 2026 by rpki-client