$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa File: 525cb902-d047-345f-b98a-33a46136085b.roa (raw, json) Hash identifier: QGTYGT9NamR7qqwEbiTsRculq6v+8pMKYgAqt40ZUzY= Subject key identifier: 33:7A:C9:31:91:34:7B:CA:18:76:24:18:1B:1E:1C:51:5E:5C:4D:CE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFE0D39755826CE4EE4D60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396578 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:e0:d3:97:55:82:6c:e4:ee:4d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=396e1023-8466-4d20-a376-7e6964517dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b6:40:cb:74:51:28:31:fa:2e:6f:b8:3b:12: ce:09:40:67:3c:35:cd:e6:bb:eb:3e:6c:f8:85:ec: 2e:65:e0:d4:bb:3a:9b:99:8e:0f:ea:fe:72:21:4b: 64:de:0f:35:cd:3d:b2:f8:73:f4:0e:16:6b:b9:37: ea:40:26:a8:73:b3:de:26:b7:23:2a:f3:3b:1e:01: ab:59:f9:6a:0d:17:32:c5:e2:71:1e:7b:dd:85:60: 56:9a:16:2d:00:95:f2:64:47:8d:99:b6:e6:a3:0f: 5e:4d:c2:64:53:79:fa:bb:cb:44:c1:9c:d1:f4:e8: 8e:6b:a6:07:2c:60:98:9b:a9:e1:b5:3f:e0:4b:d2: 1e:4d:28:77:01:ff:aa:f9:bb:29:fb:19:59:2f:93: 1f:fc:8b:7d:00:82:56:98:14:aa:64:1a:56:b0:f4: f6:79:0d:6f:95:2e:8c:df:f5:33:62:33:fe:dc:0b: 9f:ff:1f:f7:bc:06:37:5f:48:23:af:fb:f4:32:21: c1:34:53:f6:e6:e3:13:99:82:7d:e3:8d:39:68:4e: 7e:f6:82:d0:ab:bb:d5:df:76:2e:68:45:5a:9d:1c: 3c:c8:a8:55:c2:f8:e4:10:c5:49:80:b5:9e:1e:62: 84:a4:39:81:e9:64:f5:ad:03:15:f5:18:24:f0:98: 2c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7A:C9:31:91:34:7B:CA:18:76:24:18:1B:1E:1C:51:5E:5C:4D:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:4f:16:02:b2:ba:5b:99:bf:36:15:96:76:f7:9c:e9:a6:63: 82:0c:9b:03:83:b2:b7:9e:8b:3c:f4:85:e6:08:e6:71:74:fb: c7:11:89:cb:69:7f:60:b9:00:aa:67:4b:12:59:9e:51:d0:14: 96:1b:28:b6:25:78:88:bd:0a:19:f4:1b:7a:61:13:51:64:6c: 4c:d4:e5:0a:dc:1b:8f:d3:2b:5d:9e:2a:91:b4:cc:02:06:7a: 96:54:3c:2c:a5:12:a7:60:28:52:f7:e7:7e:7e:9d:6e:11:52: 9c:0b:2d:8d:81:a6:c6:55:e5:f8:2f:7f:7a:bf:06:b0:5c:11: 35:16:98:e5:c8:7f:97:0e:76:c7:7b:8b:72:ba:b4:03:97:89: ec:4f:e6:8d:66:5c:41:de:4f:b2:d3:7c:2e:dc:c6:41:90:42: cf:a8:40:4a:1e:3d:46:59:b8:53:05:be:18:ac:15:b8:a3:52: c4:16:85:8b:16:76:65:26:d6:07:79:27:e4:54:91:b6:4a:35: 34:6e:08:24:1d:75:4f:ee:40:b9:ab:e7:d8:3b:5d:76:d2:5b: 18:58:a4:d1:22:b8:c9:15:67:b1:59:97:f8:1b:13:a8:02:a5: 3f:9c:ca:cb:93:84:dd:7b:45:0e:6e:80:dc:90:6a:4d:01:3d: f4:72:d0:b3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/+DTl1WCbOTuTWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk Mzk2ZTEwMjMtODQ2Ni00ZDIwLWEzNzYtN2U2OTY0NTE3ZGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7ZAy3RRKDH6Lm+4OxLOCUBnPDXN5rvrPmz4 hewuZeDUuzqbmY4P6v5yIUtk3g81zT2y+HP0DhZruTfqQCaoc7PeJrcjKvM7HgGr WflqDRcyxeJxHnvdhWBWmhYtAJXyZEeNmbbmow9eTcJkU3n6u8tEwZzR9OiOa6YH LGCYm6nhtT/gS9IeTSh3Af+q+bsp+xlZL5Mf/It9AIJWmBSqZBpWsPT2eQ1vlS6M 3/UzYjP+3Auf/x/3vAY3X0gjr/v0MiHBNFP25uMTmYJ94405aE5+9oLQq7vV33Yu aEVanRw8yKhVwvjkEMVJgLWeHmKEpDmB6WT1rQMV9Rgk8JgsqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDN6yTGRNHvKGHYkGBseHFFeXE3OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTI1Y2I5MDItZDA0Ny0z NDVmLWI5OGEtMzNhNDYxMzYwODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBKTxYCsrpbmb82FZZ295zppmOCDJsDg7K3nos89IXmCOZxdPvHEYnL aX9guQCqZ0sSWZ5R0BSWGyi2JXiIvQoZ9Bt6YRNRZGxM1OUK3BuP0ytdniqRtMwC BnqWVDwspRKnYChS9+d+fp1uEVKcCy2NgabGVeX4L396vwawXBE1FpjlyH+XDnbH e4tyurQDl4nsT+aNZlxB3k+y03wu3MZBkELPqEBKHj1GWbhTBb4YrBW4o1LEFoWL FnZlJtYHeSfkVJG2SjU0bggkHXVP7kC5q+fYO1120lsYWKTRIrjJFWexWZf4GxOo AqU/nMrLk4Tde0UOboDckGpNAT30ctCz -----END CERTIFICATE-----Generated at Thu Mar 26 11:15:05 2026 by rpki-client