$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/586be0ff-556c-37d7-86fe-1cbb64864745.roa File: 586be0ff-556c-37d7-86fe-1cbb64864745.roa (raw, json) Hash identifier: whvJ7xS+bJmLTqpCOmCGhxbOLEKmiYit0icTL2m2jU0= Subject key identifier: 63:F7:EE:77:7F:C0:30:EE:89:C6:8B:A0:54:24:1D:5B:39:30:DD:2F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFDE6AB3140756B6770380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/586be0ff-556c-37d7-86fe-1cbb64864745.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396566 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:de:6a:b3:14:07:56:b6:77:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=313d5496-169d-455e-8f8f-04218c213cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ef:a2:1f:53:6e:5b:8c:f7:74:10:ed:93:e1: 4f:e8:c2:da:e5:6b:b7:c6:69:50:35:91:13:7a:0a: ed:95:c9:8c:93:fe:20:1b:e5:30:9f:4f:19:6b:e4: 43:19:a8:7f:8e:b1:c0:75:a3:53:74:e8:f0:9f:08: 39:fc:eb:3c:de:e7:ba:d1:f8:fb:5d:78:25:c4:a5: 50:e0:a0:9b:99:8e:d1:eb:a0:d4:e4:7c:c1:a4:12: 2a:ac:72:7d:50:c7:8e:cc:99:61:8e:ae:47:08:33: af:d2:88:d2:45:42:de:d3:fd:9e:55:95:4b:04:76: 09:32:1e:1c:1d:00:ca:11:37:99:98:47:3c:de:7c: 81:ca:65:85:d3:e3:cc:4a:d0:fc:27:bf:99:ea:a1: 5e:c6:aa:b8:5b:d2:ad:03:bc:d8:fa:5f:36:a0:1e: 91:01:f1:47:21:b7:8a:8b:77:58:95:7b:e9:f0:8a: cb:99:fc:8f:27:2b:e6:bd:34:33:96:1b:7d:9d:92: 79:86:2c:0e:e1:7a:fa:39:db:1e:09:26:f7:a6:be: 51:2b:9a:69:0b:11:57:db:05:be:97:be:2a:b7:e0: 72:05:8c:fc:f3:22:85:ec:d3:9f:94:0d:bd:56:0c: 1a:6d:76:35:01:da:57:75:13:3a:80:4f:71:dc:8d: 55:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F7:EE:77:7F:C0:30:EE:89:C6:8B:A0:54:24:1D:5B:39:30:DD:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/586be0ff-556c-37d7-86fe-1cbb64864745.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:71:37:01:a5:8d:6c:9e:1c:67:e2:e7:08:3c:76:f1:7a:31: 9c:9a:c1:d6:0d:4a:f9:d1:8e:30:7d:2b:d2:0e:90:72:2f:a1: 05:f9:45:f3:c2:31:a1:32:3c:c4:42:e3:95:5c:c3:19:ba:ef: c3:20:d0:22:12:8d:3c:05:5f:02:a4:c0:38:25:2b:47:33:43: 7e:fe:9e:f7:f5:df:bc:f5:53:40:10:11:4e:55:52:5f:e2:65: 8f:8e:f4:6a:df:c3:52:e2:a9:9e:c2:c3:60:3b:39:ec:3f:42: ee:26:31:d2:94:df:fc:8a:9c:c4:ec:d4:9b:f8:da:e5:80:19: fe:38:ee:99:55:05:37:8e:02:f5:3f:75:05:e3:79:96:8e:d6: 75:13:75:db:07:73:b6:cd:db:75:dd:d6:38:23:a8:fb:1d:e7: 22:38:ff:e8:4d:17:57:ae:37:27:00:9c:60:b6:6c:f9:61:4f: 5e:dc:3a:1e:d8:01:c5:34:e3:4a:5f:c5:48:51:09:79:ba:cd: c3:1a:b9:31:f0:9c:d0:6c:a9:7b:4d:b4:c3:a6:c4:fb:67:6f: dd:10:de:5a:e6:61:49:64:a5:68:a0:a6:86:7d:88:1f:8a:2b: e4:f0:a5:5b:ae:33:21:c2:56:dc:36:5b:59:b8:63:06:a3:cb: 7b:89:14:f2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/95qsxQHVrZ3A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MzEzZDU0OTYtMTY5ZC00NTVlLThmOGYtMDQyMThjMjEzY2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy++iH1NuW4z3dBDtk+FP6MLa5Wu3xmlQNZET egrtlcmMk/4gG+Uwn08Za+RDGah/jrHAdaNTdOjwnwg5/Os83ue60fj7XXglxKVQ 4KCbmY7R66DU5HzBpBIqrHJ9UMeOzJlhjq5HCDOv0ojSRULe0/2eVZVLBHYJMh4c HQDKETeZmEc83nyBymWF0+PMStD8J7+Z6qFexqq4W9KtA7zY+l82oB6RAfFHIbeK i3dYlXvp8IrLmfyPJyvmvTQzlht9nZJ5hiwO4Xr6OdseCSb3pr5RK5ppCxFX2wW+ l74qt+ByBYz88yKF7NOflA29VgwabXY1AdpXdRM6gE9x3I1VGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGP37nd/wDDuicaLoFQkHVs5MN0vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTg2YmUwZmYtNTU2Yy0z N2Q3LTg2ZmUtMWNiYjY0ODY0NzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQARcTcBpY1snhxn4ucIPHbxejGcmsHWDUr50Y4wfSvSDpByL6EF+UXz wjGhMjzEQuOVXMMZuu/DINAiEo08BV8CpMA4JStHM0N+/p739d+89VNAEBFOVVJf 4mWPjvRq38NS4qmewsNgOznsP0LuJjHSlN/8ipzE7NSb+NrlgBn+OO6ZVQU3jgL1 P3UF43mWjtZ1E3XbB3O2zdt13dY4I6j7HeciOP/oTRdXrjcnAJxgtmz5YU9e3Doe 2AHFNONKX8VIUQl5us3DGrkx8JzQbKl7TbTDpsT7Z2/dEN5a5mFJZKVooKaGfYgf iivk8KVbrjMhwlbcNltZuGMGo8t7iRTy -----END CERTIFICATE-----Generated at Thu Mar 26 11:15:15 2026 by rpki-client