$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa4817d-b49c-314b-a92d-17a0633781f1.roa File: 5aa4817d-b49c-314b-a92d-17a0633781f1.roa (raw, json) Hash identifier: mQ5gxADC/NqigvOa4+iXse94xIFih1zkF3/30d5JV1U= Subject key identifier: F0:FB:B9:4E:DA:21:88:D6:01:2B:FE:A3:21:A4:04:0E:24:CB:98:AA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFDC9B30579688ADCEC060 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa4817d-b49c-314b-a92d-17a0633781f1.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396549 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:dc:9b:30:57:96:88:ad:ce:c0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=103c6501-2450-46eb-b701-fecc8d6821b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f5:91:5c:60:73:8d:ec:27:e7:bb:9d:c6:28: 09:59:5a:93:c0:0a:41:21:67:f8:df:61:a5:72:db: 97:16:64:13:e7:de:c9:e0:24:ac:11:ba:b5:6b:b5: 77:6e:59:0e:10:4c:75:d6:37:83:0e:34:a1:19:37: 20:35:28:b3:b0:29:83:11:bd:28:b7:af:7a:e1:d6: d7:a6:79:51:db:a2:05:66:f1:d7:00:5e:f4:5f:ae: ed:1a:c6:39:5d:0d:4d:62:f9:2d:47:0e:3d:4f:7d: 8e:56:0e:08:49:6f:cf:a1:f3:e0:2d:6c:0b:fa:f4: 9e:e9:21:47:42:93:ab:d1:44:c9:41:fa:02:19:a5: d2:c8:98:df:7e:a9:15:2b:ac:b3:a5:42:92:05:f7: 90:6c:f6:05:0f:13:5b:2c:2e:75:b5:74:7b:d4:e8: ad:59:b9:89:cd:00:12:86:b2:fb:45:df:79:ba:15: 8c:c4:25:c1:67:52:65:f9:de:da:22:8b:80:53:14: 9f:c0:ab:e9:48:40:15:86:1b:ec:1e:a3:ca:cf:a2: 16:20:83:c1:f5:6a:22:f3:a1:6c:0e:a2:c5:38:1f: 9c:98:9b:92:e5:db:56:63:c5:5e:1b:a3:3e:e1:07: 78:2f:91:b9:7b:0d:a5:6a:b3:4f:c7:01:54:55:1c: 48:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FB:B9:4E:DA:21:88:D6:01:2B:FE:A3:21:A4:04:0E:24:CB:98:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa4817d-b49c-314b-a92d-17a0633781f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:6e:0c:6c:99:aa:8f:c9:11:c4:4b:e4:09:de:86:7c:14:e3: ac:4d:9e:15:a6:25:6e:e0:4b:d7:ec:12:e0:f3:cf:92:8e:98: 8a:1d:66:87:f3:45:c7:bb:0d:4f:80:e5:49:0a:f2:91:8b:49: 6f:64:42:db:7b:05:b0:ca:c5:39:94:a1:5e:09:cc:3c:b6:6e: 6c:92:cc:f8:f0:71:c7:e3:74:d7:73:93:10:9a:44:87:97:c0: 21:cb:19:7b:86:13:08:21:34:ef:43:60:d0:e0:1c:83:3e:bb: 6c:b1:48:09:7f:6b:11:63:55:20:c8:9f:68:06:66:5e:ac:76: ad:e1:48:18:3f:e4:0a:59:6d:0e:91:f5:4e:10:88:85:f5:69: a5:e5:05:62:fd:37:67:89:5a:62:f6:8b:41:c4:4b:08:f4:99: a9:77:c9:77:4c:45:03:12:90:2a:d3:2c:4c:bd:3e:71:12:f0: 61:f0:3a:42:ce:4c:f9:d6:38:63:08:48:bc:da:58:9c:f2:c5: 22:cc:52:d5:4e:48:22:16:5e:05:51:50:68:fc:28:ef:0c:45: a0:69:3d:9a:1d:5b:46:3c:f8:d2:a6:6e:3c:d8:94:14:13:13: 8a:2e:7f:04:24:c9:9f:21:9a:53:0b:17:8a:03:0c:1e:d3:f5: c0:a9:6e:07 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9ybMFeWiK3OwGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MTAzYzY1MDEtMjQ1MC00NmViLWI3MDEtZmVjYzhkNjgyMWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vWRXGBzjewn57udxigJWVqTwApBIWf432Gl ctuXFmQT597J4CSsEbq1a7V3blkOEEx11jeDDjShGTcgNSizsCmDEb0ot6964dbX pnlR26IFZvHXAF70X67tGsY5XQ1NYvktRw49T32OVg4ISW/PofPgLWwL+vSe6SFH QpOr0UTJQfoCGaXSyJjffqkVK6yzpUKSBfeQbPYFDxNbLC51tXR71OitWbmJzQAS hrL7Rd95uhWMxCXBZ1Jl+d7aIouAUxSfwKvpSEAVhhvsHqPKz6IWIIPB9Woi86Fs DqLFOB+cmJuS5dtWY8VeG6M+4Qd4L5G5ew2larNPxwFUVRxIRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPD7uU7aIYjWASv+oyGkBA4ky5iqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWFhNDgxN2QtYjQ5Yy0z MTRiLWE5MmQtMTdhMDYzMzc4MWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBobgxsmaqPyRHES+QJ3oZ8FOOsTZ4VpiVu4EvX7BLg88+SjpiKHWaH 80XHuw1PgOVJCvKRi0lvZELbewWwysU5lKFeCcw8tm5sksz48HHH43TXc5MQmkSH l8Ahyxl7hhMIITTvQ2DQ4ByDPrtssUgJf2sRY1UgyJ9oBmZerHat4UgYP+QKWW0O kfVOEIiF9Wml5QVi/TdniVpi9otBxEsI9Jmpd8l3TEUDEpAq0yxMvT5xEvBh8DpC zkz51jhjCEi82lic8sUizFLVTkgiFl4FUVBo/CjvDEWgaT2aHVtGPPjSpm482JQU ExOKLn8EJMmfIZpTCxeKAwwe0/XAqW4H -----END CERTIFICATE-----Generated at Thu Mar 26 11:18:37 2026 by rpki-client