$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b2e7b97-9281-33e1-953e-fc929888a2f0.roa File: 5b2e7b97-9281-33e1-953e-fc929888a2f0.roa (raw, json) Hash identifier: olkHvFN+ixLvnZXvom29PWRhWzfsJi5jUKRwOisOCCg= Subject key identifier: 23:E9:B2:A5:4A:D1:30:4A:B9:41:EF:50:40:5B:01:24:6C:4A:10:01 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFDEF125BEA4117789CE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b2e7b97-9281-33e1-953e-fc929888a2f0.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396552 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:de:f1:25:be:a4:11:77:89:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=7bc3cbc7-fe5c-4b9e-b6ba-5a7452726e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ac:56:b3:fa:d8:3d:6a:f6:6d:e8:12:6c:66: 7d:94:9e:16:1b:00:44:04:4e:76:e2:46:c0:bd:76: 46:dd:d4:7f:5d:2d:83:54:d8:32:99:0d:60:75:d0: 95:50:ad:c3:9b:a1:94:8f:e9:2f:33:f5:8d:38:21: cb:f3:67:3c:c2:1a:0e:40:45:bc:eb:fe:e0:b0:43: e3:bc:4b:b1:58:2c:3a:cd:c6:6e:2b:b5:92:4b:46: 32:c7:fb:cc:48:93:e8:b7:fd:72:a0:06:41:23:0a: 10:1c:1e:75:8f:b7:0f:d8:2e:ca:9d:02:49:e7:a1: da:fc:96:62:72:7e:c3:fd:aa:a2:4b:15:04:63:3f: 3b:5c:bb:20:0c:51:b9:81:84:0e:01:dd:3e:7d:7b: 32:23:db:e3:d0:cc:16:ae:d9:c1:be:13:da:94:22: 92:c5:b4:97:70:73:60:c8:d7:39:e9:3f:68:1b:7e: e8:28:2e:60:d2:b1:ec:d3:9c:0d:f6:51:30:cc:6d: 02:a1:5c:4a:45:8c:ba:29:39:95:48:38:49:7a:b5: b7:14:7e:13:5e:b3:c8:c4:9a:37:d2:cb:50:ac:55: 12:c0:8b:e3:58:06:b3:3b:63:f3:a4:57:6d:48:6f: bb:ab:88:13:85:4a:85:46:55:ef:32:a6:52:d3:15: d8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E9:B2:A5:4A:D1:30:4A:B9:41:EF:50:40:5B:01:24:6C:4A:10:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b2e7b97-9281-33e1-953e-fc929888a2f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:02:4d:79:ba:98:59:1a:ee:4e:31:9f:ab:a4:44:07:66:4e: e7:62:14:86:d5:fa:a5:eb:df:6e:9b:f6:fe:29:42:93:e3:36: 19:ef:1c:f5:ca:e9:90:a9:ee:69:70:9e:4b:c3:64:d4:36:ca: 4f:f7:a3:25:23:b9:f1:aa:e1:df:a5:66:07:cc:be:05:9a:7e: 1f:8e:8e:99:2d:41:1c:0d:ea:3c:91:3b:c4:bf:09:8e:93:3d: 04:93:2c:30:ba:9c:39:e1:0d:0a:cb:d4:e4:51:c8:ab:8d:06: 00:19:3d:0d:08:91:4f:2f:ef:01:6e:a9:87:75:bd:77:ba:d2: 8f:1b:30:c7:44:9d:8d:46:c0:51:b1:86:73:26:5c:1d:15:19: db:ca:30:4a:63:bf:1d:21:bb:02:3c:23:6b:ec:b1:cc:70:0b: ce:a1:9d:95:e1:a1:74:a6:64:1a:c2:34:b8:35:13:f4:ae:04: d6:a7:15:8b:af:63:d6:e5:eb:b2:c9:1f:19:5b:2e:4c:e3:ae: c0:e2:db:29:75:17:8c:a5:d4:e8:5f:1b:f5:80:0a:55:6c:f5: 8c:1c:59:0a:fa:db:15:4a:51:e5:01:e0:cb:d8:19:e9:99:b5: 07:6b:78:19:4d:4a:a6:1b:69:1f:ea:53:70:75:e1:71:31:73: 6e:30:e2:83 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/97xJb6kEXeJzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk N2JjM2NiYzctZmU1Yy00YjllLWI2YmEtNWE3NDUyNzI2ZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKxWs/rYPWr2begSbGZ9lJ4WGwBEBE524kbA vXZG3dR/XS2DVNgymQ1gddCVUK3Dm6GUj+kvM/WNOCHL82c8whoOQEW86/7gsEPj vEuxWCw6zcZuK7WSS0Yyx/vMSJPot/1yoAZBIwoQHB51j7cP2C7KnQJJ56Ha/JZi cn7D/aqiSxUEYz87XLsgDFG5gYQOAd0+fXsyI9vj0MwWrtnBvhPalCKSxbSXcHNg yNc56T9oG37oKC5g0rHs05wN9lEwzG0CoVxKRYy6KTmVSDhJerW3FH4TXrPIxJo3 0stQrFUSwIvjWAazO2PzpFdtSG+7q4gThUqFRlXvMqZS0xXYAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCPpsqVK0TBKuUHvUEBbASRsShABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWIyZTdiOTctOTI4MS0z M2UxLTk1M2UtZmM5Mjk4ODhhMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6Ak15uphZGu5OMZ+rpEQHZk7nYhSG1fql699um/b+KUKT4zYZ7xz1 yumQqe5pcJ5Lw2TUNspP96MlI7nxquHfpWYHzL4Fmn4fjo6ZLUEcDeo8kTvEvwmO kz0Ekywwupw54Q0Ky9TkUcirjQYAGT0NCJFPL+8BbqmHdb13utKPGzDHRJ2NRsBR sYZzJlwdFRnbyjBKY78dIbsCPCNr7LHMcAvOoZ2V4aF0pmQawjS4NRP0rgTWpxWL r2PW5euyyR8ZWy5M467A4tspdReMpdToXxv1gApVbPWMHFkK+tsVSlHlAeDL2Bnp mbUHa3gZTUqmG2kf6lNwdeFxMXNuMOKD -----END CERTIFICATE-----Generated at Fri Mar 27 03:38:02 2026 by rpki-client