$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d31be6f-2619-3a4b-a651-8b150e6c4530.roa File: 5d31be6f-2619-3a4b-a651-8b150e6c4530.roa (raw, json) Hash identifier: 47EccE2NdnkJUfwaxXOQoU2OWe5Ab1G9VsFoAXX7JPo= Subject key identifier: E6:52:07:A3:2D:23:FB:F9:2A:49:FD:13:B3:C1:C8:DF:5E:91:DC:90 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFE283238FDCE9967FC080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d31be6f-2619-3a4b-a651-8b150e6c4530.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 36630 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:e2:83:23:8f:dc:e9:96:7f:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=2c56eced-4b7f-4c62-a549-d68ee7dffcc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5f:8d:a4:b2:97:f2:ea:d2:c5:4c:3c:22:e7: f6:57:f9:c6:4e:3b:26:a0:6c:d7:57:9d:d9:da:0e: f9:1d:b1:de:46:18:1c:60:1d:bb:88:1d:92:5c:dd: d7:b7:bb:ee:03:9d:94:d9:d7:96:c5:15:9e:19:f3: 3a:2e:f0:25:18:34:c5:da:d5:c5:39:e2:5e:9e:36: 04:c1:55:58:39:bd:8d:e7:f3:27:b9:11:da:c3:c4: 4f:f0:83:16:68:9d:4b:a5:86:3b:17:45:7c:92:7f: 06:87:09:29:99:54:e3:7c:6a:d0:03:1e:d5:59:25: 67:d0:b3:80:a5:e0:4e:7a:f1:b0:28:a7:ad:56:24: 39:f2:f4:8e:1e:94:0a:14:8a:05:f4:d2:b8:aa:02: d8:13:46:42:57:9d:be:16:25:ad:01:f3:ee:6e:90: 24:06:12:25:f3:1b:73:ea:c3:ca:83:e9:eb:ee:10: 5d:12:3f:94:70:9e:3b:73:81:6e:1c:e7:f9:2e:d9: f9:87:67:62:22:95:5f:20:f4:00:30:e4:70:a8:b7: ff:7d:a0:28:22:c6:86:f2:82:f1:fe:b4:80:49:6a: 9d:36:41:95:19:a7:16:b5:84:15:c4:ea:7f:3d:fc: ba:74:7a:85:55:ca:72:94:9b:de:dc:7c:7e:75:86: 49:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:52:07:A3:2D:23:FB:F9:2A:49:FD:13:B3:C1:C8:DF:5E:91:DC:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d31be6f-2619-3a4b-a651-8b150e6c4530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:60:27:6d:ea:ac:9e:a5:77:14:d8:2b:c1:6f:72:24:7d:94: d9:f4:94:57:fe:8d:cb:94:4d:47:27:65:dc:8d:8d:92:44:b0: 87:7d:f9:2b:97:7c:67:2f:93:57:de:60:68:6b:e4:fa:43:39: b2:38:4f:bb:6c:6e:05:dc:ee:05:7b:66:75:e0:5c:2b:f1:d1: 6f:ed:39:3e:ef:2b:90:9c:02:49:fb:1b:b9:76:c9:24:52:83: 0f:46:a1:eb:53:4d:b1:53:7f:d3:be:73:58:0c:fc:77:03:f9: 76:56:f8:07:19:85:4d:f3:65:04:7c:55:d7:4b:18:17:65:3e: 28:13:47:28:4d:3b:26:3e:d2:a6:81:05:97:b8:e2:d5:77:61: ed:77:c6:cc:81:58:42:f8:c8:ce:54:6f:70:b8:35:02:98:ff: ce:76:8b:e3:94:42:07:0e:53:53:4b:ca:ff:06:2b:7a:53:8c: 01:58:f2:56:75:e4:89:38:b2:09:55:59:18:db:58:36:bd:9b: b9:0a:bf:0d:4b:59:90:f6:e2:49:42:3c:fb:55:bd:c0:58:76: 57:b7:5c:26:7f:0f:8c:b7:52:52:5c:6c:2f:e7:37:ff:bf:18: 73:38:5e:01:86:44:fb:e0:90:34:09:cd:34:90:f0:37:08:6a: 57:e1:af:e8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/+KDI4/c6ZZ/wIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MmM1NmVjZWQtNGI3Zi00YzYyLWE1NDktZDY4ZWU3ZGZmY2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF+NpLKX8urSxUw8Iuf2V/nGTjsmoGzXV53Z 2g75HbHeRhgcYB27iB2SXN3Xt7vuA52U2deWxRWeGfM6LvAlGDTF2tXFOeJenjYE wVVYOb2N5/MnuRHaw8RP8IMWaJ1LpYY7F0V8kn8GhwkpmVTjfGrQAx7VWSVn0LOA peBOevGwKKetViQ58vSOHpQKFIoF9NK4qgLYE0ZCV52+FiWtAfPubpAkBhIl8xtz 6sPKg+nr7hBdEj+UcJ47c4FuHOf5Ltn5h2diIpVfIPQAMORwqLf/faAoIsaG8oLx /rSASWqdNkGVGacWtYQVxOp/Pfy6dHqFVcpylJve3Hx+dYZJ6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOZSB6MtI/v5Kkn9E7PByN9ekdyQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWQzMWJlNmYtMjYxOS0z YTRiLWE2NTEtOGIxNTBlNmM0NTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAeYCdt6qyepXcU2CvBb3IkfZTZ9JRX/o3LlE1HJ2XcjY2SRLCHffkr l3xnL5NX3mBoa+T6QzmyOE+7bG4F3O4Fe2Z14Fwr8dFv7Tk+7yuQnAJJ+xu5dskk UoMPRqHrU02xU3/TvnNYDPx3A/l2VvgHGYVN82UEfFXXSxgXZT4oE0coTTsmPtKm gQWXuOLVd2Htd8bMgVhC+MjOVG9wuDUCmP/OdovjlEIHDlNTS8r/Bit6U4wBWPJW deSJOLIJVVkY21g2vZu5Cr8NS1mQ9uJJQjz7Vb3AWHZXt1wmfw+Mt1JSXGwv5zf/ vxhzOF4BhkT74JA0Cc00kPA3CGpX4a/o -----END CERTIFICATE-----Generated at Thu Mar 26 15:01:42 2026 by rpki-client