$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6008ca0a-c263-3da9-ac70-8a69bae553d6.roa File: 6008ca0a-c263-3da9-ac70-8a69bae553d6.roa (raw, json) Hash identifier: YSFVFJXlabCCHw82LsOgv3RjofBmpiCV1SepcN1TSPQ= Subject key identifier: A5:DB:BB:82:55:F9:31:88:EB:34:F5:1D:E0:3D:38:88:46:C1:31:A3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFDF249F5503F55EFB6200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6008ca0a-c263-3da9-ac70-8a69bae553d6.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 36632 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:df:24:9f:55:03:f5:5e:fb:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=0eef291f-d975-4f78-a461-c367817c0cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ba:fc:d3:16:eb:75:6c:a4:98:e0:ef:0c:25: a7:61:46:3e:69:ef:0e:cb:31:ee:f6:f4:25:9a:d9: 34:f1:b7:79:7a:24:ef:92:e4:9d:91:b4:7d:58:99: b8:aa:97:4c:29:c0:6a:04:cd:7d:e8:9a:6f:e5:ee: 68:2b:5b:bd:7c:33:04:6a:c0:44:ef:98:95:ed:63: 51:ce:2d:2b:89:41:c2:80:3a:7e:08:27:51:dc:74: b7:2c:54:8e:c8:a0:13:c8:a6:f1:70:27:9a:51:b1: 46:80:e8:02:82:99:73:ca:c8:c6:cc:62:11:76:44: f7:93:91:b2:15:49:09:27:ce:60:89:c0:f2:d0:11: 44:90:77:d1:1d:cf:24:0c:f9:8b:08:12:fa:55:ea: 86:68:0f:b9:8b:e0:a6:cb:ea:bd:4d:23:6f:b9:3b: 58:ee:f2:7a:cc:bc:d2:ae:a9:0d:be:71:9f:70:73: 96:0f:01:21:6a:a8:5e:29:58:ca:1b:bb:bc:b6:61: 0d:1e:70:cf:e3:3d:8a:66:06:e5:32:78:bb:a5:c1: 9b:ce:ce:a5:4f:f2:20:14:42:84:46:e9:5a:46:0d: 22:d3:46:d2:d2:95:ac:13:ca:b4:cc:6a:92:77:47: bc:b0:f1:d0:b3:c3:47:85:fa:fe:6e:73:5c:15:33: 9d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DB:BB:82:55:F9:31:88:EB:34:F5:1D:E0:3D:38:88:46:C1:31:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6008ca0a-c263-3da9-ac70-8a69bae553d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:2f:62:ec:85:9c:07:c0:a7:1a:1a:59:96:67:81:13:92:da: cc:fd:65:a5:b0:8e:bb:3d:e9:fb:f1:d5:88:7f:90:5d:86:83: c8:76:d5:8f:2f:70:67:8c:c9:10:38:54:c9:57:48:86:40:1f: 62:5d:10:64:d2:59:ba:a7:27:fd:a0:f3:da:58:61:bd:1b:44: 2a:11:51:69:2f:74:50:2a:d6:b2:20:7f:84:f3:78:02:3b:0b: da:92:c0:31:28:b6:16:f8:dd:a2:27:7c:52:aa:dd:27:ec:7b: 9a:42:01:ac:4f:41:86:35:eb:dd:76:19:72:f7:d4:fe:84:ff: 92:d7:34:89:ef:31:9e:c9:bd:57:b4:dc:5e:8e:69:3e:45:30: a7:12:e9:c9:12:a6:9c:26:b7:cf:65:33:19:88:52:76:d1:41: e9:54:b0:5e:ab:77:4e:26:e7:83:ef:6f:b6:1e:58:ad:0a:a7: d3:60:a0:c6:37:42:47:3c:0d:7c:7d:19:58:be:b3:80:dc:24: 37:9f:4c:e3:1f:89:41:32:90:93:f4:9f:b5:7e:1b:a8:04:3a: a2:86:85:81:15:dd:5c:2a:4e:17:47:98:9c:a3:b4:fc:db:2e: a1:af:f2:af:b9:f5:ad:ee:d6:c8:8e:4b:e7:ad:90:fd:02:b5: 91:4b:a2:e0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/98kn1UD9V77YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MGVlZjI5MWYtZDk3NS00Zjc4LWE0NjEtYzM2NzgxN2MwY2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLr80xbrdWykmODvDCWnYUY+ae8OyzHu9vQl mtk08bd5eiTvkuSdkbR9WJm4qpdMKcBqBM196Jpv5e5oK1u9fDMEasBE75iV7WNR zi0riUHCgDp+CCdR3HS3LFSOyKATyKbxcCeaUbFGgOgCgplzysjGzGIRdkT3k5Gy FUkJJ85gicDy0BFEkHfRHc8kDPmLCBL6VeqGaA+5i+Cmy+q9TSNvuTtY7vJ6zLzS rqkNvnGfcHOWDwEhaqheKVjKG7u8tmENHnDP4z2KZgblMni7pcGbzs6lT/IgFEKE RulaRg0i00bS0pWsE8q0zGqSd0e8sPHQs8NHhfr+bnNcFTOdYwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKXbu4JV+TGI6zT1HeA9OIhGwTGjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjAwOGNhMGEtYzI2My0z ZGE5LWFjNzAtOGE2OWJhZTU1M2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAeL2LshZwHwKcaGlmWZ4ETktrM/WWlsI67Pen78dWIf5BdhoPIdtWP L3BnjMkQOFTJV0iGQB9iXRBk0lm6pyf9oPPaWGG9G0QqEVFpL3RQKtayIH+E83gC OwvaksAxKLYW+N2iJ3xSqt0n7HuaQgGsT0GGNevddhly99T+hP+S1zSJ7zGeyb1X tNxejmk+RTCnEunJEqacJrfPZTMZiFJ20UHpVLBeq3dOJueD72+2HlitCqfTYKDG N0JHPA18fRlYvrOA3CQ3n0zjH4lBMpCT9J+1fhuoBDqihoWBFd1cKk4XR5ico7T8 2y6hr/KvufWt7tbIjkvnrZD9ArWRS6Lg -----END CERTIFICATE-----Generated at Thu Mar 26 20:26:43 2026 by rpki-client