$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/625a1cb4-9275-3615-813b-2e4aec695d6f.roa File: 625a1cb4-9275-3615-813b-2e4aec695d6f.roa (raw, json) Hash identifier: aVJ5a3HNqqid4Ai8cWxQ20Kk1aYyAx1iU/l00ATc6Rg= Subject key identifier: A4:A4:C5:E4:21:23:E6:A3:E8:D8:42:D9:97:77:09:A9:38:6F:72:3C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD5A1865300DECD49FD00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/625a1cb4-9275-3615-813b-2e4aec695d6f.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396580 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d5:a1:86:53:00:de:cd:49:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=de51f7a2-6612-43f7-a817-a11859832021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1d:28:44:9f:ce:bc:54:96:71:0e:50:3c:3e: 79:d9:39:54:b0:cc:6d:11:10:81:ac:1d:aa:65:78: 20:d5:3b:62:c4:75:76:55:3f:18:bf:df:07:8e:81: 53:af:ca:15:8e:73:bb:5f:d0:90:bf:49:28:21:99: 64:46:96:79:46:d0:e6:be:2a:b4:a1:75:5b:7c:6d: 57:61:cd:65:3f:40:ba:8a:68:fd:98:9e:6a:4e:23: 00:71:93:74:37:73:ff:a7:be:66:07:99:11:25:c9: ac:49:09:dc:6c:d8:b6:8d:a6:cd:0d:d2:a4:05:42: cc:19:35:8f:49:2d:6d:b6:46:89:99:1e:17:a3:89: 82:08:79:3c:02:e3:1f:82:76:2e:51:58:2d:ef:31: 8c:05:c4:22:22:f4:31:93:52:b7:dc:f5:4b:8d:b9: 4f:96:77:7e:46:b9:69:32:41:93:f8:80:29:09:cf: a8:26:ff:1c:b9:14:27:77:06:53:b9:b8:10:35:dd: bd:53:ad:76:0b:d0:51:58:6e:5e:bf:5d:b5:89:23: 26:91:b1:98:0e:48:d9:b7:58:a8:b2:f7:cd:09:f5: cc:d1:a5:29:5e:0d:04:d2:5b:d5:1c:70:80:23:93: 24:c2:2a:36:45:fb:62:7b:6a:68:8e:6d:37:39:75: 56:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A4:C5:E4:21:23:E6:A3:E8:D8:42:D9:97:77:09:A9:38:6F:72:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/625a1cb4-9275-3615-813b-2e4aec695d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:9f:ed:a7:7b:77:c1:76:17:9d:52:f1:9d:91:19:d4:b0:d9: 08:8d:51:c5:ea:c3:b9:c2:95:1b:9b:88:28:fa:9f:fe:64:9d: 72:87:49:83:88:c0:fd:47:da:30:87:5b:0a:1f:7e:8e:3c:be: 7e:e7:7d:5b:ec:f4:5e:06:fd:a9:ab:fe:8d:ba:80:b8:dc:f0: 6d:7c:fb:46:a3:30:98:29:09:66:22:08:95:9a:ca:cb:cb:0f: b1:d8:36:a8:02:86:14:ba:19:c0:d9:e6:26:c5:88:e7:72:ed: fc:de:f7:e7:1b:12:a0:4e:8f:4f:0b:d7:7c:c1:3e:9b:8a:c5: cd:ab:6a:c3:a0:47:be:60:11:49:40:ae:86:44:91:a8:b5:10: 2a:e2:b2:db:c0:7f:47:aa:f5:2b:79:1e:ff:d2:eb:26:d5:f5: f4:26:de:5a:35:80:10:0c:b4:0e:67:20:0a:de:2d:e5:4e:95: 1f:89:79:1d:52:56:fe:3b:38:a2:84:e4:68:e3:15:5a:02:d9: 52:33:44:f6:b2:96:81:e4:20:e4:0f:80:0e:75:7e:a6:02:46: 15:39:7d:dd:32:82:da:41:46:61:e3:e6:92:e4:da:91:ae:f1: d8:69:fa:f1:74:95:86:a9:db:b7:3f:a3:5b:0d:af:bf:cf:38: 2d:df:9d:d5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9WhhlMA3s1J/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZGU1MWY3YTItNjYxMi00M2Y3LWE4MTctYTExODU5ODMyMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB0oRJ/OvFSWcQ5QPD552TlUsMxtERCBrB2q ZXgg1TtixHV2VT8Yv98HjoFTr8oVjnO7X9CQv0koIZlkRpZ5RtDmviq0oXVbfG1X Yc1lP0C6imj9mJ5qTiMAcZN0N3P/p75mB5kRJcmsSQncbNi2jabNDdKkBULMGTWP SS1ttkaJmR4Xo4mCCHk8AuMfgnYuUVgt7zGMBcQiIvQxk1K33PVLjblPlnd+Rrlp MkGT+IApCc+oJv8cuRQndwZTubgQNd29U612C9BRWG5ev121iSMmkbGYDkjZt1io svfNCfXM0aUpXg0E0lvVHHCAI5Mkwio2Rftie2pojm03OXVWoQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKSkxeQhI+aj6NhC2Zd3Cak4b3I8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjI1YTFjYjQtOTI3NS0z NjE1LTgxM2ItMmU0YWVjNjk1ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBVn+2ne3fBdhedUvGdkRnUsNkIjVHF6sO5wpUbm4go+p/+ZJ1yh0mD iMD9R9owh1sKH36OPL5+531b7PReBv2pq/6NuoC43PBtfPtGozCYKQlmIgiVmsrL yw+x2DaoAoYUuhnA2eYmxYjncu383vfnGxKgTo9PC9d8wT6bisXNq2rDoEe+YBFJ QK6GRJGotRAq4rLbwH9HqvUreR7/0usm1fX0Jt5aNYAQDLQOZyAK3i3lTpUfiXkd Ulb+OziihORo4xVaAtlSM0T2spaB5CDkD4AOdX6mAkYVOX3dMoLaQUZh4+aS5NqR rvHYafrxdJWGqdu3P6NbDa+/zzgt353V -----END CERTIFICATE-----Generated at Thu Mar 26 13:55:21 2026 by rpki-client