$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/628ecc28-b0d6-3862-a0f0-386f97e93f6f.roa File: 628ecc28-b0d6-3862-a0f0-386f97e93f6f.roa (raw, json) Hash identifier: kkfQjKg5vh4HlEFlhSbgHQ0HmH1y4/Ecl2BqA2Mq/cA= Subject key identifier: 11:41:16:B4:1B:2D:74:E4:08:8F:63:6A:29:34:6B:D5:A8:B6:67:48 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFE1F8553B3A68F85D2080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/628ecc28-b0d6-3862-a0f0-386f97e93f6f.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 25485 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:e1:f8:55:3b:3a:68:f8:5d:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=f5e7fdf2-5e47-4bc6-b1d1-41279a54ce9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:20:56:34:da:d7:b0:6b:b8:12:d2:a4:41:e0: 06:34:96:6a:b1:c9:32:53:63:14:33:08:94:f1:3e: 63:d8:27:d9:c3:59:b7:cf:3f:89:2e:50:02:59:8f: 0d:71:b2:9d:35:d9:70:e5:30:4c:a1:c2:31:0f:0d: 8f:d8:56:4a:41:cd:44:e0:94:fc:66:b8:6e:0b:d4: 81:2a:57:e7:72:78:b9:7d:f4:fa:63:49:46:4b:2c: 22:62:59:50:90:dd:c5:95:73:0a:b5:cd:82:50:c2: ec:c8:4d:c6:e6:ca:a3:41:2b:e6:5c:f1:ea:9e:18: 2f:52:df:16:a4:c3:2e:49:49:23:b0:ec:43:ef:31: ef:19:06:1c:f7:93:fa:78:55:35:e5:d2:39:6f:59: 76:7a:f2:12:a9:3b:61:e4:5a:c3:21:d9:53:9d:5d: 94:a1:f9:e6:b2:e4:1a:86:b1:69:db:10:cc:64:02: 3c:25:a6:45:7d:1e:18:d8:4b:fd:f5:33:84:82:6e: d1:e7:30:05:e3:c4:82:df:49:f3:44:ea:d8:82:1b: 49:2f:47:9d:5f:1d:50:5a:f4:38:0e:9e:f2:87:fd: 3a:9b:dd:d1:35:02:2b:83:26:95:2f:0c:26:cd:98: 4c:ed:a4:72:20:9e:b1:4f:6f:33:15:46:bc:41:9d: ce:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:41:16:B4:1B:2D:74:E4:08:8F:63:6A:29:34:6B:D5:A8:B6:67:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/628ecc28-b0d6-3862-a0f0-386f97e93f6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:5e:9c:bb:0d:8d:16:2b:e2:ae:ea:3b:1a:97:8e:3f:64:9c: 54:4f:36:97:4c:45:85:67:85:b0:4a:72:b2:fc:49:c1:ce:55: 22:1c:33:e8:f2:c2:90:a1:93:e8:b1:0e:45:a5:e0:11:de:0c: f3:62:dd:9c:f9:a3:93:64:d7:3e:45:c0:77:e0:35:91:df:c7: e8:4d:bd:43:7f:6f:bd:47:dd:db:fe:56:53:c7:c5:d0:cf:57: e3:aa:c7:db:1d:b6:1f:ee:68:e5:48:9e:ec:60:7f:a3:ad:7e: 83:9a:2c:73:da:a0:c0:55:d1:49:e1:83:b3:6d:91:4c:7f:6f: 35:47:ec:39:ce:bf:1a:c1:82:ae:a3:cd:bc:f7:23:27:27:6b: 17:09:94:0f:54:28:64:08:23:a9:9b:f6:31:bd:7e:a2:41:60: ad:5a:15:84:f0:7a:2b:ec:99:5b:c1:ef:ba:0d:03:4e:e8:ca: cd:37:6f:c0:ad:84:19:3e:34:f6:fc:f0:f9:37:71:dd:bb:01: de:f8:69:2f:5e:86:de:d8:a0:c3:a6:b7:fe:69:50:ee:65:4d: 12:1e:a7:c1:8e:68:f8:3b:a0:9b:af:1e:5b:77:ca:e8:b3:89: 28:c8:fc:6a:9f:a7:c1:02:20:54:9c:f0:35:f5:4b:fa:6b:9a: 52:ff:d7:09 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/+H4VTs6aPhdIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZjVlN2ZkZjItNWU0Ny00YmM2LWIxZDEtNDEyNzlhNTRjZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyBWNNrXsGu4EtKkQeAGNJZqsckyU2MUMwiU 8T5j2CfZw1m3zz+JLlACWY8NcbKdNdlw5TBMocIxDw2P2FZKQc1E4JT8ZrhuC9SB Klfncni5ffT6Y0lGSywiYllQkN3FlXMKtc2CUMLsyE3G5sqjQSvmXPHqnhgvUt8W pMMuSUkjsOxD7zHvGQYc95P6eFU15dI5b1l2evISqTth5FrDIdlTnV2UofnmsuQa hrFp2xDMZAI8JaZFfR4Y2Ev99TOEgm7R5zAF48SC30nzROrYghtJL0edXx1QWvQ4 Dp7yh/06m93RNQIrgyaVLwwmzZhM7aRyIJ6xT28zFUa8QZ3OKQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBFBFrQbLXTkCI9jaik0a9WotmdIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjI4ZWNjMjgtYjBkNi0z ODYyLWEwZjAtMzg2Zjk3ZTkzZjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAAXpy7DY0WK+Ku6jsal44/ZJxUTzaXTEWFZ4WwSnKy/EnBzlUiHDPo 8sKQoZPosQ5FpeAR3gzzYt2c+aOTZNc+RcB34DWR38foTb1Df2+9R93b/lZTx8XQ z1fjqsfbHbYf7mjlSJ7sYH+jrX6Dmixz2qDAVdFJ4YOzbZFMf281R+w5zr8awYKu o8289yMnJ2sXCZQPVChkCCOpm/YxvX6iQWCtWhWE8Hor7Jlbwe+6DQNO6MrNN2/A rYQZPjT2/PD5N3HduwHe+GkvXobe2KDDprf+aVDuZU0SHqfBjmj4O6Cbrx5bd8ro s4koyPxqn6fBAiBUnPA19Uv6a5pS/9cJ -----END CERTIFICATE-----Generated at Thu Mar 26 11:17:48 2026 by rpki-client