$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6650864f-78e6-3ab2-9f4e-fbe210ea845d.roa File: 6650864f-78e6-3ab2-9f4e-fbe210ea845d.roa (raw, json) Hash identifier: XYk0O5CCsv+PNNVpS35qMljeD12zSZaUphNc3w8xEbg= Subject key identifier: 12:50:3E:36:B1:83:14:A8:3E:1D:EE:F2:AD:AF:7B:B6:29:11:9E:5D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFDD400372AEFB7BB61500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6650864f-78e6-3ab2-9f4e-fbe210ea845d.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 20172 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:dd:40:03:72:ae:fb:7b:b6:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=ecb3e69f-cae8-47a4-b3f7-83b5d375ecfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d4:77:44:67:f1:c7:55:71:92:82:4e:27:b7: 0c:bb:bd:ee:a4:5f:5a:c8:68:30:32:0c:a6:da:70: a0:11:14:0b:f3:6e:15:b5:97:5e:98:2a:a7:ea:3d: 70:f6:8c:cd:70:9b:04:e6:83:43:ac:10:c0:16:1d: 07:51:2f:28:3b:d2:a0:27:49:4e:27:42:62:c1:9f: 50:24:34:21:6d:3d:14:91:f7:93:4d:51:1d:f8:85: 18:47:dc:d7:a5:a7:62:14:c8:40:ee:2d:0c:d5:00: 86:c8:88:e9:ce:5d:70:41:f3:55:3d:37:9b:7d:b2: 8d:b4:0a:56:c4:df:23:9c:09:42:02:10:13:29:80: 24:4e:f1:b0:cb:ba:95:15:c5:27:a3:9c:3a:d6:87: 35:0a:df:4d:27:7e:2b:31:3a:bc:6e:0e:e7:ac:c0: 93:f9:63:8f:cd:f5:8c:03:a2:7c:c4:85:a7:52:bf: e3:1b:26:76:1f:a9:9f:4e:5d:67:a5:3c:ac:1f:3b: c6:e7:95:96:89:43:c4:96:0c:c6:bb:13:39:d0:ba: 3b:8b:9a:b4:4f:30:a9:99:6e:94:08:ab:92:c4:21: 57:73:d8:5d:53:59:3d:03:b1:95:f0:4f:bc:98:67: 71:34:e9:a0:6b:25:ef:65:eb:16:9a:5e:b1:fd:c7: a1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:50:3E:36:B1:83:14:A8:3E:1D:EE:F2:AD:AF:7B:B6:29:11:9E:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6650864f-78e6-3ab2-9f4e-fbe210ea845d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:bf:96:b1:b8:3e:a6:eb:47:c3:93:1a:34:40:8f:37:11:1c: 89:33:c0:ea:e3:24:f4:19:d9:2b:3e:15:10:4e:1d:34:55:40: 50:2b:4e:45:95:39:28:4d:f6:ac:d5:73:8e:61:db:aa:f9:77: 70:1e:66:60:96:e8:da:53:b2:12:57:ea:c7:b2:4a:e2:31:39: 8b:69:fc:12:c0:3e:94:8d:da:88:df:ec:c5:c3:67:54:3a:03: ec:b7:74:85:96:cc:c3:67:5e:d6:7a:39:8b:93:68:e5:80:de: 4d:33:7f:5f:5a:c3:22:d4:00:2d:ab:41:64:e4:e0:a1:7e:fa: e4:90:56:fe:5e:10:fa:ae:f2:b6:8c:72:eb:ad:64:4f:4e:d8: db:9d:fa:03:87:a8:d7:29:48:2d:92:72:d1:cb:d2:01:92:7c: 79:df:b4:20:5f:b0:7d:e5:b0:80:ff:9a:54:25:b2:25:74:ee: cc:47:51:d5:19:bc:d1:81:7e:2f:24:6e:81:58:fa:41:1a:9e: 84:1a:db:6c:41:6a:e4:0e:72:01:1a:ea:1f:ed:81:78:97:79: d1:e3:fc:8d:76:d1:bf:de:eb:04:9c:fb:1e:68:8a:1d:42:0d: f7:de:88:c2:3e:b5:f7:03:ec:5c:dd:d8:be:1b:5f:d5:70:55: 38:36:68:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/91AA3Ku+3u2FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZWNiM2U2OWYtY2FlOC00N2E0LWIzZjctODNiNWQzNzVlY2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNR3RGfxx1VxkoJOJ7cMu73upF9ayGgwMgym 2nCgERQL824VtZdemCqn6j1w9ozNcJsE5oNDrBDAFh0HUS8oO9KgJ0lOJ0JiwZ9Q JDQhbT0UkfeTTVEd+IUYR9zXpadiFMhA7i0M1QCGyIjpzl1wQfNVPTebfbKNtApW xN8jnAlCAhATKYAkTvGwy7qVFcUno5w61oc1Ct9NJ34rMTq8bg7nrMCT+WOPzfWM A6J8xIWnUr/jGyZ2H6mfTl1npTysHzvG55WWiUPElgzGuxM50Lo7i5q0TzCpmW6U CKuSxCFXc9hdU1k9A7GV8E+8mGdxNOmgayXvZesWml6x/cehvwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBJQPjaxgxSoPh3u8q2ve7YpEZ5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjY1MDg2NGYtNzhlNi0z YWIyLTlmNGUtZmJlMjEwZWE4NDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAuv5axuD6m60fDkxo0QI83ERyJM8Dq4yT0GdkrPhUQTh00VUBQK05F lTkoTfas1XOOYduq+XdwHmZglujaU7ISV+rHskriMTmLafwSwD6UjdqI3+zFw2dU OgPst3SFlszDZ17WejmLk2jlgN5NM39fWsMi1AAtq0Fk5OChfvrkkFb+XhD6rvK2 jHLrrWRPTtjbnfoDh6jXKUgtknLRy9IBknx537QgX7B95bCA/5pUJbIldO7MR1HV GbzRgX4vJG6BWPpBGp6EGttsQWrkDnIBGuof7YF4l3nR4/yNdtG/3usEnPseaIod Qg333ojCPrX3A+xc3di+G1/VcFU4Nmjr -----END CERTIFICATE-----Generated at Thu Mar 26 15:18:12 2026 by rpki-client