$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6837e9c9-6960-3261-b176-603c90a4b0e4.roa File: 6837e9c9-6960-3261-b176-603c90a4b0e4.roa (raw, json) Hash identifier: RIcomN8haLXrUKhi215eaN/tKTsiCY4dxntzResbRsI= Subject key identifier: ED:08:B2:B9:AF:92:FA:37:64:01:A4:95:87:66:B2:E5:B0:53:6E:F3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFDBE2DF80241C5DD5C9E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6837e9c9-6960-3261-b176-603c90a4b0e4.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396562 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:db:e2:df:80:24:1c:5d:d5:c9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=3c6c83b7-06ee-435a-9933-2cc97332212a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2d:1d:ed:ba:22:9a:7f:24:7a:54:9c:92:5f: 26:08:4e:51:53:ca:2e:35:bc:0b:33:4e:08:10:39: 20:ea:d7:ed:a7:97:86:17:9d:67:b7:2a:c3:29:90: 9c:7d:73:e3:5f:e9:c7:9a:61:c5:3c:bf:7d:73:fb: ad:b7:ce:b1:a3:48:41:32:1f:1a:a5:41:87:32:2f: 90:99:08:9f:d1:ec:f4:c0:01:04:e5:3e:68:f0:5b: c1:fb:21:f8:28:6c:7d:40:68:30:fe:8f:4b:08:49: 52:dd:f3:43:ae:84:0c:4b:46:d6:d3:9b:8c:f4:32: e3:3e:8d:ad:9a:58:42:12:d2:15:51:51:a9:35:57: 1b:a7:28:b7:cb:24:eb:e5:cc:1b:36:96:8b:6a:dc: d7:75:06:c6:a8:65:f8:aa:45:04:f6:63:d6:4a:00: 55:96:a7:f3:c9:cb:ba:e2:23:7b:de:63:02:13:3d: bc:63:95:6c:6d:92:2a:0c:ae:b1:e4:61:4d:94:75: 95:42:71:74:9d:d6:a2:3f:71:5f:69:86:af:17:c3: 6f:8f:60:39:27:ec:ad:79:c3:c4:63:a7:99:c4:49: 3a:5f:a8:bd:64:51:08:f8:d4:a7:66:76:ab:b3:85: a1:12:c9:31:bb:15:39:bf:14:2e:4e:ec:91:72:12: 95:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:08:B2:B9:AF:92:FA:37:64:01:A4:95:87:66:B2:E5:B0:53:6E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6837e9c9-6960-3261-b176-603c90a4b0e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:7d:f2:31:86:06:b2:1b:6d:bf:0f:07:ec:cd:01:6c:c8:24: 6d:43:6a:d1:b9:ab:7d:3f:d4:03:b8:7b:4b:a7:c7:6c:e1:bb: c0:6c:6b:5a:35:81:e8:7f:6f:81:29:ca:65:af:4f:59:eb:d8: 97:f5:6d:39:5a:07:49:ec:58:3b:f7:1a:97:59:38:d7:68:07: 7c:68:12:ba:62:e5:4d:e7:85:d4:cc:68:6a:30:bb:97:01:17: dd:5c:68:52:f7:87:13:84:dd:47:3f:05:6f:e7:83:fa:44:e9: 7b:3b:a3:7a:cf:dd:39:59:02:2a:22:3a:07:24:82:7a:94:1a: 1e:25:a6:bb:97:55:e8:17:5a:b8:a3:28:42:47:35:78:08:21: 3c:78:24:92:90:de:36:53:67:12:41:eb:30:d7:34:09:9d:89: 94:46:3c:63:59:8a:2a:83:28:c7:f5:af:0a:2c:d4:b4:f5:2b: f6:e0:ae:27:d4:19:5a:7a:52:50:05:30:2c:20:72:df:86:54: c3:a4:95:57:84:f4:8f:7d:58:e5:ae:35:b8:2e:5c:b0:43:79: 01:b5:f7:7a:5e:7f:e2:d6:6c:d2:5b:3e:47:eb:60:e7:4c:da: 5b:a1:1d:d3:93:a5:ee:fb:25:7f:ce:01:ab:73:53:29:ee:d2: 10:95:23:84 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9vi34AkHF3VyeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk M2M2YzgzYjctMDZlZS00MzVhLTk5MzMtMmNjOTczMzIyMTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly0d7boimn8kelSckl8mCE5RU8ouNbwLM04I EDkg6tftp5eGF51ntyrDKZCcfXPjX+nHmmHFPL99c/utt86xo0hBMh8apUGHMi+Q mQif0ez0wAEE5T5o8FvB+yH4KGx9QGgw/o9LCElS3fNDroQMS0bW05uM9DLjPo2t mlhCEtIVUVGpNVcbpyi3yyTr5cwbNpaLatzXdQbGqGX4qkUE9mPWSgBVlqfzycu6 4iN73mMCEz28Y5VsbZIqDK6x5GFNlHWVQnF0ndaiP3FfaYavF8Nvj2A5J+ytecPE Y6eZxEk6X6i9ZFEI+NSnZnars4WhEskxuxU5vxQuTuyRchKV1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO0Isrmvkvo3ZAGklYdmsuWwU27zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjgzN2U5YzktNjk2MC0z MjYxLWIxNzYtNjAzYzkwYTRiMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2ffIxhgayG22/DwfszQFsyCRtQ2rRuat9P9QDuHtLp8ds4bvAbGta NYHof2+BKcplr09Z69iX9W05WgdJ7Fg79xqXWTjXaAd8aBK6YuVN54XUzGhqMLuX ARfdXGhS94cThN1HPwVv54P6ROl7O6N6z905WQIqIjoHJIJ6lBoeJaa7l1XoF1q4 oyhCRzV4CCE8eCSSkN42U2cSQesw1zQJnYmURjxjWYoqgyjH9a8KLNS09Sv24K4n 1BlaelJQBTAsIHLfhlTDpJVXhPSPfVjlrjW4LlywQ3kBtfd6Xn/i1mzSWz5H62Dn TNpboR3Tk6Xu+yV/zgGrc1Mp7tIQlSOE -----END CERTIFICATE-----Generated at Thu Mar 26 11:15:04 2026 by rpki-client