$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71018df6-bd92-3378-985c-e3e08032c26b.roa File: 71018df6-bd92-3378-985c-e3e08032c26b.roa (raw, json) Hash identifier: kkEKQy4GLm2tVnabhSGKngPlPDCGujgznC0iSYZXLHs= Subject key identifier: 9E:3A:91:13:43:0F:DC:E7:C6:C2:B7:92:F9:53:74:16:B7:C6:F5:1A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFE08B84DAB99ED3C39280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71018df6-bd92-3378-985c-e3e08032c26b.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 27544 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:e0:8b:84:da:b9:9e:d3:c3:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=233307ea-74f0-4f70-911a-04aefd6f4a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:63:a8:a0:eb:64:a9:fd:d0:08:b9:25:ea:98: 4f:28:22:50:6a:b0:d8:f6:2d:23:68:54:8c:b0:a1: c5:14:80:0d:53:66:5d:fc:85:01:09:fd:8e:18:bc: 8e:e1:fd:ca:8b:29:0d:f7:28:4e:b7:ea:c9:9b:b0: e5:e5:56:33:48:72:7c:cc:48:8f:b1:cb:b0:a5:81: 40:68:69:db:d3:1d:81:24:4e:22:bf:7a:83:22:ec: d2:77:23:3b:e5:1e:aa:47:63:cd:b0:24:2d:35:8a: 38:35:f3:73:7c:4e:d5:68:f6:75:84:76:e5:34:4c: 15:c0:c9:9d:06:51:e4:dd:3c:30:6e:35:06:f4:df: 8c:62:c3:5b:c0:9b:96:19:eb:87:99:57:69:01:ca: 73:38:f1:aa:be:99:4a:79:91:c5:9a:cc:e1:1c:b3: ee:77:9d:77:5a:e3:bc:2c:51:12:cd:79:a9:ae:de: 12:72:7c:94:f5:b6:e0:5c:ba:4c:5a:6c:14:86:24: 03:b1:74:06:13:73:13:26:93:77:82:11:a4:5a:ed: d9:a2:77:5a:d8:48:a3:c3:eb:7a:1a:5f:87:1f:07: d2:12:d8:b8:7a:5a:8b:eb:62:f5:46:33:21:01:e4: 8e:93:e1:84:65:97:c2:6a:c6:35:83:af:d9:99:09: c1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3A:91:13:43:0F:DC:E7:C6:C2:B7:92:F9:53:74:16:B7:C6:F5:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71018df6-bd92-3378-985c-e3e08032c26b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:e6:ed:82:10:d4:f6:c3:6c:31:6a:85:61:e8:be:05:55:93: 59:19:f0:a8:04:94:3f:5e:b4:35:05:56:9a:cb:b9:0d:ad:26: 9a:9d:b7:97:b7:7f:e8:27:83:6c:4e:ed:20:2f:51:1e:44:94: e0:22:ec:a2:62:f6:c1:75:55:0d:4e:eb:3d:65:51:94:7d:df: cc:a0:7c:57:f0:cf:1f:02:17:b2:78:ae:9e:07:c7:4e:0f:47: 06:26:fa:97:62:62:0a:ed:60:42:72:80:04:76:09:d2:69:e1: 4e:c2:1f:b4:a1:36:76:d7:0d:8f:cc:e9:e0:b5:ea:2c:c1:d6: e2:ae:40:76:42:68:05:71:03:46:d1:3b:34:35:3b:9f:27:15: 9e:ab:83:c9:4d:0e:bd:f6:e6:a8:6b:4e:80:d3:e9:41:bd:12: 3e:1f:5d:20:18:25:74:7f:32:09:38:be:02:58:5d:67:f8:6f: 20:9b:00:c5:a5:67:7a:e2:d6:60:dd:06:cf:d1:6b:f3:7b:5b: 8a:d2:55:26:ff:79:d8:ae:6c:a3:3a:90:c1:2a:ad:08:27:c9: af:1a:1a:4d:cf:46:c7:91:8c:5a:75:cc:b2:88:0c:4f:61:aa: e8:5b:08:24:a0:1a:fd:30:ca:f8:a4:07:b8:71:4d:0c:4f:4d: 91:e9:79:1e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/+CLhNq5ntPDkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MjMzMzA3ZWEtNzRmMC00ZjcwLTkxMWEtMDRhZWZkNmY0YTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWOooOtkqf3QCLkl6phPKCJQarDY9i0jaFSM sKHFFIANU2Zd/IUBCf2OGLyO4f3KiykN9yhOt+rJm7Dl5VYzSHJ8zEiPscuwpYFA aGnb0x2BJE4iv3qDIuzSdyM75R6qR2PNsCQtNYo4NfNzfE7VaPZ1hHblNEwVwMmd BlHk3TwwbjUG9N+MYsNbwJuWGeuHmVdpAcpzOPGqvplKeZHFmszhHLPud513WuO8 LFESzXmprt4ScnyU9bbgXLpMWmwUhiQDsXQGE3MTJpN3ghGkWu3Zonda2Eijw+t6 Gl+HHwfSEti4elqL62L1RjMhAeSOk+GEZZfCasY1g6/ZmQnBrwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ46kRNDD9znxsK3kvlTdBa3xvUaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzEwMThkZjYtYmQ5Mi0z Mzc4LTk4NWMtZTNlMDgwMzJjMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBV5u2CENT2w2wxaoVh6L4FVZNZGfCoBJQ/XrQ1BVaay7kNrSaanbeX t3/oJ4NsTu0gL1EeRJTgIuyiYvbBdVUNTus9ZVGUfd/MoHxX8M8fAheyeK6eB8dO D0cGJvqXYmIK7WBCcoAEdgnSaeFOwh+0oTZ21w2PzOngteoswdbirkB2QmgFcQNG 0Ts0NTufJxWeq4PJTQ699uaoa06A0+lBvRI+H10gGCV0fzIJOL4CWF1n+G8gmwDF pWd64tZg3QbP0Wvze1uK0lUm/3nYrmyjOpDBKq0IJ8mvGhpNz0bHkYxadcyyiAxP YaroWwgkoBr9MMr4pAe4cU0MT02R6Xke -----END CERTIFICATE-----Generated at Thu Mar 26 16:54:15 2026 by rpki-client