$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87fb8355-5f00-3908-8247-23aa3f3a16b5.roa File: 87fb8355-5f00-3908-8247-23aa3f3a16b5.roa (raw, json) Hash identifier: eFJF2UIT95rAtt+nvsyhWBvA3dceXU3beIhAirMpOyU= Subject key identifier: B4:01:B8:B7:5C:E7:65:AE:C9:71:7C:4F:31:94:80:21:B6:81:C1:B7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD9B9F5F72AE053795B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87fb8355-5f00-3908-8247-23aa3f3a16b5.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 397200 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d9:b9:f5:f7:2a:e0:53:79:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=46383259-3d08-4a65-84d6-9075e1afd026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:db:a7:f8:91:ac:0b:0d:f1:33:c5:91:52:28: 6e:37:f6:c2:84:8c:0e:7d:93:2f:58:27:fe:3a:8b: 7b:9c:fc:6c:8a:09:4f:60:79:85:2c:5a:8a:77:ac: 89:2a:a2:c4:9e:0a:40:63:0f:97:cc:12:7c:05:20: 3e:c5:cd:e4:0d:70:d8:a3:5b:0b:d3:60:82:41:e2: 1f:b2:c3:fb:50:09:71:be:ee:f6:49:37:ce:d1:af: 3c:24:88:9c:ac:bb:4b:1b:32:1a:20:f0:9e:11:ee: 8a:bb:fc:c8:7e:13:5e:c1:df:37:ea:bc:23:13:54: 59:e8:59:d8:01:27:53:8b:7a:f3:4b:c8:a2:eb:87: 68:d4:ac:f0:da:80:81:56:eb:56:86:b3:40:e1:62: 59:43:3b:e5:61:4e:f2:8a:00:6a:2f:b2:5e:1c:ce: 1e:75:c6:58:7d:7f:0c:37:5e:bf:c3:c3:22:20:bc: 62:fc:db:52:50:37:95:74:58:a8:6a:48:e7:e5:b9: 70:78:4c:1d:59:c6:cb:96:b4:94:9b:c7:0e:94:74: 65:92:77:2c:fe:ce:cf:86:70:09:87:af:9e:74:9f: 63:52:57:db:b0:25:15:fe:9f:fd:41:c4:62:68:36: c3:e6:4d:ba:a6:7b:24:ba:e1:0d:a0:bb:bf:22:bd: c7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:01:B8:B7:5C:E7:65:AE:C9:71:7C:4F:31:94:80:21:B6:81:C1:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87fb8355-5f00-3908-8247-23aa3f3a16b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:34:15:52:b9:4c:22:2b:24:de:95:f0:00:a6:6a:2e:2b:43: 30:e7:92:a5:e2:0a:26:53:41:e9:83:9d:1b:5f:c2:87:50:36: 26:53:a7:28:86:cc:ab:9a:4a:bd:40:9c:19:8d:a3:00:8c:96: 3d:14:1b:3c:52:c0:2e:89:0e:85:b1:f3:ed:cc:d3:b8:14:17: ff:bc:a6:a3:be:c6:e5:84:62:91:5f:20:3e:ec:85:d3:da:41: 0d:f0:1b:1b:00:80:d1:2a:67:16:f9:8b:4d:6c:e1:ac:c4:12: 8d:2e:c4:94:aa:2c:67:c6:32:e1:81:04:dd:35:29:a0:fb:41: dc:da:f6:03:0b:67:c0:27:db:47:74:93:46:da:c6:9f:e9:7d: 12:44:27:ed:19:9a:ad:1b:43:24:80:59:6c:f2:50:dd:c0:50: 0c:17:d4:62:79:d0:d7:ca:f6:3f:15:63:52:4b:bb:e8:66:b6: aa:89:45:d9:c9:aa:66:0c:50:a5:57:de:5d:07:47:11:78:ba: 86:f1:59:da:3c:de:b9:61:d6:e0:1a:2b:00:0a:1b:c5:6c:49: 7b:96:39:67:18:68:83:01:14:d4:7b:c7:2d:57:60:79:b2:e5: a0:c4:11:88:14:ef:e2:76:78:85:09:13:08:cf:fa:7e:e0:45: 31:3d:b7:00 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9m59fcq4FN5W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NDYzODMyNTktM2QwOC00YTY1LTg0ZDYtOTA3NWUxYWZkMDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNun+JGsCw3xM8WRUihuN/bChIwOfZMvWCf+ Oot7nPxsiglPYHmFLFqKd6yJKqLEngpAYw+XzBJ8BSA+xc3kDXDYo1sL02CCQeIf ssP7UAlxvu72STfO0a88JIicrLtLGzIaIPCeEe6Ku/zIfhNewd836rwjE1RZ6FnY ASdTi3rzS8ii64do1Kzw2oCBVutWhrNA4WJZQzvlYU7yigBqL7JeHM4edcZYfX8M N16/w8MiILxi/NtSUDeVdFioakjn5blweEwdWcbLlrSUm8cOlHRlkncs/s7PhnAJ h6+edJ9jUlfbsCUV/p/9QcRiaDbD5k26pnskuuENoLu/Ir3HNQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLQBuLdc52WuyXF8TzGUgCG2gcG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODdmYjgzNTUtNWYwMC0z OTA4LTgyNDctMjNhYTNmM2ExNmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBoNBVSuUwiKyTelfAApmouK0Mw55Kl4gomU0Hpg50bX8KHUDYmU6co hsyrmkq9QJwZjaMAjJY9FBs8UsAuiQ6FsfPtzNO4FBf/vKajvsblhGKRXyA+7IXT 2kEN8BsbAIDRKmcW+YtNbOGsxBKNLsSUqixnxjLhgQTdNSmg+0Hc2vYDC2fAJ9tH dJNG2saf6X0SRCftGZqtG0MkgFls8lDdwFAMF9RiedDXyvY/FWNSS7voZraqiUXZ yapmDFClV95dB0cReLqG8VnaPN65YdbgGisAChvFbEl7ljlnGGiDARTUe8ctV2B5 suWgxBGIFO/idniFCRMIz/p+4EUxPbcA -----END CERTIFICATE-----Generated at Fri Mar 27 06:13:34 2026 by rpki-client