$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ad446f0-b57c-3d91-b50a-27c5c39f3623.roa File: 8ad446f0-b57c-3d91-b50a-27c5c39f3623.roa (raw, json) Hash identifier: XruJQ4DomaRH0cKQcZC7bQ5TYmMBfr2Erv9HDoJ5+UM= Subject key identifier: FE:13:FB:27:5D:93:D8:B2:85:09:6C:D1:1E:D8:60:F7:C5:65:71:9A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFDF13D2D154E924886880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ad446f0-b57c-3d91-b50a-27c5c39f3623.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 36627 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:df:13:d2:d1:54:e9:24:88:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=1cb421f1-550e-46bb-926a-72a4bf94635c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f9:a6:4f:92:1c:04:ba:fb:e0:ba:4e:54:01: 4f:86:45:21:6f:26:9d:d5:f5:d3:6e:18:23:e0:98: f3:8e:73:a3:97:bb:1d:e4:d1:eb:a9:47:4c:f4:8b: 5e:8e:a7:dc:12:34:a5:78:0f:c5:d0:3f:69:ba:10: 90:bd:5b:ff:ee:cf:03:e0:3b:2c:ca:03:a0:a6:15: f0:76:d1:49:51:4e:38:1b:5d:18:cf:76:02:5d:ff: 81:29:77:55:7d:77:81:18:22:1c:32:46:13:6b:e3: 4a:61:9c:01:f8:47:20:0e:fe:ac:07:10:01:18:9b: cf:29:71:2d:67:4f:d3:9a:f5:50:55:5a:de:b4:a3: 10:b2:d1:9a:35:90:37:aa:e3:15:9f:8f:a8:46:d3: 95:33:b4:33:c1:92:da:44:32:1a:34:2c:ff:4f:60: bf:aa:6d:df:40:f9:13:86:9d:bd:af:9b:d1:e1:7b: 42:ef:05:a4:39:09:71:dd:f9:92:ad:bd:4c:c3:d0: 5a:91:dd:99:c1:91:e3:6f:eb:ce:8f:f3:b2:ef:22: 87:e6:bf:f6:41:7f:38:7d:31:bf:07:76:4d:e9:d2: c2:e1:db:bf:d9:6f:83:3e:78:c5:4d:b6:0f:ef:b1: 5e:69:f8:d0:1a:7e:24:3c:a4:3c:f3:66:c1:2d:b9: be:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:13:FB:27:5D:93:D8:B2:85:09:6C:D1:1E:D8:60:F7:C5:65:71:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ad446f0-b57c-3d91-b50a-27c5c39f3623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:19:31:09:c5:85:51:ba:52:2e:d4:68:10:ce:5b:30:9c:fa: e9:ff:47:87:06:8e:94:9f:3f:62:65:89:fe:fc:ef:7c:44:c8: 5d:15:d4:60:b1:79:a9:8e:3f:4c:eb:7e:54:a5:87:51:2c:08: 41:8a:7d:3f:8c:8d:67:12:91:30:55:c2:e1:01:5f:c9:bb:5c: 52:30:aa:f8:b9:1f:ce:cc:4b:5b:2d:af:ff:0a:c0:af:e4:cb: 62:68:24:c4:6d:df:d6:43:19:4b:35:9a:ab:15:28:53:03:a6: 75:39:33:c4:59:4e:61:f7:e4:5c:2f:3d:cf:61:75:bd:cf:19: da:da:cd:10:f7:b0:89:b6:e8:b9:2c:7a:f0:88:3a:41:8c:c0: 35:e5:63:a1:48:c2:69:11:14:2c:64:57:4f:37:cc:d1:95:59: 1c:7e:23:2d:72:0a:5a:4c:5c:1a:73:bf:a1:00:cf:b9:ae:c7: 7a:7b:35:82:11:9e:92:28:f6:c8:c5:65:00:d6:d2:09:25:ae: 89:36:83:7d:ef:a8:63:53:e9:7a:37:2b:42:90:08:e2:33:0d: fc:a2:7f:05:21:0c:ac:a0:64:e9:bd:29:cc:a2:69:b8:91:5b: 50:cb:04:f2:0a:d8:c6:b7:39:44:5e:a5:24:78:af:53:85:2a: 70:0f:27:93 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/98T0tFU6SSIaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MWNiNDIxZjEtNTUwZS00NmJiLTkyNmEtNzJhNGJmOTQ2MzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfmmT5IcBLr74LpOVAFPhkUhbyad1fXTbhgj 4JjzjnOjl7sd5NHrqUdM9ItejqfcEjSleA/F0D9puhCQvVv/7s8D4DssygOgphXw dtFJUU44G10Yz3YCXf+BKXdVfXeBGCIcMkYTa+NKYZwB+EcgDv6sBxABGJvPKXEt Z0/TmvVQVVretKMQstGaNZA3quMVn4+oRtOVM7QzwZLaRDIaNCz/T2C/qm3fQPkT hp29r5vR4XtC7wWkOQlx3fmSrb1Mw9Bakd2ZwZHjb+vOj/Oy7yKH5r/2QX84fTG/ B3ZN6dLC4du/2W+DPnjFTbYP77FeafjQGn4kPKQ882bBLbm+IQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP4T+yddk9iyhQls0R7YYPfFZXGaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGFkNDQ2ZjAtYjU3Yy0z ZDkxLWI1MGEtMjdjNWMzOWYzNjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAzGTEJxYVRulIu1GgQzlswnPrp/0eHBo6Unz9iZYn+/O98RMhdFdRg sXmpjj9M635UpYdRLAhBin0/jI1nEpEwVcLhAV/Ju1xSMKr4uR/OzEtbLa//CsCv 5MtiaCTEbd/WQxlLNZqrFShTA6Z1OTPEWU5h9+RcLz3PYXW9zxna2s0Q97CJtui5 LHrwiDpBjMA15WOhSMJpERQsZFdPN8zRlVkcfiMtcgpaTFwac7+hAM+5rsd6ezWC EZ6SKPbIxWUA1tIJJa6JNoN976hjU+l6NytCkAjiMw38on8FIQysoGTpvSnMomm4 kVtQywTyCtjGtzlEXqUkeK9ThSpwDyeT -----END CERTIFICATE-----Generated at Thu Mar 26 15:26:12 2026 by rpki-client