$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ba9c099-d3ec-354f-8dee-210da4453ea1.roa File: 8ba9c099-d3ec-354f-8dee-210da4453ea1.roa (raw, json) Hash identifier: jpAduvr5J+xRYvYQB9/vmZYAIvVr++QcIRSKnqw95jE= Subject key identifier: 3F:4D:A0:2B:3F:3A:CA:E4:4E:FF:B4:D8:35:82:10:72:8B:08:DA:6D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFE25A7C6A7F542FF99180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ba9c099-d3ec-354f-8dee-210da4453ea1.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 397205 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:e2:5a:7c:6a:7f:54:2f:f9:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=438010ad-fa95-4780-a23e-cb0c7333f04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:58:bc:d1:99:a3:d1:45:d7:1e:8d:50:11:cc: ef:06:f3:4e:7e:b7:68:41:02:44:7c:f7:71:f6:67: f6:43:35:eb:8e:3c:ce:61:c8:68:c4:d2:18:cd:20: 4d:2c:79:bb:f1:6e:ff:a4:6f:65:3a:d1:86:37:76: 8a:4a:8d:6e:90:43:6b:8f:90:99:22:ff:74:98:06: 7b:54:6e:60:e1:b3:1d:e0:8f:5c:f6:1a:ed:5f:90: 50:87:0f:7e:38:92:c4:47:ff:7a:e4:d2:4f:5a:48: 6c:b7:e7:4b:33:0b:a2:a3:28:d5:87:77:f7:36:a2: de:a3:d8:a1:96:7a:0a:71:50:7c:78:51:d8:cd:27: eb:d9:ec:4a:4a:ff:50:a9:c6:86:54:94:34:d8:e0: 96:1a:d7:b2:e6:3e:f2:9d:6a:bb:31:67:ab:3a:94: 22:17:7b:de:f0:85:85:31:2d:6f:e6:74:eb:36:bc: e0:8f:7f:d7:2d:d1:f2:e4:3e:1a:36:8b:48:f3:a5: 09:21:38:96:4b:25:03:b0:b4:50:f4:f3:e8:34:06: 34:80:e8:b6:19:75:1b:d8:d0:ae:1e:54:73:6a:87: d4:91:35:e7:7e:b4:d1:30:4b:7b:33:90:49:cb:96: 14:97:8f:c0:a0:b3:6a:d8:75:34:1f:6e:ee:cd:d8: ec:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4D:A0:2B:3F:3A:CA:E4:4E:FF:B4:D8:35:82:10:72:8B:08:DA:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ba9c099-d3ec-354f-8dee-210da4453ea1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d2:64:1b:6f:b0:60:80:a7:33:45:e2:85:d9:08:47:41:ca: 73:74:ab:29:b4:94:da:fd:dc:1d:67:48:19:fe:31:e9:8e:e1: b8:cf:06:b1:ea:6c:8d:bd:0d:8b:e9:bc:9f:59:e8:a1:f0:5c: 24:74:08:68:e5:62:3d:9b:31:a9:7d:ff:72:b7:57:51:bf:70: 87:8c:44:1a:99:d4:67:b0:b6:2c:f4:6c:ba:31:48:31:0c:38: 13:55:c9:0e:87:cb:61:3a:90:29:75:52:1d:cf:93:b5:2f:96: d9:52:54:0d:c5:5d:29:ef:2d:e4:f3:e9:67:f2:7e:2b:2e:7a: f0:8f:37:12:89:c6:11:54:c7:dd:69:8a:43:43:49:c7:28:25: de:3e:e1:4e:4d:41:99:40:cd:51:47:f8:32:0b:09:f3:7b:7a: 32:90:06:7e:1b:ac:cb:3d:bb:01:aa:d2:e5:d5:12:ec:6e:d9: 88:83:96:1c:c6:a9:d3:7a:50:91:b6:a4:a2:ae:7f:db:30:70: 8a:eb:90:0c:40:45:e7:0d:fc:55:a1:a0:d1:50:f3:e3:12:da: 69:f7:33:8d:21:1a:a4:73:30:6c:74:ee:94:6e:06:36:90:45: 69:a3:01:ab:78:ee:15:66:2a:78:cf:3a:ee:1f:f3:68:27:14: bf:7f:a6:57 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/+JafGp/VC/5kYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NDM4MDEwYWQtZmE5NS00NzgwLWEyM2UtY2IwYzczMzNmMDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFi80Zmj0UXXHo1QEczvBvNOfrdoQQJEfPdx 9mf2QzXrjjzOYchoxNIYzSBNLHm78W7/pG9lOtGGN3aKSo1ukENrj5CZIv90mAZ7 VG5g4bMd4I9c9hrtX5BQhw9+OJLER/965NJPWkhst+dLMwuioyjVh3f3NqLeo9ih lnoKcVB8eFHYzSfr2exKSv9QqcaGVJQ02OCWGtey5j7ynWq7MWerOpQiF3ve8IWF MS1v5nTrNrzgj3/XLdHy5D4aNotI86UJITiWSyUDsLRQ9PPoNAY0gOi2GXUb2NCu HlRzaofUkTXnfrTRMEt7M5BJy5YUl4/AoLNq2HU0H27uzdjs4wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD9NoCs/OsrkTv+02DWCEHKLCNptMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGJhOWMwOTktZDNlYy0z NTRmLThkZWUtMjEwZGE0NDUzZWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCG0mQbb7BggKczReKF2QhHQcpzdKsptJTa/dwdZ0gZ/jHpjuG4zwax 6myNvQ2L6byfWeih8FwkdAho5WI9mzGpff9yt1dRv3CHjEQamdRnsLYs9Gy6MUgx DDgTVckOh8thOpApdVIdz5O1L5bZUlQNxV0p7y3k8+ln8n4rLnrwjzcSicYRVMfd aYpDQ0nHKCXePuFOTUGZQM1RR/gyCwnze3oykAZ+G6zLPbsBqtLl1RLsbtmIg5Yc xqnTelCRtqSirn/bMHCK65AMQEXnDfxVoaDRUPPjEtpp9zONIRqkczBsdO6UbgY2 kEVpowGreO4VZip4zzruH/NoJxS/f6ZX -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:03 2026 by rpki-client