$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9e56e54f-fbe0-3bba-a3bd-69a1901c11a3.roa File: 9e56e54f-fbe0-3bba-a3bd-69a1901c11a3.roa (raw, json) Hash identifier: 2d1oAsT0Fn4NGbd5rDpv3dHA4s2eSXdg8bkRuXi43Dc= Subject key identifier: DC:32:6C:33:33:D5:FD:C1:AE:41:4F:92:67:B0:20:DF:10:76:08:14 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD725AB2BAA98397F7400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9e56e54f-fbe0-3bba-a3bd-69a1901c11a3.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 397207 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d7:25:ab:2b:aa:98:39:7f:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=20e343b2-45db-4ee5-a689-35a2f3b228a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:52:23:18:1b:eb:2e:5e:76:52:69:20:dc:c1: f4:74:fa:12:f4:e1:8e:c1:4a:a8:fc:84:a7:9e:d2: 42:f8:54:15:c6:0f:11:cc:40:78:4f:e8:a4:a6:35: 1c:6c:b1:7b:12:af:ae:42:b4:4a:fe:13:b6:1a:ef: f2:53:e8:df:9a:2c:de:1d:0d:64:46:6d:e7:7b:b7: 5c:70:94:0e:3a:ef:ea:c9:ca:be:0a:39:90:5d:e7: 1a:28:8c:2c:c5:fc:be:4b:54:6c:65:2a:83:03:96: f0:f2:25:98:0a:21:36:07:1d:cb:34:c7:d3:81:02: df:ab:22:21:a9:04:8e:0f:18:92:3a:ab:84:65:41: 73:95:1e:27:1e:62:ef:6b:2c:d1:80:e3:11:e2:49: d0:a2:c9:a2:93:23:af:a9:27:03:e4:dc:0a:6a:82: 3d:db:18:77:9a:4b:10:2b:11:cf:3e:fa:5b:3f:d3: 4f:8f:10:25:48:b9:5b:b9:59:aa:e1:63:b6:76:e5: b4:e2:a3:fc:34:13:f8:72:a2:d1:11:8a:64:67:8e: ad:6e:c8:d1:1f:05:c5:75:fc:ea:af:07:53:68:93: ae:d1:19:6a:6c:d4:6d:34:be:e5:99:21:1b:fe:5c: ce:96:9d:01:bb:f5:56:59:44:fd:d7:3d:13:75:8d: 3d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:32:6C:33:33:D5:FD:C1:AE:41:4F:92:67:B0:20:DF:10:76:08:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9e56e54f-fbe0-3bba-a3bd-69a1901c11a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:1a:70:11:4e:95:32:cc:9b:d3:9f:ba:1c:0d:a1:28:9f:e2: 36:a2:f0:b2:03:92:0d:e3:ff:9a:fc:79:85:dd:10:df:41:12: f9:2a:02:1b:7a:f2:2c:3e:7d:be:36:0b:60:21:8f:60:8f:2d: 73:af:be:fc:6c:ef:87:64:0c:63:ae:ba:06:9a:61:3e:94:ac: 56:14:4b:d9:ef:85:b2:16:c0:cb:d2:35:dc:e9:5a:39:40:0b: 4c:04:b0:2b:87:ee:77:0b:20:ed:e5:0d:1e:d2:49:66:e8:49: 30:14:c3:44:50:ce:0b:6e:95:87:19:1a:d6:c2:2f:89:21:4b: 67:ab:b3:af:df:9a:93:dc:eb:49:79:ae:11:96:5f:81:dd:a4: 52:3e:ff:b8:31:14:5e:f3:1f:1d:58:a4:95:cc:92:58:5d:b9: 43:4a:26:e4:18:3d:1a:25:34:a1:5a:d6:b2:90:88:25:e8:1d: 24:aa:09:67:b2:ff:5d:bc:11:64:21:9d:91:ba:53:db:92:8c: 64:5e:d5:8a:27:83:2c:89:0d:22:30:e1:6b:81:3f:34:17:92: 66:db:bd:2b:06:c8:55:67:46:5c:f6:f0:f2:20:5a:d2:5d:66: ba:19:d0:d1:38:58:f0:54:1b:53:17:a3:8a:73:3b:7f:7a:eb: c0:97:a1:a4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9clqyuqmDl/dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MjBlMzQzYjItNDVkYi00ZWU1LWE2ODktMzVhMmYzYjIyOGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFIjGBvrLl52Umkg3MH0dPoS9OGOwUqo/ISn ntJC+FQVxg8RzEB4T+ikpjUcbLF7Eq+uQrRK/hO2Gu/yU+jfmizeHQ1kRm3ne7dc cJQOOu/qycq+CjmQXecaKIwsxfy+S1RsZSqDA5bw8iWYCiE2Bx3LNMfTgQLfqyIh qQSODxiSOquEZUFzlR4nHmLvayzRgOMR4knQosmikyOvqScD5NwKaoI92xh3mksQ KxHPPvpbP9NPjxAlSLlbuVmq4WO2duW04qP8NBP4cqLREYpkZ46tbsjRHwXFdfzq rwdTaJOu0RlqbNRtNL7lmSEb/lzOlp0Bu/VWWUT91z0TdY09/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNwybDMz1f3BrkFPkmewIN8QdggUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWU1NmU1NGYtZmJlMC0z YmJhLWEzYmQtNjlhMTkwMWMxMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDGnARTpUyzJvTn7ocDaEon+I2ovCyA5IN4/+a/HmF3RDfQRL5KgIb evIsPn2+NgtgIY9gjy1zr778bO+HZAxjrroGmmE+lKxWFEvZ74WyFsDL0jXc6Vo5 QAtMBLArh+53CyDt5Q0e0klm6EkwFMNEUM4LbpWHGRrWwi+JIUtnq7Ov35qT3OtJ ea4Rll+B3aRSPv+4MRRe8x8dWKSVzJJYXblDSibkGD0aJTShWtaykIgl6B0kqgln sv9dvBFkIZ2RulPbkoxkXtWKJ4MsiQ0iMOFrgT80F5Jm270rBshVZ0Zc9vDyIFrS XWa6GdDROFjwVBtTF6OKczt/euvAl6Gk -----END CERTIFICATE-----Generated at Thu Mar 26 13:23:19 2026 by rpki-client