$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a168bf01-0c8b-3b5a-b925-ac31a99e6dae.roa File: a168bf01-0c8b-3b5a-b925-ac31a99e6dae.roa (raw, json) Hash identifier: GNtetJfM623v1R56hiKuOQD3pLUcyF9J0jaA8wogjgw= Subject key identifier: CC:C9:92:E3:86:C0:B8:5D:9B:B1:EB:61:2C:59:DB:B5:71:C3:1A:43 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD580FD0F1D54F24F3A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a168bf01-0c8b-3b5a-b925-ac31a99e6dae.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 20362 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d5:80:fd:0f:1d:54:f2:4f:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=5aecc459-c841-4549-a8d4-82ac1c5f32fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:00:a3:5c:33:1a:9c:d3:b1:d1:03:56:f0:f6: dd:df:db:e2:d0:fe:0b:39:26:50:c6:fa:44:5c:be: a9:88:1e:c1:ff:d3:88:38:98:b4:41:f3:bd:39:91: c7:8d:87:48:39:f3:f2:38:34:19:95:8f:32:09:40: 75:4b:7b:d1:37:ef:d3:46:dd:2e:12:1c:f0:6d:ac: d0:60:11:a3:d6:35:cf:2e:2b:f8:60:39:a5:ba:87: aa:27:27:e5:87:15:30:d3:76:45:96:40:f6:1b:5b: 0e:c6:27:80:ad:aa:86:a0:55:ba:c6:f9:30:7b:0c: b5:97:2e:fa:93:c8:66:c8:e3:c6:fc:67:f2:6c:47: d6:74:13:e3:73:57:c6:0e:ac:63:e5:00:8e:69:ab: 1a:0a:90:3c:8e:4b:a0:95:55:05:4b:09:61:c9:e1: c6:12:22:f5:90:26:2c:ca:1c:64:f9:eb:a2:b2:d3: a1:15:84:40:11:a0:ce:8f:b1:f6:d9:17:a8:98:87: 41:93:11:ce:53:40:2b:e2:b5:dc:0b:89:d0:35:1c: 29:cf:8f:b5:21:e9:b4:1b:23:fb:b0:3f:1e:07:c1: 90:b3:e1:32:a5:e4:4b:8f:b3:c7:7a:94:19:e9:34: b8:b4:f3:65:d1:ba:95:29:60:87:69:85:be:20:61: ac:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C9:92:E3:86:C0:B8:5D:9B:B1:EB:61:2C:59:DB:B5:71:C3:1A:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a168bf01-0c8b-3b5a-b925-ac31a99e6dae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:39:71:5f:00:75:50:f1:9f:e4:ae:a0:d9:ed:b7:04:30:e9: ec:2f:e6:7d:c4:b3:14:4f:32:b9:45:0f:c5:dc:7b:10:e1:4b: 37:c5:93:3d:f3:ed:de:ad:cb:48:fd:05:f7:de:da:11:d4:65: a9:ff:f8:24:6f:40:6d:be:45:6e:82:ce:57:a5:5e:66:a5:9e: de:66:38:4f:9f:b8:c8:50:79:f6:9e:eb:f2:a2:48:b3:f8:24: 9b:ce:f0:87:59:04:93:49:5a:2f:9e:b5:95:b8:11:db:45:c5: 0d:d4:30:5a:0e:32:f7:10:7b:60:2f:6b:83:ad:f4:6d:b5:75: d9:68:96:5d:58:46:c4:ff:a4:65:e0:d1:df:bd:36:c0:cf:2e: 72:d6:69:5b:50:c7:0b:e9:da:87:d3:de:c2:6b:d6:21:2e:bf: 55:ee:31:6a:17:82:2b:f5:39:60:1e:d4:c3:a4:ed:18:f4:74: fc:f6:ef:31:df:86:c4:11:5b:7c:30:d5:7f:9e:cf:fd:91:08: ac:69:dc:f4:ea:70:1a:4f:81:ec:ba:fc:16:ea:d2:31:b7:57: 07:ad:ee:f9:75:cc:09:97:4a:34:b1:fc:64:9d:29:dc:3a:f6: 97:61:d6:8b:f9:0b:4b:8f:3a:52:c1:d6:0d:f2:2c:3a:a0:c4: c3:0e:2c:c5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9WA/Q8dVPJPOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NWFlY2M0NTktYzg0MS00NTQ5LWE4ZDQtODJhYzFjNWYzMmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQCjXDManNOx0QNW8Pbd39vi0P4LOSZQxvpE XL6piB7B/9OIOJi0QfO9OZHHjYdIOfPyODQZlY8yCUB1S3vRN+/TRt0uEhzwbazQ YBGj1jXPLiv4YDmluoeqJyflhxUw03ZFlkD2G1sOxieAraqGoFW6xvkwewy1ly76 k8hmyOPG/GfybEfWdBPjc1fGDqxj5QCOaasaCpA8jkuglVUFSwlhyeHGEiL1kCYs yhxk+euistOhFYRAEaDOj7H22ReomIdBkxHOU0Ar4rXcC4nQNRwpz4+1Iem0GyP7 sD8eB8GQs+EypeRLj7PHepQZ6TS4tPNl0bqVKWCHaYW+IGGslQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMzJkuOGwLhdm7HrYSxZ27VxwxpDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTE2OGJmMDEtMGM4Yi0z YjVhLWI5MjUtYWMzMWE5OWU2ZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBAOXFfAHVQ8Z/krqDZ7bcEMOnsL+Z9xLMUTzK5RQ/F3HsQ4Us3xZM9 8+3erctI/QX33toR1GWp//gkb0BtvkVugs5XpV5mpZ7eZjhPn7jIUHn2nuvyokiz +CSbzvCHWQSTSVovnrWVuBHbRcUN1DBaDjL3EHtgL2uDrfRttXXZaJZdWEbE/6Rl 4NHfvTbAzy5y1mlbUMcL6dqH097Ca9YhLr9V7jFqF4Ir9TlgHtTDpO0Y9HT89u8x 34bEEVt8MNV/ns/9kQisadz06nAaT4HsuvwW6tIxt1cHre75dcwJl0o0sfxknSnc OvaXYdaL+QtLjzpSwdYN8iw6oMTDDizF -----END CERTIFICATE-----Generated at Thu Mar 26 12:57:29 2026 by rpki-client