$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531e496-8f60-365a-9f71-97f429bea4f3.roa File: a531e496-8f60-365a-9f71-97f429bea4f3.roa (raw, json) Hash identifier: 3eJI2hP+9UIMU0s0YDTSe2lVjPhFvMEWANaxMF4YL8E= Subject key identifier: 31:3F:81:00:45:98:15:E4:0B:07:13:D2:95:9A:C4:E2:CE:72:B3:B4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD935A65BD56036EA7DE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531e496-8f60-365a-9f71-97f429bea4f3.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 40717 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d9:35:a6:5b:d5:60:36:ea:7d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=62929c1d-821f-41c0-bb38-8dcaf6e2f638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:22:53:90:65:6e:49:48:18:e9:0b:db:49:87: 7a:64:79:4a:78:f0:fa:af:1d:a5:75:a0:46:20:0e: ab:30:b4:bf:61:40:6b:65:5c:a5:1e:a8:d9:ac:ca: d9:f0:cf:2f:ac:a5:cc:e4:6f:d7:38:34:a2:18:0b: 40:94:63:3a:50:ce:c3:34:05:41:d7:8d:eb:1c:02: 1d:8e:15:5b:73:fe:bd:62:d1:6a:df:e0:e9:71:53: 24:a7:d8:a2:25:88:07:7c:82:70:e2:d9:71:e0:21: 8e:83:30:a3:6f:d6:74:cd:37:37:0d:63:ab:82:bd: 2d:88:5a:2f:ac:c8:a5:fe:54:3e:16:ea:d1:a4:ca: e9:27:3f:8e:f3:46:05:7b:88:d9:d2:95:4a:97:64: 74:12:76:37:f5:f2:75:d5:f5:af:b0:01:31:6b:8f: 0f:c0:99:cd:4a:bb:b8:49:85:cb:a2:7c:d3:7d:83: a1:08:ba:49:f8:e0:35:07:20:c8:83:99:0d:68:81: 84:63:85:f4:a7:cf:3d:fd:8f:b0:94:22:f1:cf:c7: d5:fa:48:b7:04:32:18:43:14:dd:87:56:6b:b1:6c: bd:46:85:be:46:86:b8:75:f0:ef:7f:5f:de:3d:95: d7:34:7d:aa:dd:11:00:5a:11:66:dd:b6:de:02:5a: c7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3F:81:00:45:98:15:E4:0B:07:13:D2:95:9A:C4:E2:CE:72:B3:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531e496-8f60-365a-9f71-97f429bea4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:cf:39:db:e4:55:e9:68:de:3e:48:0f:af:44:fb:50:f1:c1: d5:22:1f:ab:3a:56:ce:dc:7d:c6:21:9f:e8:21:69:df:bc:47: 53:1b:cc:8e:e2:d9:6d:da:54:52:a4:77:ed:07:d4:f2:bc:09: 24:92:22:8f:27:aa:24:cf:f3:43:c3:1b:60:c4:2b:66:ee:ce: 2e:1c:92:ae:17:3d:44:38:1b:f0:ac:b5:de:6f:4e:c9:04:4d: 25:bc:88:02:b1:aa:bf:17:96:b9:b2:c3:07:da:b3:13:89:0c: fc:e7:df:74:05:f7:c7:8d:b2:56:11:33:6f:fc:c3:a5:b6:7d: 61:7d:8f:87:35:c4:a7:6d:62:08:e2:4e:f8:d8:05:c5:f4:f2: 59:57:8a:d7:78:25:f0:27:8c:f8:c5:cb:07:11:d0:1e:37:86: c7:54:b3:e6:6f:fa:b4:e0:3f:33:91:07:2d:a9:0e:ee:23:4d: 0e:fb:8f:18:f8:af:4d:28:7c:8c:e9:ba:d7:a4:2f:69:27:0b: 1e:9c:bf:26:ed:f6:3b:c1:5a:dd:e8:20:6b:c7:e4:89:e1:9c: 00:6b:b1:d7:90:f7:e7:33:b1:70:98:81:c4:1f:74:8a:de:1d: a7:77:91:72:92:86:22:38:2c:3d:6d:c0:9e:f1:c0:d1:19:47: 6c:64:e8:0a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9k1plvVYDbqfeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NjI5MjljMWQtODIxZi00MWMwLWJiMzgtOGRjYWY2ZTJmNjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiJTkGVuSUgY6QvbSYd6ZHlKePD6rx2ldaBG IA6rMLS/YUBrZVylHqjZrMrZ8M8vrKXM5G/XODSiGAtAlGM6UM7DNAVB143rHAId jhVbc/69YtFq3+DpcVMkp9iiJYgHfIJw4tlx4CGOgzCjb9Z0zTc3DWOrgr0tiFov rMil/lQ+FurRpMrpJz+O80YFe4jZ0pVKl2R0EnY39fJ11fWvsAExa48PwJnNSru4 SYXLonzTfYOhCLpJ+OA1ByDIg5kNaIGEY4X0p889/Y+wlCLxz8fV+ki3BDIYQxTd h1ZrsWy9RoW+Roa4dfDvf1/ePZXXNH2q3REAWhFm3bbeAlrH2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDE/gQBFmBXkCwcT0pWaxOLOcrO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTUzMWU0OTYtOGY2MC0z NjVhLTlmNzEtOTdmNDI5YmVhNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQACzznb5FXpaN4+SA+vRPtQ8cHVIh+rOlbO3H3GIZ/oIWnfvEdTG8yO 4tlt2lRSpHftB9TyvAkkkiKPJ6okz/NDwxtgxCtm7s4uHJKuFz1EOBvwrLXeb07J BE0lvIgCsaq/F5a5ssMH2rMTiQz85990BffHjbJWETNv/MOltn1hfY+HNcSnbWII 4k742AXF9PJZV4rXeCXwJ4z4xcsHEdAeN4bHVLPmb/q04D8zkQctqQ7uI00O+48Y +K9NKHyM6brXpC9pJwsenL8m7fY7wVrd6CBrx+SJ4ZwAa7HXkPfnM7FwmIHEH3SK 3h2nd5FykoYiOCw9bcCe8cDRGUdsZOgK -----END CERTIFICATE-----Generated at Thu Mar 26 18:18:28 2026 by rpki-client