$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7e5fd6b-e83c-30c9-8248-a6921d33938d.roa File: a7e5fd6b-e83c-30c9-8248-a6921d33938d.roa (raw, json) Hash identifier: u/LdfRNdLVBQ0Ycc/i4tYsfnuFmkw3+HFm2yH+hY2Us= Subject key identifier: 00:C6:12:CC:27:7A:4E:04:4F:0C:5F:5C:76:98:89:DE:96:14:11:41 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD52C6A3120D9B1421E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7e5fd6b-e83c-30c9-8248-a6921d33938d.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 397202 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d5:2c:6a:31:20:d9:b1:42:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=7f11a24d-2280-4721-ba9c-af5c586f9532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8c:3d:6d:b5:fd:ca:a3:d2:cf:08:dc:1d:df: 8f:5d:da:16:67:ee:37:97:7e:43:d2:7c:60:c4:3a: d2:d5:52:dc:6a:a9:4e:60:da:8c:b9:2f:39:7f:57: d0:ea:aa:c1:f1:17:14:b4:21:47:02:9d:02:ea:cd: 83:b6:ed:d0:89:f2:a3:b0:9b:c9:37:0f:96:db:ab: 84:06:e6:03:24:de:eb:2c:d9:a2:84:50:12:3b:9e: 12:02:23:e7:c3:be:37:d7:24:e1:0b:04:c8:ff:c0: aa:9b:f7:a5:81:04:a0:7b:fc:1d:52:0d:21:24:7a: 3b:3b:85:7d:e8:e7:28:5c:68:67:2b:74:db:da:5b: 8d:9d:31:c8:74:34:b4:ea:9e:a8:6f:f2:48:dd:79: 60:16:bb:15:2c:e0:ce:19:75:e3:b9:ff:0a:4a:15: 14:ee:13:b0:52:e1:9b:a8:e9:12:d1:95:a1:d3:54: ff:1d:54:f6:fa:31:5f:94:c2:92:de:7f:d5:eb:fc: 2b:68:7a:6b:e3:b5:9f:d9:46:37:b8:57:1e:43:92: 22:3b:d4:e8:74:fc:35:2e:7f:97:f1:d8:17:c3:34: 8d:f5:6b:ef:3a:87:22:d8:11:74:2c:94:c0:ce:6a: e1:b9:7a:6e:f2:5f:29:65:4a:3b:21:f9:04:24:57: 86:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C6:12:CC:27:7A:4E:04:4F:0C:5F:5C:76:98:89:DE:96:14:11:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7e5fd6b-e83c-30c9-8248-a6921d33938d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b8:df:9d:c5:3b:96:55:f6:a4:78:38:ef:7d:39:2e:51:32: 6b:ad:5c:b1:7b:9d:fb:2c:d0:00:37:ae:23:69:36:b6:cf:01: 3b:e9:47:f7:82:85:8a:88:66:76:b0:34:38:49:05:5d:36:f7: 56:a6:01:7d:06:12:24:d2:72:7e:b7:b2:23:66:df:6e:e9:4a: ad:5d:de:fc:8a:c0:d4:ff:8f:f8:33:01:16:ab:6e:1f:78:b5: 08:1e:a9:6b:a3:e7:a1:e1:7d:a6:a8:69:30:95:98:15:30:ac: 03:e0:27:0b:49:fb:c8:55:02:f3:99:68:05:2e:e7:46:d7:63: ec:b1:bf:9c:4b:51:a6:ae:20:a4:bd:8b:a0:29:eb:85:34:5f: 93:6b:6d:3d:05:96:30:9e:45:4b:18:be:dc:03:a9:6d:57:68: b2:e7:73:81:02:a6:d3:82:64:8b:a7:72:ce:3e:89:bf:21:ad: 6b:dd:07:95:c6:02:ea:e1:92:0a:f5:2f:b7:ee:cc:b6:35:41: 72:46:37:43:c3:c2:95:40:80:ba:ab:01:38:d0:eb:ad:e2:1e: 34:ba:0f:95:2c:f8:a4:f6:27:69:2b:4f:bc:49:59:f4:d8:65: 4d:1f:13:20:8c:df:0a:8f:31:48:ec:21:1a:a0:b4:19:10:dc: ea:c6:3f:88 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9UsajEg2bFCHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk N2YxMWEyNGQtMjI4MC00NzIxLWJhOWMtYWY1YzU4NmY5NTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhow9bbX9yqPSzwjcHd+PXdoWZ+43l35D0nxg xDrS1VLcaqlOYNqMuS85f1fQ6qrB8RcUtCFHAp0C6s2Dtu3QifKjsJvJNw+W26uE BuYDJN7rLNmihFASO54SAiPnw7431yThCwTI/8Cqm/elgQSge/wdUg0hJHo7O4V9 6OcoXGhnK3Tb2luNnTHIdDS06p6ob/JI3XlgFrsVLODOGXXjuf8KShUU7hOwUuGb qOkS0ZWh01T/HVT2+jFflMKS3n/V6/wraHpr47Wf2UY3uFceQ5IiO9TodPw1Ln+X 8dgXwzSN9WvvOoci2BF0LJTAzmrhuXpu8l8pZUo7IfkEJFeGTQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFADGEswnek4ETwxfXHaYid6WFBFBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTdlNWZkNmItZTgzYy0z MGM5LTgyNDgtYTY5MjFkMzM5MzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBwuN+dxTuWVfakeDjvfTkuUTJrrVyxe537LNAAN64jaTa2zwE76Uf3 goWKiGZ2sDQ4SQVdNvdWpgF9BhIk0nJ+t7IjZt9u6UqtXd78isDU/4/4MwEWq24f eLUIHqlro+eh4X2mqGkwlZgVMKwD4CcLSfvIVQLzmWgFLudG12Pssb+cS1GmriCk vYugKeuFNF+Ta209BZYwnkVLGL7cA6ltV2iy53OBAqbTgmSLp3LOPom/Ia1r3QeV xgLq4ZIK9S+37sy2NUFyRjdDw8KVQIC6qwE40Out4h40ug+VLPik9idpK0+8SVn0 2GVNHxMgjN8KjzFI7CEaoLQZENzqxj+I -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:11 2026 by rpki-client