$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a82095ef-4e8d-3fc4-8ea7-95790abb5a93.roa File: a82095ef-4e8d-3fc4-8ea7-95790abb5a93.roa (raw, json) Hash identifier: HNtTMxisvC1tAFHrVz7z/dRkKhQx0YZ4/E/Dd9+Si5c= Subject key identifier: 05:87:6E:85:76:F4:F8:9A:CC:D3:45:85:B3:69:D6:7A:AF:AA:29:D8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD9045BBE57FD0847A600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a82095ef-4e8d-3fc4-8ea7-95790abb5a93.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 36619 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d9:04:5b:be:57:fd:08:47:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=bb040e66-aa23-4e45-a525-0ae0c8cbf7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:02:15:95:9e:1e:f2:10:f4:e1:ab:7d:fa:20: 8a:0b:98:25:af:33:85:de:74:3b:59:96:ad:f5:2c: 10:a0:cd:ce:51:ea:f9:57:0e:60:ab:71:99:01:21: 0b:ee:50:2e:6f:23:2c:8e:79:6d:55:d3:45:eb:73: da:d2:19:32:5e:8c:bc:cc:25:63:b5:e8:5a:8f:2d: 5f:26:f9:95:83:08:1e:f1:31:7c:4e:60:53:b1:6e: 96:a2:50:77:96:50:2a:85:7f:a6:02:97:d4:18:8b: 3e:ca:3a:7f:4a:60:c7:d8:88:c8:ee:4f:4a:d7:26: 07:12:26:c5:c0:3a:e8:37:ed:00:39:65:45:42:90: da:46:59:bc:a7:fd:ce:c4:74:eb:0b:8e:44:80:2b: 4c:35:e8:12:a5:95:ea:8f:45:b5:49:9a:e2:80:fe: 05:db:b7:c4:e9:81:73:bf:29:0c:b9:a4:a4:4d:68: dd:53:6b:b6:7b:b1:cd:d5:07:d5:15:19:cf:60:6d: 76:a4:b7:6d:c7:31:82:5c:33:8d:1d:7a:0f:6f:b7: 55:ba:bc:86:4b:f4:69:4f:47:f9:e4:a3:af:f2:02: 0b:b1:dc:46:38:9b:7c:dc:61:0e:03:31:43:60:db: e7:96:6f:38:b9:13:e6:2e:d7:35:9b:cb:50:e8:c3: 67:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:87:6E:85:76:F4:F8:9A:CC:D3:45:85:B3:69:D6:7A:AF:AA:29:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a82095ef-4e8d-3fc4-8ea7-95790abb5a93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ad:11:84:8a:0d:db:ff:f2:57:39:a7:2e:86:d9:b9:56:0a: a0:8b:c6:6b:85:37:59:26:0f:8f:a3:08:81:e8:ca:1a:62:a3: eb:2d:b4:78:ab:5f:da:56:31:96:9e:9f:d5:b6:d6:ce:68:82: 29:d6:e5:b6:7b:f0:7a:b6:b3:08:b0:f5:ca:cd:4e:9e:c5:51: d7:9b:39:88:b4:72:cb:1e:7a:72:b9:7f:4a:de:96:63:db:e5: 37:99:e9:3d:fe:73:dd:6b:2d:58:a1:3a:0d:57:78:f1:13:f4: 10:48:ed:67:ea:9b:01:b0:12:f7:18:98:52:0c:72:52:64:7c: 51:0b:a8:26:e1:4b:4f:0e:6c:6d:35:f9:f6:d9:58:79:95:a5: d2:2f:18:c8:94:cf:6a:02:c0:81:ea:c4:71:97:fa:d0:c5:4a: 47:45:b2:07:c9:4f:56:b5:50:96:f5:f9:3e:06:9e:56:34:09: 7c:43:4a:6e:63:8d:39:42:f7:ee:01:c4:b7:56:e7:10:30:9a: d3:c7:1f:ef:cc:58:46:9e:b5:0a:49:76:cf:a7:18:f5:03:a0: 79:f1:c1:8d:92:82:9d:da:75:8d:13:ce:72:19:cd:51:ac:a7: f4:c9:27:78:d2:7a:69:ea:09:47:79:e8:28:86:dc:59:cb:a6: a1:5e:3a:12 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9kEW75X/QhHpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YmIwNDBlNjYtYWEyMy00ZTQ1LWE1MjUtMGFlMGM4Y2JmN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwIVlZ4e8hD04at9+iCKC5glrzOF3nQ7WZat 9SwQoM3OUer5Vw5gq3GZASEL7lAubyMsjnltVdNF63Pa0hkyXoy8zCVjtehajy1f JvmVgwge8TF8TmBTsW6WolB3llAqhX+mApfUGIs+yjp/SmDH2IjI7k9K1yYHEibF wDroN+0AOWVFQpDaRlm8p/3OxHTrC45EgCtMNegSpZXqj0W1SZrigP4F27fE6YFz vykMuaSkTWjdU2u2e7HN1QfVFRnPYG12pLdtxzGCXDONHXoPb7dVuryGS/RpT0f5 5KOv8gILsdxGOJt83GEOAzFDYNvnlm84uRPmLtc1m8tQ6MNn0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAWHboV29PiazNNFhbNp1nqvqinYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTgyMDk1ZWYtNGU4ZC0z ZmM0LThlYTctOTU3OTBhYmI1YTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB/rRGEig3b//JXOacuhtm5Vgqgi8ZrhTdZJg+PowiB6MoaYqPrLbR4 q1/aVjGWnp/VttbOaIIp1uW2e/B6trMIsPXKzU6exVHXmzmItHLLHnpyuX9K3pZj 2+U3mek9/nPday1YoToNV3jxE/QQSO1n6psBsBL3GJhSDHJSZHxRC6gm4UtPDmxt Nfn22Vh5laXSLxjIlM9qAsCB6sRxl/rQxUpHRbIHyU9WtVCW9fk+Bp5WNAl8Q0pu Y405QvfuAcS3VucQMJrTxx/vzFhGnrUKSXbPpxj1A6B58cGNkoKd2nWNE85yGc1R rKf0ySd40npp6glHeegohtxZy6ahXjoS -----END CERTIFICATE-----Generated at Fri Mar 27 01:55:26 2026 by rpki-client