$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa796d64-0ef9-3391-be74-a11a52a4376f.roa File: aa796d64-0ef9-3391-be74-a11a52a4376f.roa (raw, json) Hash identifier: w1eLQBBVmUgoC6LHYU9M2rYV2uhvA7lt5E2qPjo281o= Subject key identifier: D5:8C:01:E4:EA:23:70:F6:8E:FA:94:4F:71:C8:71:77:6C:27:86:9C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD8D047004DD85677BFD8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa796d64-0ef9-3391-be74-a11a52a4376f.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396550 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d8:d0:47:00:4d:d8:56:77:bf:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=cc32268e-8b01-4752-ac53-5c0e51ffe323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ac:72:4e:68:ac:b3:dc:e5:75:6e:72:50:5b: 6b:e7:71:d1:49:8a:10:1f:d0:72:58:04:22:12:8f: ea:5f:60:26:ac:ef:af:73:92:bd:32:5a:24:3f:5f: 0c:7a:32:3e:fb:61:85:b6:12:44:70:53:c6:ef:35: 4f:b9:28:c2:05:f6:9a:2d:92:49:21:45:d5:95:d2: 2c:b8:50:9b:93:26:85:16:dd:c7:db:6a:b3:9f:ea: 50:02:a0:b4:69:25:62:a7:03:6d:aa:6a:9b:79:7e: b1:93:b2:14:68:3b:2d:01:d6:fe:33:54:c6:b5:0b: 91:29:0a:2c:c5:c4:e3:48:14:55:80:ed:36:15:39: 0a:33:3c:28:9d:08:d9:0b:db:f3:51:fa:dc:90:64: 8c:20:f7:d0:a2:57:5e:64:dc:b2:4d:64:da:72:59: 21:14:58:89:f3:4b:25:bd:03:ba:8f:db:2e:d2:83: 9d:58:98:1c:42:f9:c7:85:bc:44:1f:33:16:92:0e: ff:8b:49:e9:c0:35:8d:c7:f8:e6:c7:6f:fd:be:ae: de:eb:9c:60:03:62:08:66:37:70:10:81:98:0d:26: 34:c5:f1:89:1e:a2:44:fe:03:5d:e8:9f:e3:8f:fc: 08:0d:e1:a4:c6:98:c4:fb:48:8c:82:3a:ab:d3:76: 58:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8C:01:E4:EA:23:70:F6:8E:FA:94:4F:71:C8:71:77:6C:27:86:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa796d64-0ef9-3391-be74-a11a52a4376f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:cf:20:75:ed:e3:7e:d3:22:3e:cd:d9:6d:e8:bf:be:60:93: 1e:28:c7:38:21:15:24:e3:86:55:10:f7:1e:6a:16:ad:aa:1b: 48:21:c6:d7:21:82:4a:f6:67:be:97:19:1b:64:6a:cc:58:9f: 1d:30:fe:f4:50:a4:85:2c:e5:d0:2d:83:bf:2a:8b:24:fc:8a: 44:ca:86:e7:f0:09:64:d3:2a:91:bb:e7:21:aa:88:8f:b6:bb: 71:08:b0:48:e9:64:02:7d:d1:61:00:7b:70:e8:c4:fa:b2:fa: bf:de:2d:21:cc:73:df:1d:95:7c:5e:cf:70:1b:f8:67:45:ab: d4:26:98:25:a8:a0:54:82:15:05:20:25:ed:c5:6a:03:06:42: 18:b4:c9:50:c3:0c:34:34:ed:d5:be:64:82:f9:4c:87:06:c3: 47:2b:0b:41:50:c9:3d:92:5c:c4:08:fa:07:4d:e9:c7:7d:12: 5c:a0:15:f4:e2:bd:13:03:a5:f4:3e:e5:59:52:47:fe:3c:ea: 80:cc:a9:67:96:03:34:b7:3a:ce:e3:11:dc:d2:39:7c:14:b9: 35:e1:32:43:b8:7e:9c:1a:73:4e:46:07:c7:a1:e7:26:6f:d6: 12:66:7f:59:09:23:25:a9:26:0d:d5:d2:33:3c:9c:27:07:21: 04:cd:0e:de -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9jQRwBN2FZ3v9gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk Y2MzMjI2OGUtOGIwMS00NzUyLWFjNTMtNWMwZTUxZmZlMzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqxyTmiss9zldW5yUFtr53HRSYoQH9ByWAQi Eo/qX2AmrO+vc5K9MlokP18MejI++2GFthJEcFPG7zVPuSjCBfaaLZJJIUXVldIs uFCbkyaFFt3H22qzn+pQAqC0aSVipwNtqmqbeX6xk7IUaDstAdb+M1TGtQuRKQos xcTjSBRVgO02FTkKMzwonQjZC9vzUfrckGSMIPfQoldeZNyyTWTaclkhFFiJ80sl vQO6j9su0oOdWJgcQvnHhbxEHzMWkg7/i0npwDWNx/jmx2/9vq7e65xgA2IIZjdw EIGYDSY0xfGJHqJE/gNd6J/jj/wIDeGkxpjE+0iMgjqr03ZYbQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNWMAeTqI3D2jvqUT3HIcXdsJ4acMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWE3OTZkNjQtMGVmOS0z MzkxLWJlNzQtYTExYTUyYTQzNzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJzyB17eN+0yI+zdlt6L++YJMeKMc4IRUk44ZVEPceahatqhtIIcbX IYJK9me+lxkbZGrMWJ8dMP70UKSFLOXQLYO/Kosk/IpEyobn8Alk0yqRu+chqoiP trtxCLBI6WQCfdFhAHtw6MT6svq/3i0hzHPfHZV8Xs9wG/hnRavUJpglqKBUghUF ICXtxWoDBkIYtMlQwww0NO3VvmSC+UyHBsNHKwtBUMk9klzECPoHTenHfRJcoBX0 4r0TA6X0PuVZUkf+POqAzKlnlgM0tzrO4xHc0jl8FLk14TJDuH6cGnNORgfHoecm b9YSZn9ZCSMlqSYN1dIzPJwnByEEzQ7e -----END CERTIFICATE-----Generated at Thu Mar 26 16:04:00 2026 by rpki-client