$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa6de5e-1ece-32fe-ba13-6bee32a73eac.roa File: aaa6de5e-1ece-32fe-ba13-6bee32a73eac.roa (raw, json) Hash identifier: o+5m1SEzO4WrBkpWeiM4IW0qu85cHbPDnZDduLY5oXE= Subject key identifier: EF:D8:A4:46:69:9C:02:AF:0A:E3:E9:2B:95:5A:A6:6E:C2:F6:84:AB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD7766EFB6C2E435C0640 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa6de5e-1ece-32fe-ba13-6bee32a73eac.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396585 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d7:76:6e:fb:6c:2e:43:5c:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=68fc837f-fd22-41ef-b4d9-16983acb99c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4e:d1:c1:ee:5e:d6:de:5c:a4:0f:67:fb:22: a8:22:fa:30:08:20:62:d3:88:0e:78:cc:10:13:5c: 3e:b9:ae:16:14:67:3e:0a:69:ce:73:19:e3:50:14: 24:78:09:9f:89:bb:5a:d8:51:42:fd:05:2f:9a:9a: 46:cd:ab:26:ec:ac:0b:5e:f6:de:50:04:67:03:e1: d4:70:fd:ee:d2:d4:af:b2:7e:7e:df:1c:aa:f6:f1: 58:29:4f:8d:23:e5:81:f0:04:61:cf:c4:7c:26:6e: 7e:81:1e:4f:f6:07:c5:b1:de:6b:af:67:4d:82:26: 62:ed:0d:d3:36:30:e4:2e:fc:3a:fc:1a:23:2c:70: 41:d8:93:72:2c:93:7a:ab:9a:cf:d1:ad:98:6c:71: bb:51:e5:ce:a8:2e:f3:89:4c:7e:7d:89:57:2c:c2: fb:83:86:3b:43:0e:40:d7:98:c7:04:55:17:ca:3a: 14:20:61:57:ea:21:77:c7:1c:4d:2e:8c:af:b1:08: 1a:d1:f1:8a:32:d8:66:b8:87:35:60:b5:b6:43:47: 9d:01:01:08:73:42:51:e6:26:4b:6b:8d:39:ba:fa: 9c:d3:5c:80:4d:c6:e2:4d:25:23:37:8e:fc:70:06: 15:85:63:2b:ec:ef:22:e5:fa:ce:b5:9d:c8:7e:20: e0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D8:A4:46:69:9C:02:AF:0A:E3:E9:2B:95:5A:A6:6E:C2:F6:84:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa6de5e-1ece-32fe-ba13-6bee32a73eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:0f:6f:c5:aa:d3:1b:79:a2:94:9d:37:7c:c2:c5:58:fd:39: ce:f7:ba:0a:47:2c:58:59:de:9b:f9:9d:89:47:3f:cc:c7:44: 84:2a:c5:24:30:80:c5:31:ce:17:27:22:01:f0:9c:d5:61:19: 82:33:20:da:21:8d:ba:13:75:00:57:a6:cf:0f:bb:92:e4:13: 56:59:4c:e8:32:21:a4:11:5b:c1:c6:14:5d:4f:d8:7c:52:43: bd:8c:c2:56:cc:4f:c4:d9:39:df:2d:f0:95:d6:14:43:a9:0e: 4e:81:81:fa:d5:b9:d0:0d:98:d2:a8:ac:83:42:c7:76:7d:43: 89:45:c1:ee:08:db:ee:a9:17:5d:7b:86:22:fa:c3:ad:00:c2: 11:5e:c2:aa:ab:dc:2e:a3:f7:07:90:d1:e4:7c:a5:42:96:db: e6:69:7e:5d:4c:88:5c:40:6f:68:b2:bd:d9:25:7b:8d:9c:8a: 88:34:75:f3:9d:ca:fd:42:3f:64:e5:bd:7a:46:f0:e1:d8:9c: 11:5a:97:6d:8a:b6:fd:6e:d3:f4:31:9d:9c:8d:e6:86:c9:97: f1:bb:30:1d:66:f7:30:5a:18:ae:89:38:1d:44:d4:9d:dc:25: ec:9e:e0:8f:13:2c:5b:df:6e:50:1e:32:c9:fa:60:8c:5c:29: 90:aa:0f:4b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9d2bvtsLkNcBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NjhmYzgzN2YtZmQyMi00MWVmLWI0ZDktMTY5ODNhY2I5OWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA007Rwe5e1t5cpA9n+yKoIvowCCBi04gOeMwQ E1w+ua4WFGc+CmnOcxnjUBQkeAmfibta2FFC/QUvmppGzasm7KwLXvbeUARnA+HU cP3u0tSvsn5+3xyq9vFYKU+NI+WB8ARhz8R8Jm5+gR5P9gfFsd5rr2dNgiZi7Q3T NjDkLvw6/BojLHBB2JNyLJN6q5rP0a2YbHG7UeXOqC7ziUx+fYlXLML7g4Y7Qw5A 15jHBFUXyjoUIGFX6iF3xxxNLoyvsQga0fGKMthmuIc1YLW2Q0edAQEIc0JR5iZL a405uvqc01yATcbiTSUjN478cAYVhWMr7O8i5frOtZ3IfiDgUwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO/YpEZpnAKvCuPpK5Vapm7C9oSrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWFhNmRlNWUtMWVjZS0z MmZlLWJhMTMtNmJlZTMyYTczZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQADD2/FqtMbeaKUnTd8wsVY/TnO97oKRyxYWd6b+Z2JRz/Mx0SEKsUk MIDFMc4XJyIB8JzVYRmCMyDaIY26E3UAV6bPD7uS5BNWWUzoMiGkEVvBxhRdT9h8 UkO9jMJWzE/E2TnfLfCV1hRDqQ5OgYH61bnQDZjSqKyDQsd2fUOJRcHuCNvuqRdd e4Yi+sOtAMIRXsKqq9wuo/cHkNHkfKVCltvmaX5dTIhcQG9osr3ZJXuNnIqINHXz ncr9Qj9k5b16RvDh2JwRWpdtirb9btP0MZ2cjeaGyZfxuzAdZvcwWhiuiTgdRNSd 3CXsnuCPEyxb325QHjLJ+mCMXCmQqg9L -----END CERTIFICATE-----Generated at Thu Mar 26 14:09:50 2026 by rpki-client