$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1bc8b20-7f23-3d1e-a758-dee058aa7e80.roa File: b1bc8b20-7f23-3d1e-a758-dee058aa7e80.roa (raw, json) Hash identifier: 6m6zRQwfZND5QoBdm6ltRYjtbUEd7FpLCQvcRbI7LU4= Subject key identifier: 67:18:3F:77:40:C6:5D:08:A7:B2:3F:FE:8B:97:E8:E5:82:3E:C1:0A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFE26B3EEB006EB39D9B34 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1bc8b20-7f23-3d1e-a758-dee058aa7e80.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 397208 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:e2:6b:3e:eb:00:6e:b3:9d:9b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=bec5b6ae-9f4a-4aff-8cc5-b6f393f322ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:46:1c:aa:65:a6:23:11:55:1f:4e:02:e5:95: 2e:c2:02:db:18:7f:0a:2c:17:ea:05:f3:57:14:13: 86:9e:38:5c:ab:e1:d7:63:05:6e:57:33:10:18:1c: 34:5a:39:31:48:5c:e1:5f:88:8c:dc:91:71:4e:24: 48:68:ad:4a:a2:90:c1:61:5f:24:9a:9c:16:ea:95: 30:f3:5f:62:23:b4:3f:19:f1:47:ac:f5:a6:db:c2: bc:e1:ce:f0:71:dd:09:df:5b:d1:b6:f0:b0:92:df: 55:80:9d:9a:fb:c8:fe:0f:3a:a6:0e:4b:e0:74:10: 27:cd:ab:e5:ca:5d:05:9a:66:53:32:90:70:be:c5: 87:42:d7:ee:ca:fc:f3:7a:93:71:7b:7e:66:41:37: 97:be:93:9a:49:07:92:54:56:8b:17:22:3b:62:23: 63:1c:8f:ae:c7:c5:ba:ba:7f:3a:8f:ec:c8:02:8d: 8e:a1:2d:b0:b5:d1:26:3e:31:df:00:fc:4e:d2:33: e3:23:89:ed:c7:c6:7f:68:f6:7c:99:49:8b:66:a0: 11:27:42:91:42:d8:17:fe:42:9a:59:e4:4c:02:b3: 5c:c8:59:62:de:10:99:57:0c:35:02:e7:af:40:6a: 78:99:98:a6:0a:6a:6c:c9:95:0b:3a:a9:58:80:c3: 7e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:18:3F:77:40:C6:5D:08:A7:B2:3F:FE:8B:97:E8:E5:82:3E:C1:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1bc8b20-7f23-3d1e-a758-dee058aa7e80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:1b:da:e9:61:52:e4:36:7c:f7:8e:64:fd:51:64:33:1f:1b: f0:da:7f:77:66:d8:bd:6e:76:85:06:fe:cf:4f:8d:39:60:a2: 8f:02:00:cd:9f:06:88:47:0a:8c:ad:7d:1a:e9:cd:a7:38:84: b5:e8:3a:53:6f:b1:76:3c:c9:74:b0:bc:9f:9c:27:5d:78:ca: 99:6f:de:9b:1b:91:4f:86:91:60:85:59:c1:1a:3b:2d:cd:29: 05:2b:2c:38:28:95:72:22:ac:58:5e:7f:26:c7:d8:f1:68:f6: 18:c1:ab:a0:60:b8:7a:01:d0:1d:10:31:07:dc:e2:23:6a:8d: 19:34:b6:05:8e:50:c5:87:67:df:e5:48:21:ae:b5:66:c9:93: f7:a2:e9:15:d6:4f:0b:af:96:18:b9:67:d3:b7:27:30:38:8c: cb:ac:7e:38:5e:30:d1:d5:f2:1c:a7:48:64:18:94:90:9a:98: d1:0e:c7:3c:1a:05:fa:f0:bb:df:72:86:46:37:58:c2:e7:5f: 48:7d:1f:1f:ab:da:f2:a3:31:e5:74:98:fd:4f:d4:f2:c6:31: 83:2f:50:37:9e:88:db:92:f0:20:f1:41:17:52:72:b0:15:8a: c3:b9:43:60:86:d8:dd:d4:0a:39:0c:f8:62:43:df:f4:e6:ca: 49:0f:8b:ed -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/+JrPusAbrOdmzQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YmVjNWI2YWUtOWY0YS00YWZmLThjYzUtYjZmMzkzZjMyMmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUYcqmWmIxFVH04C5ZUuwgLbGH8KLBfqBfNX FBOGnjhcq+HXYwVuVzMQGBw0WjkxSFzhX4iM3JFxTiRIaK1KopDBYV8kmpwW6pUw 819iI7Q/GfFHrPWm28K84c7wcd0J31vRtvCwkt9VgJ2a+8j+DzqmDkvgdBAnzavl yl0FmmZTMpBwvsWHQtfuyvzzepNxe35mQTeXvpOaSQeSVFaLFyI7YiNjHI+ux8W6 un86j+zIAo2OoS2wtdEmPjHfAPxO0jPjI4ntx8Z/aPZ8mUmLZqARJ0KRQtgX/kKa WeRMArNcyFli3hCZVww1AuevQGp4mZimCmpsyZULOqlYgMN+7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGcYP3dAxl0Ip7I//ouX6OWCPsEKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjFiYzhiMjAtN2YyMy0z ZDFlLWE3NTgtZGVlMDU4YWE3ZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBqG9rpYVLkNnz3jmT9UWQzHxvw2n93Zti9bnaFBv7PT405YKKPAgDN nwaIRwqMrX0a6c2nOIS16DpTb7F2PMl0sLyfnCddeMqZb96bG5FPhpFghVnBGjst zSkFKyw4KJVyIqxYXn8mx9jxaPYYwaugYLh6AdAdEDEH3OIjao0ZNLYFjlDFh2ff 5UghrrVmyZP3oukV1k8Lr5YYuWfTtycwOIzLrH44XjDR1fIcp0hkGJSQmpjRDsc8 GgX68LvfcoZGN1jC519IfR8fq9ryozHldJj9T9TyxjGDL1A3nojbkvAg8UEXUnKw FYrDuUNghtjd1Ao5DPhiQ9/05spJD4vt -----END CERTIFICATE-----Generated at Thu Mar 26 14:27:47 2026 by rpki-client