$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3423c00-b230-3f93-8431-4c2418fe72ca.roa File: b3423c00-b230-3f93-8431-4c2418fe72ca.roa (raw, json) Hash identifier: fLXFYzVfDi6HdeFG25YF7apFlu8lcOb5jSKuDH+O82k= Subject key identifier: 54:7A:33:FD:27:4A:7C:EF:81:36:49:E0:4A:08:FC:08:0E:6D:42:B6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD976BE08538C452A4C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3423c00-b230-3f93-8431-4c2418fe72ca.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 36620 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d9:76:be:08:53:8c:45:2a:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=097d0e09-836f-4af7-843b-e25c10c249af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c1:a0:0a:91:64:86:cb:ef:ed:3f:6a:37:1b: 7d:04:a2:18:9e:c7:b8:d9:9e:d7:6d:42:6d:ff:ce: b7:ea:01:9b:27:e4:2d:c4:06:43:ef:50:0d:b7:81: e0:cb:df:ac:32:e0:cc:cb:0f:12:91:d6:d8:a7:17: 24:15:72:82:ed:59:c8:18:34:27:ed:74:d9:03:22: 02:a4:8e:b6:f5:49:07:c3:5c:1a:9a:df:e6:0b:08: 89:28:2b:a7:65:6f:ed:b8:5d:be:fb:29:c5:40:8c: 2a:3e:e3:96:ce:da:06:e4:cd:26:09:c5:65:3c:46: 88:97:ad:f5:c4:75:cb:fd:50:8b:83:ba:06:66:01: be:bd:c8:98:04:15:0a:b8:16:0e:59:0c:a8:49:f2: 96:12:29:80:20:ab:c0:10:7c:a8:a7:d7:99:92:25: f8:41:9c:fd:36:c2:de:8c:01:5f:f1:36:b9:da:19: 4b:df:6e:97:34:6e:86:90:13:9d:91:af:14:e6:e4: c4:28:70:52:8d:ec:bf:26:83:2b:ec:a7:7d:b7:2f: 44:9e:49:ab:0c:ca:c5:ff:e6:aa:c9:cb:d9:20:d6: fe:c1:71:70:e3:25:0b:f1:bc:4b:de:93:65:03:1b: bb:df:af:ac:43:f3:07:84:49:25:df:69:fc:c0:d0: 28:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7A:33:FD:27:4A:7C:EF:81:36:49:E0:4A:08:FC:08:0E:6D:42:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3423c00-b230-3f93-8431-4c2418fe72ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:f9:52:04:51:bf:7a:3d:88:43:f5:f2:96:37:cc:b4:94:5e: db:20:ed:ed:12:63:dd:0a:0e:23:72:7f:05:23:e0:a0:2a:12: 6f:3c:2c:c3:1c:35:f4:eb:2a:9a:6b:67:27:70:b1:4c:ba:ce: 9e:92:d9:1a:6c:f8:7e:3a:aa:27:e4:24:52:25:04:1f:b6:00: fc:3f:09:20:45:f2:d4:b0:98:80:25:b5:cc:dd:f5:ac:13:dc: c6:b5:cf:02:1f:d6:e0:c0:24:e0:ea:42:7c:64:d0:fb:30:7b: df:f6:a4:41:bb:75:f2:63:10:37:96:0b:20:fb:ac:d1:4b:05: e6:ee:82:67:8d:8b:18:2e:fc:67:f5:3b:63:0a:40:c7:e7:34: 0c:ec:3e:b9:72:f0:51:85:5c:ab:24:8c:10:77:b2:38:f7:8d: 87:64:5c:23:6e:88:e9:d6:78:54:c3:28:07:ae:3f:9f:bb:a7: 0c:4d:ed:23:fa:a0:4b:45:9d:96:c0:1a:d3:e8:49:16:29:89: d1:e8:5d:48:34:9b:c7:11:a3:0d:7b:fb:47:6c:9d:ac:24:fc: ab:b9:e9:98:88:e3:89:71:c6:d3:a3:41:10:23:9c:99:8f:bb: bb:ad:df:2b:cc:78:b0:c5:04:0b:16:b8:06:24:f0:20:32:9a: 4f:a9:a4:86 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9l2vghTjEUqTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MDk3ZDBlMDktODM2Zi00YWY3LTg0M2ItZTI1YzEwYzI0OWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcGgCpFkhsvv7T9qNxt9BKIYnse42Z7XbUJt /8636gGbJ+QtxAZD71ANt4Hgy9+sMuDMyw8SkdbYpxckFXKC7VnIGDQn7XTZAyIC pI629UkHw1wamt/mCwiJKCunZW/tuF2++ynFQIwqPuOWztoG5M0mCcVlPEaIl631 xHXL/VCLg7oGZgG+vciYBBUKuBYOWQyoSfKWEimAIKvAEHyop9eZkiX4QZz9NsLe jAFf8Ta52hlL326XNG6GkBOdka8U5uTEKHBSjey/JoMr7Kd9ty9EnkmrDMrF/+aq ycvZINb+wXFw4yUL8bxL3pNlAxu736+sQ/MHhEkl32n8wNAorwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFR6M/0nSnzvgTZJ4EoI/AgObUK2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjM0MjNjMDAtYjIzMC0z ZjkzLTg0MzEtNGMyNDE4ZmU3MmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBc+VIEUb96PYhD9fKWN8y0lF7bIO3tEmPdCg4jcn8FI+CgKhJvPCzD HDX06yqaa2cncLFMus6ektkabPh+Oqon5CRSJQQftgD8PwkgRfLUsJiAJbXM3fWs E9zGtc8CH9bgwCTg6kJ8ZND7MHvf9qRBu3XyYxA3lgsg+6zRSwXm7oJnjYsYLvxn 9TtjCkDH5zQM7D65cvBRhVyrJIwQd7I4942HZFwjbojp1nhUwygHrj+fu6cMTe0j +qBLRZ2WwBrT6EkWKYnR6F1INJvHEaMNe/tHbJ2sJPyruemYiOOJccbTo0EQI5yZ j7u7rd8rzHiwxQQLFrgGJPAgMppPqaSG -----END CERTIFICATE-----Generated at Thu Mar 26 20:27:26 2026 by rpki-client