$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b56f7d81-9051-36a6-8a45-aa2311e3df96.roa File: b56f7d81-9051-36a6-8a45-aa2311e3df96.roa (raw, json) Hash identifier: f1UIzNkDw+1zSMpZa6Tq72jCc7tmb7E4ytL8VhIv/js= Subject key identifier: 53:19:14:6D:E8:20:ED:2E:32:35:64:75:43:AC:7F:B3:DA:93:22:48 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD758A60E3701400E0C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b56f7d81-9051-36a6-8a45-aa2311e3df96.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396582 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d7:58:a6:0e:37:01:40:0e:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=bfba477f-1f0b-4fac-90f1-bea07b188272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:aa:78:8b:49:6e:54:7e:0f:92:b4:91:6d:61: cd:20:6b:41:2e:ed:42:55:ef:b3:84:69:06:05:35: ad:af:c8:0a:bb:6b:03:58:f3:94:c0:de:5e:04:5d: e5:72:ff:04:cf:08:45:da:c7:a6:a7:ec:38:6d:f4: ac:45:77:55:8a:aa:84:ac:27:e1:e0:25:c2:4b:33: 75:d3:0a:a7:b1:0c:2a:b6:7c:de:b0:e1:de:f5:34: bc:4e:93:d2:a8:cc:10:a4:5b:7a:00:7f:7d:2f:9d: b4:eb:3b:19:b9:82:de:47:0e:ee:cc:29:66:6e:5b: e2:d3:8d:09:26:e6:1f:37:69:22:ce:f6:06:35:b7: 84:aa:00:79:dd:98:88:f2:a3:b4:19:89:bc:d9:01: 68:72:8b:9b:e1:57:a5:98:ab:4b:a4:d4:c9:a5:b4: 3b:29:94:fc:e6:80:8e:a8:2c:0e:15:cf:12:b8:fc: 7c:f2:77:da:68:22:54:83:a1:3b:55:86:9e:53:6b: ec:b1:ff:42:f5:34:b5:0a:1c:ba:28:35:6e:86:50: ec:a5:1e:2f:f5:84:b5:96:b5:7e:07:4e:35:b1:8c: dd:9b:2e:e2:9b:a5:db:d8:30:c6:ed:98:15:52:7b: 22:cd:de:48:ac:8b:c5:64:b1:46:77:78:2b:9b:16: e5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:19:14:6D:E8:20:ED:2E:32:35:64:75:43:AC:7F:B3:DA:93:22:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b56f7d81-9051-36a6-8a45-aa2311e3df96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:08:f1:38:ee:2d:5f:27:88:27:e5:7f:87:23:ad:59:ae:97: 45:ec:1e:0a:06:45:f5:b8:80:29:83:96:9f:1b:eb:18:dd:5c: 66:8f:9e:10:f3:21:46:25:20:c0:e8:8f:26:32:87:f2:05:14: 82:84:ad:a0:9c:75:e5:6b:ca:ca:7c:df:c9:f4:7e:89:8b:50: a2:ec:d5:8b:68:b6:2c:f8:ec:44:df:84:bb:5e:f4:8a:6f:b9: 8d:40:b8:31:80:47:a3:6e:ba:70:0a:6c:0e:ee:05:ed:98:77: 3f:0f:33:47:25:07:48:76:55:66:2f:e3:10:71:b1:86:c9:0d: 1c:e9:2b:72:38:8b:f4:98:0a:50:ea:e3:f8:03:c6:51:4c:3c: 7f:b6:5c:5d:36:60:b9:10:0b:0a:a2:64:a8:d4:78:e5:84:6e: 1a:11:cb:73:71:a2:f0:6f:e9:a8:7e:f3:4f:80:b7:e2:b4:b9: b2:79:fa:72:b1:0f:23:a6:1e:a5:7c:ad:95:b4:a4:28:c7:08: 48:66:d8:ce:f8:a9:80:b0:63:f7:31:ff:20:72:8f:37:2b:51: 96:50:27:f2:6d:33:30:16:c3:10:94:4e:66:eb:79:1d:c0:b3: 97:19:77:f4:5e:55:50:97:ce:b4:07:92:1d:6d:bc:03:cd:2c: e5:bc:6c:2f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9dYpg43AUAODIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YmZiYTQ3N2YtMWYwYi00ZmFjLTkwZjEtYmVhMDdiMTg4MjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqp4i0luVH4PkrSRbWHNIGtBLu1CVe+zhGkG BTWtr8gKu2sDWPOUwN5eBF3lcv8EzwhF2semp+w4bfSsRXdViqqErCfh4CXCSzN1 0wqnsQwqtnzesOHe9TS8TpPSqMwQpFt6AH99L5206zsZuYLeRw7uzClmblvi040J JuYfN2kizvYGNbeEqgB53ZiI8qO0GYm82QFocoub4VelmKtLpNTJpbQ7KZT85oCO qCwOFc8SuPx88nfaaCJUg6E7VYaeU2vssf9C9TS1Chy6KDVuhlDspR4v9YS1lrV+ B041sYzdmy7im6Xb2DDG7ZgVUnsizd5IrIvFZLFGd3grmxbl7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFMZFG3oIO0uMjVkdUOsf7PakyJIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjU2ZjdkODEtOTA1MS0z NmE2LThhNDUtYWEyMzExZTNkZjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAFCPE47i1fJ4gn5X+HI61ZrpdF7B4KBkX1uIApg5afG+sY3Vxmj54Q 8yFGJSDA6I8mMofyBRSChK2gnHXla8rKfN/J9H6Ji1Ci7NWLaLYs+OxE34S7XvSK b7mNQLgxgEejbrpwCmwO7gXtmHc/DzNHJQdIdlVmL+MQcbGGyQ0c6StyOIv0mApQ 6uP4A8ZRTDx/tlxdNmC5EAsKomSo1HjlhG4aEctzcaLwb+mofvNPgLfitLmyefpy sQ8jph6lfK2VtKQoxwhIZtjO+KmAsGP3Mf8gco83K1GWUCfybTMwFsMQlE5m63kd wLOXGXf0XlVQl860B5IdbbwDzSzlvGwv -----END CERTIFICATE-----Generated at Thu Mar 26 13:53:59 2026 by rpki-client