$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3bc1ea9-3bab-3964-9f59-3032a4c3cdf4.roa File: c3bc1ea9-3bab-3964-9f59-3032a4c3cdf4.roa (raw, json) Hash identifier: BbTHyyPb2qD6Q8Dt1jN36x8OcYeZrHlNZx9DH+8NKqM= Subject key identifier: A4:38:27:86:E2:70:A0:2D:6C:94:70:30:24:37:3B:15:6B:3D:CE:7C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFDFDB505CD28FB0E71900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3bc1ea9-3bab-3964-9f59-3032a4c3cdf4.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 397204 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:df:db:50:5c:d2:8f:b0:e7:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=8b6a7a9f-6250-4d77-b61c-90308b18f3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0f:9c:0c:b1:69:b2:30:99:32:df:c5:b2:81: 75:d0:90:d7:5e:69:3c:ad:36:23:91:f7:df:28:78: 8f:e0:30:b4:d0:8b:66:6a:aa:51:04:8c:04:57:2f: 7b:33:31:9a:f2:d4:ac:a6:b3:e2:37:e7:b6:fe:4a: 2e:d2:1f:a9:ec:55:6f:bd:aa:59:42:db:a7:78:9b: 2a:77:81:52:6a:fb:70:01:b1:9b:43:f9:ab:2c:a8: a7:0f:a5:42:cb:f8:61:8f:9e:b2:e8:06:d2:9d:2f: 9b:74:d5:f2:22:77:99:9c:77:65:08:ce:aa:6e:db: 62:52:37:e5:3b:3e:50:e5:5d:86:de:5f:2a:95:8e: c0:b3:ee:5a:37:3e:ca:f9:c6:8a:89:e5:20:cf:65: 21:63:03:dd:99:14:92:37:f3:23:97:58:48:46:45: 16:f4:df:4a:d6:e1:03:0d:eb:3d:17:4a:df:16:b9: ed:80:46:15:3a:03:8e:61:4d:2f:82:f9:95:f5:6e: 9f:b2:8f:0e:c7:a3:12:7f:39:c5:76:0e:4b:2e:0b: c0:a6:41:19:33:a6:bc:ad:eb:d5:64:a7:0b:92:3f: 2e:dc:2b:13:d9:1f:11:6e:7b:e0:cd:21:4a:7c:a1: 39:20:d0:2f:d9:e5:1c:9f:17:39:7c:95:51:62:c6: 3e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:38:27:86:E2:70:A0:2D:6C:94:70:30:24:37:3B:15:6B:3D:CE:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3bc1ea9-3bab-3964-9f59-3032a4c3cdf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:94:9c:37:48:7c:af:e5:45:48:b7:e9:16:3c:54:72:d7:cd: c3:25:fe:43:e5:d8:f5:6f:0e:6e:0b:68:6f:8e:7e:fd:d7:1e: e9:e6:34:d1:ce:dd:a2:e7:58:e7:08:c2:e4:c3:87:b6:d0:1b: be:3d:1a:a1:ae:2d:53:b1:5e:e3:18:03:08:d0:fa:9b:bb:bc: 2e:93:32:9e:dd:b8:1b:46:61:bd:04:ae:a9:b3:51:43:a6:eb: 53:9d:01:af:b2:3e:13:5c:f2:08:0c:83:81:a6:dc:1c:50:64: 59:a5:27:ec:49:d3:2e:81:ce:d9:41:76:0d:0b:8d:da:e1:33: 10:b1:98:4f:d1:9e:48:aa:77:2a:3e:c8:52:37:36:5f:93:1d: 29:49:4a:7d:14:34:de:32:49:c0:22:34:42:9b:36:00:7d:47: 43:e1:6b:1a:ef:c0:67:35:e2:98:43:db:6e:db:bd:3c:2a:71: 1c:1d:25:57:d5:a6:aa:e8:1c:26:b6:4e:d2:46:61:97:ed:2c: 8b:19:69:78:05:19:fe:4b:3f:dc:5f:82:9d:cf:ca:15:ad:bf: 4f:05:41:9a:22:1e:7d:b9:62:88:f6:de:1d:cb:fe:44:21:6a: 37:34:c6:f2:94:b0:23:ba:c7:54:c9:b3:26:c9:16:89:a1:98: fb:50:51:42 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9/bUFzSj7DnGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OGI2YTdhOWYtNjI1MC00ZDc3LWI2MWMtOTAzMDhiMThmM2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q+cDLFpsjCZMt/FsoF10JDXXmk8rTYjkfff KHiP4DC00ItmaqpRBIwEVy97MzGa8tSsprPiN+e2/kou0h+p7FVvvapZQtuneJsq d4FSavtwAbGbQ/mrLKinD6VCy/hhj56y6AbSnS+bdNXyIneZnHdlCM6qbttiUjfl Oz5Q5V2G3l8qlY7As+5aNz7K+caKieUgz2UhYwPdmRSSN/Mjl1hIRkUW9N9K1uED Des9F0rfFrntgEYVOgOOYU0vgvmV9W6fso8Ox6MSfznFdg5LLgvApkEZM6a8revV ZKcLkj8u3CsT2R8RbnvgzSFKfKE5INAv2eUcnxc5fJVRYsY+0QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKQ4J4bicKAtbJRwMCQ3OxVrPc58MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzNiYzFlYTktM2JhYi0z OTY0LTlmNTktMzAzMmE0YzNjZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAwlJw3SHyv5UVIt+kWPFRy183DJf5D5dj1bw5uC2hvjn791x7p5jTR zt2i51jnCMLkw4e20Bu+PRqhri1TsV7jGAMI0Pqbu7wukzKe3bgbRmG9BK6ps1FD putTnQGvsj4TXPIIDIOBptwcUGRZpSfsSdMugc7ZQXYNC43a4TMQsZhP0Z5Iqncq PshSNzZfkx0pSUp9FDTeMknAIjRCmzYAfUdD4Wsa78BnNeKYQ9tu2708KnEcHSVX 1aaq6Bwmtk7SRmGX7SyLGWl4BRn+Sz/cX4Kdz8oVrb9PBUGaIh59uWKI9t4dy/5E IWo3NMbylLAjusdUybMmyRaJoZj7UFFC -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:46 2026 by rpki-client