$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9bdb552-3747-3060-8c91-220dceab6cf6.roa File: c9bdb552-3747-3060-8c91-220dceab6cf6.roa (raw, json) Hash identifier: yj2Im5g6xyUE1djLDQmYQ4Ip0b73p+xhmvLHbrn6AOw= Subject key identifier: 8D:59:FC:88:4D:0F:6B:23:0E:CC:38:D9:31:F6:3C:D3:BD:12:A5:90 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD4B639EAC496019475C8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9bdb552-3747-3060-8c91-220dceab6cf6.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 397196 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d4:b6:39:ea:c4:96:01:94:75:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=12d6165f-3ecc-4350-856b-dbffd8657183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cc:0e:15:9e:a7:0c:9c:8c:8d:c3:45:01:ab: c4:38:a7:fc:52:23:c2:dd:d4:dc:f1:50:a2:13:2a: 09:61:bd:6e:8e:ab:68:5e:79:ad:91:2c:a4:b6:0e: 81:8c:29:be:bd:a1:b6:ce:d6:96:e9:13:b1:2d:83: a1:6d:00:c1:36:ce:51:4c:4d:7d:fd:21:db:f6:80: be:3b:67:9b:81:b8:dd:97:3a:90:b2:65:57:47:3d: 13:60:34:71:86:27:91:15:de:97:22:dd:10:2a:72: 74:1c:ff:3f:dd:74:78:73:2c:61:1d:4e:c3:f1:5e: 3f:e6:ba:ed:39:f1:51:76:d2:72:9b:af:2d:84:ed: bc:05:ee:4b:99:38:fa:68:cf:0a:e7:97:9c:31:08: e0:ca:89:7f:de:62:3f:07:77:bb:fe:13:b3:d6:78: ad:d5:fc:75:96:b9:85:a5:ca:67:69:26:54:d7:e3: aa:94:8e:2d:b2:8a:fb:75:3e:d1:79:9b:c6:e9:fe: 3e:b6:9b:26:3f:09:c2:88:5b:bb:aa:39:d9:1b:02: 56:9f:95:f8:18:22:8e:4e:f9:a6:52:e1:ce:b3:6b: c7:71:6e:62:5b:79:ba:4b:2f:60:0c:da:c3:fd:b4: 5a:21:98:f3:43:b2:47:9d:90:8e:35:6b:43:4a:7f: d4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:59:FC:88:4D:0F:6B:23:0E:CC:38:D9:31:F6:3C:D3:BD:12:A5:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9bdb552-3747-3060-8c91-220dceab6cf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:83:a5:aa:da:c2:78:ac:a8:10:16:b5:e7:a3:74:97:81:3b: fd:de:6e:71:55:d4:7c:d4:b5:7c:ac:51:36:66:18:a1:88:6d: c5:b6:4d:f9:98:40:7b:b7:09:fe:42:06:05:6a:63:47:c4:9d: 0c:89:33:cb:14:60:14:ad:cf:d6:b5:96:9f:b9:46:a1:0c:42: 2e:68:23:6d:c2:67:6d:e4:c2:2a:29:b6:25:72:17:d7:75:a8: 44:3e:c6:02:dd:e4:b1:88:fb:92:f6:bd:8e:b7:6e:a6:4c:d3: 26:74:d1:9c:6c:9c:df:1b:3e:69:58:bc:b0:8c:0e:62:40:26: ef:e8:3f:e8:ef:8f:08:e6:e0:6c:fc:13:df:f3:f0:5a:dd:e5: 63:ef:06:6a:89:08:31:a4:d0:b5:9d:8a:2e:bc:12:af:c6:59: 7a:56:50:a6:8c:2a:bd:7e:23:8f:9d:c2:eb:35:b7:97:0d:8e: 4f:51:48:b8:c0:85:a4:ca:8a:ac:a8:3e:be:15:30:64:87:b1: 60:c2:b7:07:1f:04:28:89:79:ca:34:bc:dd:7e:25:f4:5d:44: 14:05:3f:97:71:ed:3a:f7:be:ee:04:98:28:e1:b7:27:b3:73: 99:c8:99:f7:36:d4:0d:e4:db:e9:b6:1a:f3:d2:74:37:6b:23: e9:af:fc:7d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9S2OerElgGUdcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MTJkNjE2NWYtM2VjYy00MzUwLTg1NmItZGJmZmQ4NjU3MTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMwOFZ6nDJyMjcNFAavEOKf8UiPC3dTc8VCi EyoJYb1ujqtoXnmtkSyktg6BjCm+vaG2ztaW6ROxLYOhbQDBNs5RTE19/SHb9oC+ O2ebgbjdlzqQsmVXRz0TYDRxhieRFd6XIt0QKnJ0HP8/3XR4cyxhHU7D8V4/5rrt OfFRdtJym68thO28Be5LmTj6aM8K55ecMQjgyol/3mI/B3e7/hOz1nit1fx1lrmF pcpnaSZU1+OqlI4tsor7dT7ReZvG6f4+tpsmPwnCiFu7qjnZGwJWn5X4GCKOTvmm UuHOs2vHcW5iW3m6Sy9gDNrD/bRaIZjzQ7JHnZCONWtDSn/U6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI1Z/IhND2sjDsw42TH2PNO9EqWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzliZGI1NTItMzc0Ny0z MDYwLThjOTEtMjIwZGNlYWI2Y2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB/g6Wq2sJ4rKgQFrXno3SXgTv93m5xVdR81LV8rFE2ZhihiG3Ftk35 mEB7twn+QgYFamNHxJ0MiTPLFGAUrc/WtZafuUahDEIuaCNtwmdt5MIqKbYlchfX dahEPsYC3eSxiPuS9r2Ot26mTNMmdNGcbJzfGz5pWLywjA5iQCbv6D/o748I5uBs /BPf8/Ba3eVj7wZqiQgxpNC1nYouvBKvxll6VlCmjCq9fiOPncLrNbeXDY5PUUi4 wIWkyoqsqD6+FTBkh7FgwrcHHwQoiXnKNLzdfiX0XUQUBT+Xce06977uBJgo4bcn s3OZyJn3NtQN5Nvpthrz0nQ3ayPpr/x9 -----END CERTIFICATE-----Generated at Thu Mar 26 20:27:33 2026 by rpki-client