$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa File: cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa (raw, json) Hash identifier: ufsaMjhTaBA8BRxUkaSHbHKD2qal7kHOPIKKj0Sa0JM= Subject key identifier: D7:F0:AE:10:25:E1:53:1A:79:46:9E:56:5D:C2:E2:75:0C:DC:FB:7E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD55F619EEF6DB2B47A40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 397200 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d5:5f:61:9e:ef:6d:b2:b4:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=58ffd784-df02-40be-918e-ca6ecbbd4466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:50:b4:1f:cb:fb:ea:d4:86:35:73:0b:ce:15: f4:59:93:3e:da:b8:e4:84:d3:95:db:8f:d8:ca:be: 68:b2:ad:e7:d5:f8:5d:46:b8:9a:d6:76:91:26:f5: 58:e7:0c:fb:38:da:f9:e4:19:57:f5:53:23:70:a1: 11:99:35:52:b4:f9:a7:08:2e:9f:41:ea:e7:a5:63: 70:d6:7c:2e:d0:33:53:f8:bc:65:f0:a3:85:63:f8: ec:7c:99:20:03:fa:59:62:ca:39:d7:8a:7c:6e:8b: 60:26:12:70:fc:a9:d1:f9:56:98:2b:d9:98:c8:b3: f2:47:ae:ce:16:b7:9a:7b:db:7e:03:e5:44:a8:8a: ff:05:77:dc:e0:c2:c5:5a:98:91:c6:84:12:8f:ff: 25:85:0e:87:8f:45:d0:9a:76:a9:af:a8:46:55:2a: 18:b1:e7:29:c2:21:e6:65:1f:2d:c3:cc:55:f8:0a: c5:f6:bc:02:4d:39:90:42:c9:96:00:79:55:8b:65: a3:f9:af:1f:91:0a:b2:0f:68:b7:58:0e:f3:a0:58: cb:15:d6:0a:b2:15:98:74:62:10:69:95:36:22:a2: ac:20:97:31:30:95:52:30:d6:02:fc:74:b7:81:c6: ad:26:72:71:a0:e6:84:a9:e9:ef:32:c2:50:12:c3: a6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F0:AE:10:25:E1:53:1A:79:46:9E:56:5D:C2:E2:75:0C:DC:FB:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:8e:0d:96:18:cc:e3:0b:91:c2:03:3e:25:6d:d3:24:9e:9b: 0d:45:87:4f:3d:18:cb:da:49:69:49:88:6d:30:1a:c2:99:0b: 84:22:f8:66:e6:a9:0b:40:ae:87:3f:19:c7:70:24:0d:0c:23: d9:6c:e5:27:0f:02:54:13:ad:2d:d3:6f:f1:7c:39:09:f3:5c: 32:51:0e:8b:23:ea:d9:15:b8:df:6a:5d:c2:bc:09:3c:37:10: 88:4a:a1:92:dd:f2:d5:5e:2c:8e:2c:6e:0c:cf:1b:c6:a7:ef: 41:f5:c3:cd:30:a1:6e:f3:54:5d:1a:d7:0e:0c:60:8d:ee:7e: 5a:3f:21:b6:0a:60:83:c1:33:10:1b:45:fe:56:81:f3:78:78: 2e:37:9f:b5:9d:75:a9:1b:4f:53:d2:90:3e:c9:00:9f:86:69: a4:72:00:81:2b:a1:5f:92:ea:ae:9a:26:81:6f:9b:ba:75:a3: f1:c6:ab:3b:57:4f:bd:eb:71:a8:d2:ad:b1:16:15:f6:39:74: 59:59:37:22:c6:45:a9:41:21:95:21:01:c7:22:92:17:0f:f8: 42:32:b8:5e:93:6f:03:b3:bb:33:70:f9:cc:b7:b7:a9:68:2a: 20:e8:ed:7e:2b:89:b2:37:58:39:6f:73:27:99:f5:75:c7:90: f4:9f:77:f3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9VfYZ7vbbK0ekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NThmZmQ3ODQtZGYwMi00MGJlLTkxOGUtY2E2ZWNiYmQ0NDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllC0H8v76tSGNXMLzhX0WZM+2rjkhNOV24/Y yr5osq3n1fhdRria1naRJvVY5wz7ONr55BlX9VMjcKERmTVStPmnCC6fQernpWNw 1nwu0DNT+Lxl8KOFY/jsfJkgA/pZYso514p8botgJhJw/KnR+VaYK9mYyLPyR67O Freae9t+A+VEqIr/BXfc4MLFWpiRxoQSj/8lhQ6Hj0XQmnapr6hGVSoYsecpwiHm ZR8tw8xV+ArF9rwCTTmQQsmWAHlVi2Wj+a8fkQqyD2i3WA7zoFjLFdYKshWYdGIQ aZU2IqKsIJcxMJVSMNYC/HS3gcatJnJxoOaEqenvMsJQEsOmyQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNfwrhAl4VMaeUaeVl3C4nUM3Pt+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2I4ZTc0ZjgtN2EyZi0z ZDg1LTk0NWEtZDNlMTU5MGJiYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAIjg2WGMzjC5HCAz4lbdMknpsNRYdPPRjL2klpSYhtMBrCmQuEIvhm 5qkLQK6HPxnHcCQNDCPZbOUnDwJUE60t02/xfDkJ81wyUQ6LI+rZFbjfal3CvAk8 NxCISqGS3fLVXiyOLG4MzxvGp+9B9cPNMKFu81RdGtcODGCN7n5aPyG2CmCDwTMQ G0X+VoHzeHguN5+1nXWpG09T0pA+yQCfhmmkcgCBK6FfkuqumiaBb5u6daPxxqs7 V0+963Go0q2xFhX2OXRZWTcixkWpQSGVIQHHIpIXD/hCMrhek28Ds7szcPnMt7ep aCog6O1+K4myN1g5b3MnmfV1x5D0n3fz -----END CERTIFICATE-----Generated at Fri Mar 27 06:08:05 2026 by rpki-client