$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1b95b7d-ad09-3d7e-b7cf-af67bb04a901.roa File: d1b95b7d-ad09-3d7e-b7cf-af67bb04a901.roa (raw, json) Hash identifier: E8jhkcsNvF/v+anZLajQCbZQ8heO4Yabglu0r+6FM2A= Subject key identifier: 2D:44:AF:22:8D:26:E8:34:A4:F0:2E:28:A4:F7:BA:A3:8A:27:87:B3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD4E9BF57D8CD60012EC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1b95b7d-ad09-3d7e-b7cf-af67bb04a901.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 36630 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d4:e9:bf:57:d8:cd:60:01:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=bb33ac74-4a97-4afa-b589-a34e89bbde59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0a:02:c9:b2:15:7b:23:dc:66:ab:3e:31:46: d2:f2:f5:d2:c8:bb:88:99:4c:c7:66:44:a5:e6:3d: 33:94:8e:33:d5:a9:5a:89:92:f0:08:2c:5d:c6:82: e5:54:bf:2d:69:81:33:1e:a3:ec:01:eb:cd:d3:ac: b0:65:bb:9d:23:31:2f:c3:bd:c3:8f:a8:a5:78:53: 93:47:23:c2:68:1f:b3:67:8a:45:90:fb:06:ab:ba: d4:a5:0f:7b:ac:e8:0e:e3:b8:db:3c:1c:3d:10:42: 6e:dd:fc:88:c8:ec:3e:73:a8:85:44:c4:2b:83:a6: ee:b5:3b:42:86:c6:49:f0:04:96:08:6a:e4:af:66: 3a:ed:19:1e:5a:b2:59:37:76:75:3e:e1:ff:8c:4a: ba:13:e6:4e:92:cf:ab:ac:79:63:d4:e6:7a:f6:70: d5:bf:0e:8b:7e:e3:d7:2c:be:df:e9:eb:9f:9a:e3: 9e:33:2a:11:5d:4d:ed:72:f3:17:76:bc:bc:85:de: e0:87:1b:4e:e6:cd:1a:27:99:c4:2b:55:e7:c3:74: 00:ae:ff:70:73:9a:74:ee:13:72:99:b8:ac:0e:ab: d4:5b:01:56:ab:20:c5:51:e3:fd:9d:1f:94:f9:25: c3:a4:9f:8f:69:3a:4b:3a:c9:ac:98:84:66:15:5a: 13:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:44:AF:22:8D:26:E8:34:A4:F0:2E:28:A4:F7:BA:A3:8A:27:87:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1b95b7d-ad09-3d7e-b7cf-af67bb04a901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:0e:fd:c3:ec:d9:32:04:56:88:aa:2a:92:e6:2f:64:80:7c: a6:30:93:6f:55:22:31:9b:f4:82:d8:15:23:94:2a:49:34:da: fa:69:84:5f:1b:f1:ff:b9:08:e1:e5:12:46:88:ab:63:fd:cc: d9:f6:c6:e7:9d:a3:ee:bd:58:c0:63:f4:67:3e:d7:cf:e8:99: db:b6:ab:85:f8:ca:51:5a:53:b1:07:18:58:ea:67:51:b6:40: 7e:16:54:a4:75:05:f5:a5:a6:a7:cb:c8:c5:63:d2:aa:cd:c9: aa:f4:f3:c3:a8:32:68:4b:88:db:87:70:40:a4:16:97:0e:1e: 6d:1a:8c:69:74:04:ad:0d:5a:98:2e:3b:0a:1c:c3:bf:d0:88: 4b:8b:51:4d:13:6d:5b:18:93:dc:bb:86:09:cf:45:90:5a:fc: 42:6a:a3:91:36:d2:1d:06:0e:7d:54:1c:c8:6a:75:1a:c2:dd: ce:e1:cd:77:f2:69:55:ae:fb:2c:c7:44:51:ec:36:14:69:4d: 6f:aa:4f:36:c0:a8:65:fe:14:6c:92:4c:4f:db:e5:77:2e:20: 92:be:07:62:76:8b:30:31:3b:cb:c6:44:2f:54:36:db:11:40: 84:ab:33:9c:10:5e:28:a1:bb:d1:d8:4a:6c:98:09:4b:6c:1a: 05:d9:4f:a2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9Tpv1fYzWABLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YmIzM2FjNzQtNGE5Ny00YWZhLWI1ODktYTM0ZTg5YmJkZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgoCybIVeyPcZqs+MUbS8vXSyLuImUzHZkSl 5j0zlI4z1alaiZLwCCxdxoLlVL8taYEzHqPsAevN06ywZbudIzEvw73Dj6ileFOT RyPCaB+zZ4pFkPsGq7rUpQ97rOgO47jbPBw9EEJu3fyIyOw+c6iFRMQrg6butTtC hsZJ8ASWCGrkr2Y67RkeWrJZN3Z1PuH/jEq6E+ZOks+rrHlj1OZ69nDVvw6LfuPX LL7f6eufmuOeMyoRXU3tcvMXdry8hd7ghxtO5s0aJ5nEK1Xnw3QArv9wc5p07hNy mbisDqvUWwFWqyDFUeP9nR+U+SXDpJ+PaTpLOsmsmIRmFVoTzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC1EryKNJug0pPAuKKT3uqOKJ4ezMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDFiOTViN2QtYWQwOS0z ZDdlLWI3Y2YtYWY2N2JiMDRhOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBxDv3D7NkyBFaIqiqS5i9kgHymMJNvVSIxm/SC2BUjlCpJNNr6aYRf G/H/uQjh5RJGiKtj/czZ9sbnnaPuvVjAY/RnPtfP6JnbtquF+MpRWlOxBxhY6mdR tkB+FlSkdQX1paany8jFY9Kqzcmq9PPDqDJoS4jbh3BApBaXDh5tGoxpdAStDVqY LjsKHMO/0IhLi1FNE21bGJPcu4YJz0WQWvxCaqORNtIdBg59VBzIanUawt3O4c13 8mlVrvssx0RR7DYUaU1vqk82wKhl/hRskkxP2+V3LiCSvgdidoswMTvLxkQvVDbb EUCEqzOcEF4oobvR2EpsmAlLbBoF2U+i -----END CERTIFICATE-----Generated at Thu Mar 26 18:48:08 2026 by rpki-client