$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1f5c6e0-e080-3525-9b04-a30603f376ef.roa File: d1f5c6e0-e080-3525-9b04-a30603f376ef.roa (raw, json) Hash identifier: nc91rukoJybqONtHUVdeMXl5hwbu3u0RpKw/huirXbA= Subject key identifier: DE:4E:C7:9D:FC:16:BA:4C:37:84:28:89:A4:AD:10:87:DF:64:33:E0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFE16E2286FFC4C5988180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1f5c6e0-e080-3525-9b04-a30603f376ef.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396586 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:e1:6e:22:86:ff:c4:c5:98:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=23eb74cd-c29e-4e4c-ad0c-68080dccbe35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ec:f4:2f:3e:8c:85:f3:96:7d:52:09:da:91: f3:a4:60:8f:2e:fe:fa:6e:d2:27:6f:1c:b4:43:14: 40:2f:50:2a:96:17:df:a0:d2:90:4a:da:c5:d1:b1: d4:6c:cc:cb:d9:fa:0e:64:43:27:99:d4:e9:a7:b4: 9a:dd:72:be:9f:bc:04:ec:a9:86:7a:92:37:38:7b: b8:83:dc:33:56:9f:ac:96:3f:6c:36:61:5a:13:3a: d9:d0:3d:7f:f3:d6:8f:85:73:39:03:2c:11:c5:f7: 27:d0:6b:47:b6:e6:f2:55:f3:1c:0e:b8:81:ce:37: 9c:15:fe:d5:cb:82:c6:5f:49:22:23:4c:61:98:72: b4:48:e1:06:90:ef:4d:3b:d3:77:28:09:fc:c2:60: a7:3c:c6:5d:c0:d3:9c:f7:af:d6:14:ae:f0:14:a0: 19:26:16:4e:83:98:22:91:ac:ae:07:f1:bf:06:3e: 48:f7:5c:01:8e:ed:85:6f:49:f9:16:02:97:65:21: b2:91:15:50:bd:23:8b:9f:10:72:7e:2e:8e:5f:7c: fd:a8:53:aa:64:01:dd:d8:ed:da:c0:21:1b:9b:5b: 80:ca:de:d3:22:4c:7d:30:ce:ea:50:75:4c:9f:f0: f5:25:12:2d:6d:91:3a:92:cb:5c:50:5f:e1:85:83: cf:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4E:C7:9D:FC:16:BA:4C:37:84:28:89:A4:AD:10:87:DF:64:33:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1f5c6e0-e080-3525-9b04-a30603f376ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:57:86:29:7b:af:fc:50:8d:c5:be:d2:02:d2:ad:e2:59:db: 65:a6:e9:c0:d7:a8:8b:a9:8b:49:9d:91:b2:f9:68:9d:ef:ae: 96:24:95:dd:57:47:b2:80:bd:9f:c8:e1:3c:5d:a2:6d:ff:c7: 54:3d:5a:85:cd:03:73:49:ad:b3:d0:5c:9f:8b:05:ee:c2:5a: 74:22:6b:27:b8:4b:cf:9b:bc:fd:f7:f7:0f:39:4a:07:b1:11: fb:f8:2f:24:ee:42:ac:1a:8f:39:ac:78:2b:db:56:30:a5:66: 24:1c:be:5a:8d:41:1b:07:ba:c4:e5:bd:f0:a9:ed:f5:99:b2: 3c:bf:09:1d:bf:a7:2e:4f:b4:36:d5:97:e3:f7:e9:94:52:b6: 66:b3:00:71:07:c5:0a:7c:62:f4:6e:c4:86:e7:61:9e:15:89: 89:73:38:39:62:95:a9:a7:56:60:08:d4:68:66:fa:fc:0d:39: bb:c9:d8:72:c5:19:8d:ee:e8:83:e0:90:0e:d7:42:08:66:01: 90:3d:f4:3c:27:c7:0b:90:12:46:86:a2:d4:b9:b0:ca:e5:38: 3d:9b:1f:ee:66:3f:c0:88:77:69:be:dd:bc:c6:01:94:a2:f9: f5:56:a9:5a:31:92:6e:4c:d7:c7:3f:f3:57:7b:4b:0a:8c:e2: a4:0c:1d:c6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/+FuIob/xMWYgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MjNlYjc0Y2QtYzI5ZS00ZTRjLWFkMGMtNjgwODBkY2NiZTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+z0Lz6MhfOWfVIJ2pHzpGCPLv76btInbxy0 QxRAL1AqlhffoNKQStrF0bHUbMzL2foOZEMnmdTpp7Sa3XK+n7wE7KmGepI3OHu4 g9wzVp+slj9sNmFaEzrZ0D1/89aPhXM5AywRxfcn0GtHtubyVfMcDriBzjecFf7V y4LGX0kiI0xhmHK0SOEGkO9NO9N3KAn8wmCnPMZdwNOc96/WFK7wFKAZJhZOg5gi kayuB/G/Bj5I91wBju2Fb0n5FgKXZSGykRVQvSOLnxByfi6OX3z9qFOqZAHd2O3a wCEbm1uAyt7TIkx9MM7qUHVMn/D1JRItbZE6kstcUF/hhYPPswIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN5Ox538FrpMN4QoiaStEIffZDPgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDFmNWM2ZTAtZTA4MC0z NTI1LTliMDQtYTMwNjAzZjM3NmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRV4Ype6/8UI3FvtIC0q3iWdtlpunA16iLqYtJnZGy+Wid766WJJXd V0eygL2fyOE8XaJt/8dUPVqFzQNzSa2z0FyfiwXuwlp0ImsnuEvPm7z99/cPOUoH sRH7+C8k7kKsGo85rHgr21YwpWYkHL5ajUEbB7rE5b3wqe31mbI8vwkdv6cuT7Q2 1Zfj9+mUUrZmswBxB8UKfGL0bsSG52GeFYmJczg5YpWpp1ZgCNRoZvr8DTm7ydhy xRmN7uiD4JAO10IIZgGQPfQ8J8cLkBJGhqLUubDK5Tg9mx/uZj/AiHdpvt28xgGU ovn1VqlaMZJuTNfHP/NXe0sKjOKkDB3G -----END CERTIFICATE-----Generated at Thu Mar 26 12:56:16 2026 by rpki-client