$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbae136a-600c-3ec1-8570-5618e3baf9b7.roa File: dbae136a-600c-3ec1-8570-5618e3baf9b7.roa (raw, json) Hash identifier: 88Mnd78waMDIBNVt/qk89fNOUvPTt1V3q7p1QagKZzQ= Subject key identifier: B1:91:DF:42:D5:96:A3:D0:0E:85:F4:C7:B1:81:C3:14:1F:EF:19:BE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFE0F4B3A68E62CD256400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbae136a-600c-3ec1-8570-5618e3baf9b7.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 36631 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:e0:f4:b3:a6:8e:62:cd:25:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=7af90146-4e11-4563-ba2e-300700b1267b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b0:96:30:18:af:dd:67:9d:2f:0f:6b:67:8e: f3:a4:4d:ae:89:d6:22:bb:2d:78:6a:fc:7d:4b:0b: f6:1b:c3:44:56:ff:e9:72:7f:8c:33:49:d1:0e:64: c2:f8:4c:5e:86:85:2b:96:15:25:04:d4:41:31:c2: fc:5d:c9:f8:fa:11:3f:b2:c4:ac:4f:1a:a0:ba:f8: f1:cf:33:76:a9:b8:a4:04:9e:dc:f9:05:91:8e:28: ff:47:c9:32:45:1c:25:ce:21:cb:8c:31:2f:e3:39: c4:85:1f:8d:67:59:6d:04:e0:aa:00:02:c3:cc:89: 2b:fd:7c:3c:89:05:af:f2:13:69:b8:99:31:f7:ed: d7:96:7f:0e:8e:20:fb:b4:ae:92:95:79:c5:c2:a1: e4:6a:94:b2:a9:8a:b8:ba:62:4c:0e:d6:85:ca:bf: a3:8e:1b:92:28:9c:66:1e:96:4e:ad:19:5a:20:e6: 31:1e:8f:b3:e3:22:33:6e:3f:3b:43:46:e0:2b:d6: 76:34:59:da:74:5e:06:a3:0f:2b:54:18:80:37:82: 31:2c:60:36:0f:b9:98:93:dd:a1:f3:12:4a:1f:ae: 63:20:f8:04:32:8d:54:22:1e:bf:bb:17:1f:71:d7: 65:3b:fd:c2:91:f1:7e:e9:43:c8:3a:df:0e:0e:dd: 99:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:91:DF:42:D5:96:A3:D0:0E:85:F4:C7:B1:81:C3:14:1F:EF:19:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbae136a-600c-3ec1-8570-5618e3baf9b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:36:46:7a:0a:91:cb:3c:3e:bf:80:7c:ea:12:92:bb:14:4a: 39:3d:c0:3f:44:99:19:90:c4:6a:a5:c2:c3:c2:ce:3a:75:c5: 4f:9e:7b:70:65:0e:6a:84:06:20:65:a5:d2:b4:a1:24:10:31: d5:ee:26:23:7b:42:55:69:7c:4c:62:30:9f:ac:4a:45:26:32: b8:1b:2c:df:67:98:40:3e:d3:d6:60:6c:44:4a:da:cd:e0:99: 15:b6:54:55:79:cc:ef:8d:ba:07:6a:c6:32:9e:57:a4:03:5d: 05:29:7d:21:d8:d0:0c:e9:6b:2f:ae:49:c1:06:23:3b:a3:ab: 47:68:d6:eb:09:40:02:80:b1:f1:2e:01:03:fa:55:bd:e8:07: 0a:dd:62:ca:af:85:1d:14:c6:82:ed:71:4c:f4:f4:26:0c:4b: 09:78:3e:dd:03:b4:81:4c:da:c6:d1:15:11:fa:2c:5f:6d:47: e8:49:6f:6f:f2:59:78:48:a0:b1:60:1e:f3:15:c1:f1:88:77: 9c:98:f7:a1:96:6f:05:06:44:18:1e:a7:f9:8e:0e:b4:03:21: 0b:ae:ad:a0:62:cf:30:b0:9f:46:48:51:65:9e:61:cd:24:48: 0e:6c:7d:c2:f0:30:a9:8f:a4:cf:9c:ac:ea:83:26:10:1e:72: 25:f1:f6:8d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/+D0s6aOYs0lZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk N2FmOTAxNDYtNGUxMS00NTYzLWJhMmUtMzAwNzAwYjEyNjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7CWMBiv3WedLw9rZ47zpE2uidYiuy14avx9 Swv2G8NEVv/pcn+MM0nRDmTC+ExehoUrlhUlBNRBMcL8Xcn4+hE/ssSsTxqguvjx zzN2qbikBJ7c+QWRjij/R8kyRRwlziHLjDEv4znEhR+NZ1ltBOCqAALDzIkr/Xw8 iQWv8hNpuJkx9+3Xln8OjiD7tK6SlXnFwqHkapSyqYq4umJMDtaFyr+jjhuSKJxm HpZOrRlaIOYxHo+z4yIzbj87Q0bgK9Z2NFnadF4Gow8rVBiAN4IxLGA2D7mYk92h 8xJKH65jIPgEMo1UIh6/uxcfcddlO/3CkfF+6UPIOt8ODt2ZOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLGR30LVlqPQDoX0x7GBwxQf7xm+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGJhZTEzNmEtNjAwYy0z ZWMxLTg1NzAtNTYxOGUzYmFmOWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAKNkZ6CpHLPD6/gHzqEpK7FEo5PcA/RJkZkMRqpcLDws46dcVPnntw ZQ5qhAYgZaXStKEkEDHV7iYje0JVaXxMYjCfrEpFJjK4GyzfZ5hAPtPWYGxEStrN 4JkVtlRVeczvjboHasYynlekA10FKX0h2NAM6WsvrknBBiM7o6tHaNbrCUACgLHx LgED+lW96AcK3WLKr4UdFMaC7XFM9PQmDEsJeD7dA7SBTNrG0RUR+ixfbUfoSW9v 8ll4SKCxYB7zFcHxiHecmPehlm8FBkQYHqf5jg60AyELrq2gYs8wsJ9GSFFlnmHN JEgObH3C8DCpj6TPnKzqgyYQHnIl8faN -----END CERTIFICATE-----Generated at Thu Mar 26 17:21:22 2026 by rpki-client