$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df69f49d-da73-3fac-81df-78a8bc3c1b5a.roa File: df69f49d-da73-3fac-81df-78a8bc3c1b5a.roa (raw, json) Hash identifier: CAKCa30zuZx98LYeGwIApqQIko+Af+yB7pPbnD0e9iQ= Subject key identifier: 48:57:8A:2D:3A:5D:71:07:CC:3F:D0:20:43:8E:93:46:D8:AA:5E:72 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFDF44A5717213AAFF5D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df69f49d-da73-3fac-81df-78a8bc3c1b5a.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396593 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:df:44:a5:71:72:13:aa:ff:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=8be56040-9b0b-4262-8a52-216636cba4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:52:a5:25:6a:1c:d9:2a:98:69:0e:a9:6d:19: ef:72:6f:5e:44:a3:54:f9:c0:4e:35:80:47:27:35: 50:5f:2a:4b:14:8f:81:8c:eb:ec:10:18:af:da:da: d0:b0:06:49:ad:09:62:f6:b9:4a:c9:28:ac:82:d4: 35:39:c9:d9:47:6d:73:16:b6:59:51:03:00:da:9b: ff:f0:61:51:2f:22:ac:3a:8d:68:f7:95:bc:ef:79: 22:54:65:74:3d:25:85:5f:e9:25:ea:82:df:b3:4f: b9:2f:6b:8a:52:c8:93:38:00:d2:9b:9e:71:6c:6b: dc:a2:72:c6:2a:95:ce:93:86:a7:a5:3a:9d:76:7c: ff:28:f5:2c:5b:21:97:8b:06:4e:e1:bf:77:53:a4: 3e:58:1e:f8:d0:20:63:e4:9e:7c:a2:c9:77:34:89: c3:33:ac:5e:44:24:74:67:48:db:52:cc:60:b6:bc: a4:4b:62:05:b3:4b:cb:5b:a4:89:03:7b:05:3c:0b: da:e1:2e:05:4c:37:3e:a2:aa:01:e6:65:d0:b4:55: d8:a7:40:7a:4c:dc:a3:ea:d0:c4:05:e2:51:f4:9c: 65:7e:fc:dd:62:26:54:86:5a:15:d3:66:9c:b8:5f: 22:2d:e0:26:2f:4b:f8:38:07:34:dd:17:fd:d1:2a: b4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:57:8A:2D:3A:5D:71:07:CC:3F:D0:20:43:8E:93:46:D8:AA:5E:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df69f49d-da73-3fac-81df-78a8bc3c1b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ba:d8:4b:ea:ba:02:99:2f:ef:57:0d:05:56:3c:15:0d:7b: 26:1c:99:39:83:89:49:e2:f2:af:1f:78:fc:0d:c8:17:d2:08: 83:de:de:9b:4a:6e:1f:d8:db:68:80:ec:52:56:07:f2:7f:b7: 94:3d:3c:4e:bb:64:5a:f5:70:ec:3f:a6:55:03:11:19:cf:c5: f0:c3:ef:98:bc:13:21:8e:30:a0:cb:7a:15:cd:92:59:56:f5: 25:3a:4c:47:ff:26:20:c9:5b:fe:41:a3:fe:e2:24:cf:af:6c: d0:1b:83:15:3a:3c:bc:87:d6:9a:0e:80:90:96:c0:0c:20:ea: 45:3a:03:05:db:61:1d:f3:32:8b:ff:94:9b:a8:ab:f9:45:36: 3d:b8:57:21:31:3f:08:9d:ad:f6:fc:0e:d0:fc:ff:fd:19:f0: ed:03:a1:d7:fc:57:cf:8d:9f:29:48:6c:09:d9:1e:f8:d6:ff: 9c:4e:6d:25:b6:31:5a:34:ef:af:c7:7c:67:86:80:19:f0:a7: 25:0c:98:f2:99:8b:7e:bc:58:06:a6:40:11:92:2b:79:5c:2d: 01:ff:cd:06:37:57:f6:cb:cb:40:da:fd:9d:ed:f3:fb:6a:c3: da:ac:28:5d:e6:bf:a5:7d:e7:5b:f0:50:c4:c1:d9:cc:5d:28: b1:12:a8:b7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/99EpXFyE6r/XYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OGJlNTYwNDAtOWIwYi00MjYyLThhNTItMjE2NjM2Y2JhNGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1KlJWoc2SqYaQ6pbRnvcm9eRKNU+cBONYBH JzVQXypLFI+BjOvsEBiv2trQsAZJrQli9rlKySisgtQ1OcnZR21zFrZZUQMA2pv/ 8GFRLyKsOo1o95W873kiVGV0PSWFX+kl6oLfs0+5L2uKUsiTOADSm55xbGvconLG KpXOk4anpTqddnz/KPUsWyGXiwZO4b93U6Q+WB740CBj5J58osl3NInDM6xeRCR0 Z0jbUsxgtrykS2IFs0vLW6SJA3sFPAva4S4FTDc+oqoB5mXQtFXYp0B6TNyj6tDE BeJR9JxlfvzdYiZUhloV02acuF8iLeAmL0v4OAc03Rf90Sq0RwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEhXii06XXEHzD/QIEOOk0bYql5yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGY2OWY0OWQtZGE3My0z ZmFjLTgxZGYtNzhhOGJjM2MxYjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkuthL6roCmS/vVw0FVjwVDXsmHJk5g4lJ4vKvH3j8DcgX0giD3t6b Sm4f2NtogOxSVgfyf7eUPTxOu2Ra9XDsP6ZVAxEZz8Xww++YvBMhjjCgy3oVzZJZ VvUlOkxH/yYgyVv+QaP+4iTPr2zQG4MVOjy8h9aaDoCQlsAMIOpFOgMF22Ed8zKL /5SbqKv5RTY9uFchMT8Ina32/A7Q/P/9GfDtA6HX/FfPjZ8pSGwJ2R741v+cTm0l tjFaNO+vx3xnhoAZ8KclDJjymYt+vFgGpkARkit5XC0B/80GN1f2y8tA2v2d7fP7 asParChd5r+lfedb8FDEwdnMXSixEqi3 -----END CERTIFICATE-----Generated at Thu Mar 26 14:09:13 2026 by rpki-client