$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfc98d87-51b3-3316-896f-e0a483a854c6.roa File: dfc98d87-51b3-3316-896f-e0a483a854c6.roa (raw, json) Hash identifier: 9AnPHY87EntdAurubHQvn2AkBOft5XpRcQTg9B9NsnI= Subject key identifier: E2:05:8A:A2:90:A7:00:6C:D0:62:5E:25:41:8E:8C:AA:91:5B:A6:0A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFDE887EC57C2F15DA0440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfc98d87-51b3-3316-896f-e0a483a854c6.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 397198 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:de:88:7e:c5:7c:2f:15:da:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=d55b5a76-b7f7-4945-8f8c-457187586829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:f9:fc:70:08:11:36:c2:1a:17:4b:8e:4b: b9:55:ee:bd:75:df:23:95:dc:cd:83:52:90:39:40: 3e:69:46:c9:9f:43:72:c4:6e:d2:28:2a:dc:37:25: 2a:b1:5f:07:3f:40:14:eb:6b:bf:58:72:8d:3c:5b: 64:2e:c3:a2:29:81:84:08:cc:45:19:73:23:5e:5b: 03:87:d9:b2:69:1c:de:46:ec:fd:83:f1:5e:95:d5: e1:dc:ee:bc:91:3d:d4:46:e8:51:00:92:16:9c:15: 70:ec:8f:70:b1:98:a0:f2:36:02:bc:98:d0:a3:ba: 85:80:ea:c4:1e:29:b9:f2:f3:0b:9d:59:e3:49:3b: ca:80:82:d7:3c:8b:52:4d:28:ac:2f:80:1e:d4:5d: 8a:8d:8f:66:f4:8b:bc:f5:27:3a:97:d8:ec:74:4a: 16:dc:07:bc:86:a1:74:f4:e1:68:1f:5c:62:79:bd: 35:65:e3:74:95:5c:ef:07:ce:55:fa:7c:cf:a0:a5: df:ba:7c:fd:da:61:23:6a:30:40:90:c0:6b:72:58: 7c:c9:b3:39:76:0b:b0:e3:36:9c:a3:80:28:3a:90: 69:38:c9:f8:13:1d:2d:9f:ff:f6:66:1f:39:3a:3f: 7f:68:f0:4c:05:25:fa:1d:c2:ed:a2:52:b9:b1:e0: 4c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:05:8A:A2:90:A7:00:6C:D0:62:5E:25:41:8E:8C:AA:91:5B:A6:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfc98d87-51b3-3316-896f-e0a483a854c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:9f:4d:d4:4e:cb:0c:b9:7c:9e:1e:0a:6b:76:99:62:c3:79: 18:4a:8d:25:86:91:7d:8e:a1:ee:9c:da:f3:1f:f4:e0:a6:58: fa:7e:91:26:4b:10:e7:d7:b5:13:04:db:d3:90:f6:5f:28:79: c2:9a:86:a8:ff:ed:bf:f5:af:d0:b4:1f:95:80:14:44:2c:55: 35:99:72:d9:ac:11:be:25:ce:1b:1c:3b:3b:7b:7c:25:d1:a0: 4a:4c:ab:e5:12:fe:31:26:4b:9d:8d:e8:de:9d:55:43:8a:ff: 8b:10:1e:73:99:5b:3d:c9:03:76:1c:75:da:66:fe:a5:ba:12: f5:55:7a:30:bd:0c:b6:22:d1:40:de:64:05:14:02:a0:c6:9b: 2a:04:95:fc:13:de:f9:bd:11:de:64:da:8b:01:a4:70:a8:9a: 7c:eb:9c:a5:0d:a3:47:9d:be:9a:66:8b:bd:73:f9:e2:7c:9a: 0f:bf:75:85:90:ec:d0:ec:2b:93:8e:a6:e3:d1:9c:c0:13:0e: 44:aa:30:55:c2:73:c8:4d:79:8b:81:25:d6:cd:dd:e1:ca:af: 5a:bf:28:f7:55:a8:ba:dd:0a:c4:4d:6e:a4:cf:5b:ee:3e:4b: f7:1b:30:29:8e:7c:1a:9d:3e:c3:b5:b8:4a:0e:22:9d:79:92: 29:77:c0:44 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/96IfsV8LxXaBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZDU1YjVhNzYtYjdmNy00OTQ1LThmOGMtNDU3MTg3NTg2ODI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnD5/HAIETbCGhdLjku5Ve69dd8jldzNg1KQ OUA+aUbJn0NyxG7SKCrcNyUqsV8HP0AU62u/WHKNPFtkLsOiKYGECMxFGXMjXlsD h9myaRzeRuz9g/FeldXh3O68kT3URuhRAJIWnBVw7I9wsZig8jYCvJjQo7qFgOrE Him58vMLnVnjSTvKgILXPItSTSisL4Ae1F2KjY9m9Iu89Sc6l9jsdEoW3Ae8hqF0 9OFoH1xieb01ZeN0lVzvB85V+nzPoKXfunz92mEjajBAkMBrclh8ybM5dguw4zac o4AoOpBpOMn4Ex0tn//2Zh85Oj9/aPBMBSX6HcLtolK5seBMzwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOIFiqKQpwBs0GJeJUGOjKqRW6YKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGZjOThkODctNTFiMy0z MzE2LTg5NmYtZTBhNDgzYTg1NGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCHn03UTssMuXyeHgprdpliw3kYSo0lhpF9jqHunNrzH/Tgplj6fpEm SxDn17UTBNvTkPZfKHnCmoao/+2/9a/QtB+VgBRELFU1mXLZrBG+Jc4bHDs7e3wl 0aBKTKvlEv4xJkudjejenVVDiv+LEB5zmVs9yQN2HHXaZv6luhL1VXowvQy2ItFA 3mQFFAKgxpsqBJX8E975vRHeZNqLAaRwqJp865ylDaNHnb6aZou9c/nifJoPv3WF kOzQ7CuTjqbj0ZzAEw5EqjBVwnPITXmLgSXWzd3hyq9avyj3Vai63QrETW6kz1vu Pkv3GzApjnwanT7DtbhKDiKdeZIpd8BE -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:44 2026 by rpki-client