$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e09b631f-1eaa-36c6-9856-54d82485ac05.roa File: e09b631f-1eaa-36c6-9856-54d82485ac05.roa (raw, json) Hash identifier: X39eVtpd7lc0TZhBu7rwMrOZ8bB9sIzWxCcrJUN+m54= Subject key identifier: CF:C0:C1:D2:25:F4:88:29:3D:25:AC:E5:AA:C8:2B:EA:B7:FB:A7:FF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD8BEF8E58B73903D9680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e09b631f-1eaa-36c6-9856-54d82485ac05.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396610 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d8:be:f8:e5:8b:73:90:3d:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=ef62f564-6ee8-4bc3-aa2e-c2a2d9164690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:59:7a:5d:7e:87:b7:a3:16:96:2d:7b:8a:70: 37:9d:3d:38:97:10:97:f8:04:8f:30:b4:fb:5d:e6: 02:21:38:ea:f0:3c:81:33:8e:d1:67:60:e0:43:15: 76:05:16:7d:f1:cf:3e:87:32:64:05:f1:bd:90:c2: 3b:b9:eb:5c:7d:fd:44:0a:34:02:39:c6:78:43:87: 7a:46:03:48:4d:20:0a:eb:06:ea:2f:81:fe:f1:83: 40:77:29:65:8c:c3:54:c1:98:a3:11:6f:33:50:f7: d8:54:6f:d0:f2:ba:d5:27:71:20:96:e9:03:a1:b9: e7:38:7d:4f:be:fb:7c:50:73:62:16:6a:87:19:c9: 84:4e:da:5a:82:0d:6d:a8:71:47:90:b2:63:c7:2e: f0:54:74:6e:86:56:8f:96:b9:a9:cd:b2:51:16:32: c7:0c:8d:22:1e:25:95:f4:38:9c:88:c5:22:8b:33: 53:a6:cf:fc:53:c4:5e:8c:72:8c:7e:fa:27:5e:f9: 42:32:f2:7e:bb:44:f0:b6:b4:6a:52:0c:38:30:35: 36:70:d6:40:79:0f:17:03:c5:92:df:64:37:7c:27: 66:96:6a:8e:f8:eb:ad:41:cf:30:0c:ec:14:76:d2: f6:54:df:0a:97:cb:d7:cd:fa:4f:ad:ee:09:b4:48: c3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C0:C1:D2:25:F4:88:29:3D:25:AC:E5:AA:C8:2B:EA:B7:FB:A7:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e09b631f-1eaa-36c6-9856-54d82485ac05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:5b:4b:bd:e8:00:6c:d5:04:2c:a9:cb:c9:0a:c5:70:50:b0: fc:20:08:6e:7d:14:0c:02:8a:64:1b:2e:b8:89:2b:56:6e:22: ef:8d:b5:ef:83:22:9c:60:20:2f:b0:2a:46:fc:65:fd:e1:bd: 86:9c:bb:87:41:1c:7d:47:ae:c2:93:8f:aa:a8:c5:d8:59:3c: c1:7b:2c:f6:08:a5:26:35:db:00:ed:31:da:ad:73:14:da:78: 0e:93:60:34:25:f3:f9:2b:ed:17:fe:dd:c2:9f:2d:5a:4b:1f: 37:2d:c0:3b:6f:7f:70:66:41:e4:cf:d2:1e:b9:81:24:11:0c: d7:49:e4:75:ae:c1:ed:92:9b:ab:3d:55:ee:25:e2:46:ce:d1: 41:0d:71:05:64:13:50:e3:6d:38:ce:2c:d7:cf:5c:f2:29:6b: f9:af:e4:e4:51:b5:06:e0:dc:f8:f9:5e:cf:46:f8:c3:d6:d6: 7b:3d:75:80:03:1c:1b:9a:53:10:c0:b1:c4:d0:db:07:f1:be: 1a:7c:c6:8d:ac:77:a1:fb:ab:13:f2:0c:ec:4b:2e:f5:59:eb: 8a:96:09:cf:4f:af:04:32:c0:dc:77:d9:8c:eb:3e:71:36:cb: 59:4a:0f:ab:a2:20:c5:c5:eb:0b:a8:54:2d:ff:1f:90:ae:45: 03:ee:ca:40 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9i++OWLc5A9loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZWY2MmY1NjQtNmVlOC00YmMzLWFhMmUtYzJhMmQ5MTY0NjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1l6XX6Ht6MWli17inA3nT04lxCX+ASPMLT7 XeYCITjq8DyBM47RZ2DgQxV2BRZ98c8+hzJkBfG9kMI7uetcff1ECjQCOcZ4Q4d6 RgNITSAK6wbqL4H+8YNAdylljMNUwZijEW8zUPfYVG/Q8rrVJ3EglukDobnnOH1P vvt8UHNiFmqHGcmETtpagg1tqHFHkLJjxy7wVHRuhlaPlrmpzbJRFjLHDI0iHiWV 9DiciMUiizNTps/8U8RejHKMfvonXvlCMvJ+u0TwtrRqUgw4MDU2cNZAeQ8XA8WS 32Q3fCdmlmqO+OutQc8wDOwUdtL2VN8Kl8vXzfpPre4JtEjDGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM/AwdIl9IgpPSWs5arIK+q3+6f/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTA5YjYzMWYtMWVhYS0z NmM2LTk4NTYtNTRkODI0ODVhYzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAFW0u96ABs1QQsqcvJCsVwULD8IAhufRQMAopkGy64iStWbiLvjbXv gyKcYCAvsCpG/GX94b2GnLuHQRx9R67Ck4+qqMXYWTzBeyz2CKUmNdsA7THarXMU 2ngOk2A0JfP5K+0X/t3Cny1aSx83LcA7b39wZkHkz9IeuYEkEQzXSeR1rsHtkpur PVXuJeJGztFBDXEFZBNQ4204zizXz1zyKWv5r+TkUbUG4Nz4+V7PRvjD1tZ7PXWA AxwbmlMQwLHE0NsH8b4afMaNrHeh+6sT8gzsSy71WeuKlgnPT68EMsDcd9mM6z5x NstZSg+roiDFxesLqFQt/x+QrkUD7spA -----END CERTIFICATE-----Generated at Thu Mar 26 14:17:53 2026 by rpki-client