$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e19a749e-8790-3947-ad2c-4ec35be10798.roa File: e19a749e-8790-3947-ad2c-4ec35be10798.roa (raw, json) Hash identifier: oZMorVHLbzdSl+eSpMwuWhsda2A7Adf6cVAZFZgorfk= Subject key identifier: 02:2B:BB:7F:30:B1:4A:72:0D:81:7B:4B:8F:DE:06:25:A2:76:2D:94 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFDA1E3BDD448399BDE340 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e19a749e-8790-3947-ad2c-4ec35be10798.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396576 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:da:1e:3b:dd:44:83:99:bd:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=9da543cf-3b58-4338-935c-ef721bd59318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:46:31:b4:a3:61:e7:55:79:1b:3e:b0:06:39: 50:64:4c:41:fa:09:b7:93:8b:e4:ea:db:b3:a3:18: 1d:f0:ea:6a:44:ca:3f:96:d5:e6:f9:62:61:7b:32: a6:ee:24:2a:e1:06:02:0e:07:86:6a:58:e4:82:43: d3:69:7e:ea:89:8a:e0:f9:fd:45:45:85:ce:c8:23: 08:12:00:2c:69:68:4c:87:2b:26:af:89:9d:e2:2e: 6b:ed:e6:1b:ba:20:14:48:87:8a:2d:cd:7f:a4:f4: af:8f:9b:8e:b2:0f:33:6c:ce:37:40:f7:e0:2a:7a: df:78:f2:02:14:55:e1:4b:8b:96:9e:10:56:53:62: c7:72:7f:5e:e5:55:c1:1c:34:1d:f5:ef:c6:a3:92: 23:51:39:d8:f4:ab:5b:5e:be:39:c0:2d:18:1c:06: 50:75:34:a7:7d:c5:46:04:5b:08:07:7b:32:98:9a: 14:ed:57:4c:5c:e7:aa:d3:67:55:cc:f7:61:b6:98: 93:a3:79:0b:5e:37:15:f5:be:1f:9a:bf:bb:cb:a9: a4:ea:53:ec:0c:fe:96:1b:95:e3:d8:d2:48:1d:00: f8:85:95:83:56:65:89:78:bc:d0:a6:29:88:20:84: fc:a2:6f:59:68:94:2e:84:af:66:e7:28:87:08:0a: 9d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2B:BB:7F:30:B1:4A:72:0D:81:7B:4B:8F:DE:06:25:A2:76:2D:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e19a749e-8790-3947-ad2c-4ec35be10798.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e5:5c:e8:b7:99:9f:61:6b:1b:d6:8f:19:0d:35:32:fa:fa: 05:5c:47:2a:e3:38:b6:36:66:57:d6:4a:2b:e0:f2:58:e8:61: e3:a4:b0:db:89:f9:7e:f0:6f:06:16:c1:40:e1:6c:37:2e:dd: 3f:62:e6:f3:ba:39:cb:6f:e0:4b:d8:4c:d3:9a:27:78:1c:9b: 7a:d2:95:27:80:bd:f6:f1:05:aa:7e:dc:80:b0:d8:ab:e2:3d: 03:ba:3f:47:e5:f8:26:4a:a2:b9:cb:a6:1b:e0:fc:dc:43:5a: 92:84:59:0a:63:a5:33:da:d7:ed:9f:1c:24:84:18:2c:73:e4: 2e:3c:9e:9f:2a:26:91:5a:76:f4:69:8a:c6:43:28:a4:06:8d: a0:02:34:e7:66:d6:e5:d4:bb:c4:e9:20:8b:41:fb:77:e4:4e: 1d:c2:20:61:bd:af:f8:7a:c9:61:ec:84:4a:23:49:94:c2:0d: 46:f9:13:b0:db:37:b6:51:c1:fd:66:1c:9d:66:14:95:66:71: 09:41:80:bf:3c:a3:31:c9:ec:ee:6b:88:5c:76:ac:a2:b1:7c: a1:d1:0f:60:97:4b:b3:1e:89:50:9b:8e:6b:aa:e9:9a:97:9f: 62:92:d7:63:61:2c:3c:4b:f2:f0:ba:8a:a2:3e:9d:11:b7:09: f7:24:9b:cd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9oeO91Eg5m940AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OWRhNTQzY2YtM2I1OC00MzM4LTkzNWMtZWY3MjFiZDU5MzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkYxtKNh51V5Gz6wBjlQZExB+gm3k4vk6tuz oxgd8OpqRMo/ltXm+WJhezKm7iQq4QYCDgeGaljkgkPTaX7qiYrg+f1FRYXOyCMI EgAsaWhMhysmr4md4i5r7eYbuiAUSIeKLc1/pPSvj5uOsg8zbM43QPfgKnrfePIC FFXhS4uWnhBWU2LHcn9e5VXBHDQd9e/Go5IjUTnY9KtbXr45wC0YHAZQdTSnfcVG BFsIB3symJoU7VdMXOeq02dVzPdhtpiTo3kLXjcV9b4fmr+7y6mk6lPsDP6WG5Xj 2NJIHQD4hZWDVmWJeLzQpimIIIT8om9ZaJQuhK9m5yiHCAqdEQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAIru38wsUpyDYF7S4/eBiWidi2UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTE5YTc0OWUtODc5MC0z OTQ3LWFkMmMtNGVjMzViZTEwNzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCI5Vzot5mfYWsb1o8ZDTUy+voFXEcq4zi2NmZX1kor4PJY6GHjpLDb ifl+8G8GFsFA4Ww3Lt0/YubzujnLb+BL2EzTmid4HJt60pUngL328QWqftyAsNir 4j0Duj9H5fgmSqK5y6Yb4PzcQ1qShFkKY6Uz2tftnxwkhBgsc+QuPJ6fKiaRWnb0 aYrGQyikBo2gAjTnZtbl1LvE6SCLQft35E4dwiBhva/4eslh7IRKI0mUwg1G+ROw 2ze2UcH9ZhydZhSVZnEJQYC/PKMxyezua4hcdqyisXyh0Q9gl0uzHolQm45rquma l59iktdjYSw8S/LwuoqiPp0Rtwn3JJvN -----END CERTIFICATE-----Generated at Thu Mar 26 11:15:08 2026 by rpki-client