$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e3659689-7db4-3b56-b886-8c7b5eba6f9e.roa File: e3659689-7db4-3b56-b886-8c7b5eba6f9e.roa (raw, json) Hash identifier: 0uZXPwcP+ge9vQdiHb9Der/tUx6Y2LpOoTfJrfMOee4= Subject key identifier: 37:35:95:91:E0:17:CF:41:30:30:82:4F:92:C6:FC:FC:03:93:8C:C4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFE38757F45462A5E71C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e3659689-7db4-3b56-b886-8c7b5eba6f9e.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396587 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:e3:87:57:f4:54:62:a5:e7:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=8cae7645-0c05-4e2c-9a94-71f4121dd6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d8:63:c1:b1:27:cc:a5:a3:bf:de:10:c7:10: ac:78:30:77:d9:34:15:86:57:4c:5b:7c:f8:45:81: 3c:ad:81:68:fc:cf:e4:7d:53:7d:06:85:b1:0e:db: c2:10:2f:18:d3:5d:73:82:d7:e5:f8:e7:b4:44:16: 93:c6:8c:76:f9:fb:cc:82:f9:a4:31:dc:39:2f:ca: 16:b8:f8:5c:fa:3f:d9:4b:c3:b6:3a:93:a1:2f:cc: da:4d:00:1a:bf:08:ec:8f:a8:f8:37:9a:17:32:f7: 73:ed:8d:66:88:1b:02:4c:d0:c9:1e:3d:2d:e1:e9: f8:91:18:41:28:97:9b:06:bc:85:40:ce:57:18:51: 52:94:7f:77:db:aa:a1:67:fc:f5:7a:79:42:15:97: e6:e9:b4:a9:a6:9b:19:d7:77:49:4c:25:97:e8:56: 57:e7:b4:80:8c:9e:a5:e1:0a:d5:62:6d:e4:ce:b6: 67:17:1c:9b:49:59:2e:91:7b:ca:50:72:7e:e3:42: 06:c1:6c:26:ab:09:e7:8a:4f:1f:95:8b:b8:90:0a: f9:62:5f:55:e8:7f:56:b5:d6:26:27:a0:03:a6:4e: 37:18:8a:56:47:0b:27:9e:7e:18:a6:0b:7a:6c:97: bf:db:5c:00:8d:27:5b:90:1b:1c:1d:c2:ef:a4:ba: 80:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:35:95:91:E0:17:CF:41:30:30:82:4F:92:C6:FC:FC:03:93:8C:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e3659689-7db4-3b56-b886-8c7b5eba6f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:6c:c2:d2:d6:d2:7f:55:64:ca:25:41:80:e1:9c:52:a2:01: 2d:3e:0b:ce:bd:88:6d:46:1d:74:56:f3:f2:99:2e:11:75:11: 33:5e:a1:39:89:bc:b6:65:34:98:2b:86:69:b0:d1:61:35:70: f2:22:38:67:9e:70:e5:e9:75:cf:ad:95:fd:82:79:76:76:2f: 39:31:07:fd:09:12:3e:9a:2f:90:1e:2a:c6:3c:02:79:95:b3: 4b:9b:0e:dc:cc:11:df:da:69:db:41:5a:f3:2c:24:3f:4e:ec: d1:51:7e:c9:c4:57:01:fa:2e:48:29:97:60:37:59:e9:0a:94: 66:88:30:6a:e0:a1:26:33:5e:b1:de:d7:7c:3c:04:da:b2:8a: 0a:17:5f:c9:f6:8d:21:32:0d:c0:d8:9c:03:78:3f:bf:d6:61: 28:5e:01:0e:51:f1:11:34:a3:a6:78:d3:ce:94:4e:43:9d:5e: 78:b9:e2:1b:ba:59:e5:13:eb:74:0c:92:de:55:a9:b4:65:9f: e0:6e:a2:13:b0:d4:d5:7e:d5:92:ff:8e:5c:99:7c:72:92:47: b4:17:8c:8c:7a:95:42:65:2a:da:91:9d:89:48:ae:1e:6c:d9: 37:44:5a:e4:47:7e:e4:f4:e7:49:88:75:fc:b1:33:cf:86:b1: 0d:c4:fb:83 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/+OHV/RUYqXnHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OGNhZTc2NDUtMGMwNS00ZTJjLTlhOTQtNzFmNDEyMWRkNmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNhjwbEnzKWjv94QxxCseDB32TQVhldMW3z4 RYE8rYFo/M/kfVN9BoWxDtvCEC8Y011zgtfl+Oe0RBaTxox2+fvMgvmkMdw5L8oW uPhc+j/ZS8O2OpOhL8zaTQAavwjsj6j4N5oXMvdz7Y1miBsCTNDJHj0t4en4kRhB KJebBryFQM5XGFFSlH9326qhZ/z1enlCFZfm6bSpppsZ13dJTCWX6FZX57SAjJ6l 4QrVYm3kzrZnFxybSVkukXvKUHJ+40IGwWwmqwnnik8flYu4kAr5Yl9V6H9WtdYm J6ADpk43GIpWRwsnnn4Ypgt6bJe/21wAjSdbkBscHcLvpLqAyQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDc1lZHgF89BMDCCT5LG/PwDk4zEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTM2NTk2ODktN2RiNC0z YjU2LWI4ODYtOGM3YjVlYmE2ZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB+bMLS1tJ/VWTKJUGA4ZxSogEtPgvOvYhtRh10VvPymS4RdREzXqE5 iby2ZTSYK4ZpsNFhNXDyIjhnnnDl6XXPrZX9gnl2di85MQf9CRI+mi+QHirGPAJ5 lbNLmw7czBHf2mnbQVrzLCQ/TuzRUX7JxFcB+i5IKZdgN1npCpRmiDBq4KEmM16x 3td8PATasooKF1/J9o0hMg3A2JwDeD+/1mEoXgEOUfERNKOmeNPOlE5DnV54ueIb ulnlE+t0DJLeVam0ZZ/gbqITsNTVftWS/45cmXxykke0F4yMepVCZSrakZ2JSK4e bNk3RFrkR37k9OdJiHX8sTPPhrENxPuD -----END CERTIFICATE-----Generated at Thu Mar 26 15:18:11 2026 by rpki-client