$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e3689023-3ce9-3c35-be7a-80f054d80922.roa File: e3689023-3ce9-3c35-be7a-80f054d80922.roa (raw, json) Hash identifier: dAaQbs0Y1MuSs73GA4mEcBstZVuHGxODD1GjqF87v6s= Subject key identifier: B1:BC:98:E2:7F:74:8B:8B:71:8C:6F:3B:24:7E:13:C3:FC:BB:17:9B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD9CA36D0BB5AEBD6BE40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e3689023-3ce9-3c35-be7a-80f054d80922.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396566 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d9:ca:36:d0:bb:5a:eb:d6:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=a4353629-83c4-4c04-a505-814c6f86503e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fc:ef:8d:b5:c1:53:fe:ec:74:c4:f7:54:58: e6:00:a5:02:c3:56:29:cf:6b:00:53:14:e8:26:dd: 52:ac:dd:10:22:2a:d3:ef:c1:0b:f8:be:2e:77:96: 10:74:04:6b:5c:e4:7d:00:03:61:d9:ca:6a:34:dc: b5:24:45:65:bf:6c:0f:29:4c:f8:f1:26:d7:96:bf: 33:e0:56:68:81:df:32:8e:3a:8b:5d:a7:9e:6c:08: f6:26:02:50:ac:c8:74:54:d2:3d:af:17:e2:27:e0: 2b:46:b2:89:90:ea:2c:9b:6a:1d:70:5d:9f:7d:80: bb:43:d0:f7:36:1c:14:78:8e:a2:4e:de:fb:0d:6c: af:b8:c0:8b:a5:b6:d0:d1:87:6e:11:71:c4:2c:8f: 4f:15:ce:8a:3b:78:c1:19:7b:2f:df:50:38:86:c5: 10:ad:15:25:71:35:cd:a3:fa:d1:b5:4d:49:74:4c: 5b:b8:65:fb:4c:b7:3e:66:99:e7:13:4c:4a:f1:61: c5:73:3b:ea:43:cd:b5:eb:f4:ea:d0:62:41:a0:13: c2:12:29:4b:e0:37:44:c9:4b:40:80:a7:1c:a7:67: d0:4f:af:30:f9:e9:88:f0:3c:f8:91:42:ab:25:cf: 38:9f:82:05:00:06:56:ce:1f:3c:e4:e6:3b:e4:a0: 8c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BC:98:E2:7F:74:8B:8B:71:8C:6F:3B:24:7E:13:C3:FC:BB:17:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e3689023-3ce9-3c35-be7a-80f054d80922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:cf:ed:af:38:76:5f:75:8e:ed:d1:f0:d7:13:64:ec:c4:24: c4:37:3b:32:14:09:f9:8e:6a:22:5d:e6:56:83:e3:65:a5:fb: 66:97:f4:7a:1d:c0:07:55:b8:6a:c7:a0:98:e9:5a:a7:29:85: d3:55:54:5b:7a:f5:33:79:85:37:79:3a:41:eb:3e:59:c9:53: 6c:df:68:14:07:9e:87:ce:60:31:7f:83:11:6c:61:d8:e3:7a: 19:60:71:c9:2d:2e:0a:48:d2:4d:b6:a5:1f:89:2b:e3:c1:01: d0:bd:d1:2b:ca:ec:54:27:a1:7a:0e:c4:8d:6a:00:ef:75:39: cd:c2:6e:5b:f5:0f:8f:58:53:4c:f8:28:9f:74:fd:d5:18:ab: e5:7b:b7:b2:f8:14:28:38:63:9c:c5:5a:c6:8d:f6:63:46:d4: 4a:60:5b:c0:b1:56:13:da:1c:13:a6:34:77:13:f4:77:50:f1: a7:f6:5e:ae:c3:e3:47:c5:ae:c0:d1:1d:ba:05:ea:c8:8e:d2: 95:5f:e5:68:47:78:bc:73:2c:a7:a1:ec:f6:d7:d6:d2:15:19: fe:33:33:2b:14:fb:9c:b5:81:c1:b6:54:a5:0f:59:e8:80:20: ff:1b:94:0c:6d:5d:b2:2c:99:10:2a:86:b5:0d:fe:a7:1a:a4: 05:2c:fd:cb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9nKNtC7WuvWvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YTQzNTM2MjktODNjNC00YzA0LWE1MDUtODE0YzZmODY1MDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvzvjbXBU/7sdMT3VFjmAKUCw1Ypz2sAUxTo Jt1SrN0QIirT78EL+L4ud5YQdARrXOR9AANh2cpqNNy1JEVlv2wPKUz48SbXlr8z 4FZogd8yjjqLXaeebAj2JgJQrMh0VNI9rxfiJ+ArRrKJkOosm2odcF2ffYC7Q9D3 NhwUeI6iTt77DWyvuMCLpbbQ0YduEXHELI9PFc6KO3jBGXsv31A4hsUQrRUlcTXN o/rRtU1JdExbuGX7TLc+ZpnnE0xK8WHFczvqQ8216/Tq0GJBoBPCEilL4DdEyUtA gKccp2fQT68w+emI8Dz4kUKrJc84n4IFAAZWzh885OY75KCM9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLG8mOJ/dIuLcYxvOyR+E8P8uxebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTM2ODkwMjMtM2NlOS0z YzM1LWJlN2EtODBmMDU0ZDgwOTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBdz+2vOHZfdY7t0fDXE2TsxCTENzsyFAn5jmoiXeZWg+Nlpftml/R6 HcAHVbhqx6CY6VqnKYXTVVRbevUzeYU3eTpB6z5ZyVNs32gUB56HzmAxf4MRbGHY 43oZYHHJLS4KSNJNtqUfiSvjwQHQvdEryuxUJ6F6DsSNagDvdTnNwm5b9Q+PWFNM +CifdP3VGKvle7ey+BQoOGOcxVrGjfZjRtRKYFvAsVYT2hwTpjR3E/R3UPGn9l6u w+NHxa7A0R26BerIjtKVX+VoR3i8cyynoez219bSFRn+MzMrFPuctYHBtlSlD1no gCD/G5QMbV2yLJkQKoa1Df6nGqQFLP3L -----END CERTIFICATE-----Generated at Thu Mar 26 13:52:36 2026 by rpki-client