$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/efd81396-5147-3c24-9cee-58957a065927.roa File: efd81396-5147-3c24-9cee-58957a065927.roa (raw, json) Hash identifier: /ptkreVEAGds7ASWL5vSEBKYIQqRSi9Xl4ZprjNzvrU= Subject key identifier: 3C:54:90:BF:6A:23:6E:F4:2A:DE:FC:12:9F:F0:F0:9B:35:5E:94:78 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFDF886155CCE6CC1A5B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/efd81396-5147-3c24-9cee-58957a065927.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 36624 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:df:88:61:55:cc:e6:cc:1a:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=a8d1f30a-642f-4cc5-a17f-940a7cc19067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:27:a1:db:e1:ed:7a:9a:4e:7a:11:f5:0e:b5: 38:ea:b4:10:d6:ab:27:67:72:55:35:65:6d:bb:e6: 86:22:7e:1e:1c:0d:88:0d:48:a8:8e:73:2a:ea:cd: 4b:20:90:7a:26:6c:c6:06:c4:29:06:99:fa:d3:1f: b2:98:d5:ed:d1:6e:09:98:ca:28:cc:40:9e:87:db: 06:74:5b:aa:d7:fc:30:84:dd:cc:f7:31:ad:1b:d4: d1:5c:83:c2:a1:e7:78:b2:ff:ff:ea:39:e1:c9:67: e2:8c:79:24:6f:bc:bc:7e:81:10:e0:c8:e7:c6:43: 0e:9c:7a:8e:17:e8:f5:77:ed:49:b1:7d:c1:94:a4: 5b:8f:1c:19:7a:06:e4:ea:e4:0c:ca:34:45:0b:f7: 3e:8b:c5:2a:09:a6:90:82:ea:01:66:07:f5:2d:b1: 23:b8:6c:cd:c2:a6:39:55:64:63:75:81:23:dd:4c: c0:55:2b:94:ed:1f:b6:c2:97:b2:c9:79:11:98:85: af:75:a4:2d:26:0b:64:67:ef:e2:f1:ad:7b:2a:8d: 06:5c:cb:c4:54:8d:81:b3:39:e7:41:aa:51:9d:3b: 42:d2:5f:e7:94:d4:72:a5:4d:23:50:11:e1:ee:cc: 2d:29:e5:99:f3:b3:28:ae:97:a4:13:ac:1a:a8:dd: c2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:54:90:BF:6A:23:6E:F4:2A:DE:FC:12:9F:F0:F0:9B:35:5E:94:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/efd81396-5147-3c24-9cee-58957a065927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c2:c2:95:20:d5:ad:79:12:f6:b0:d8:f2:e3:ec:b9:54:f6: 1a:9b:1e:8e:19:ca:16:47:f1:70:a7:07:9a:43:7d:34:62:be: 8e:70:26:1a:47:64:14:70:84:cb:86:1c:e3:64:1e:66:fa:2d: fb:ba:16:44:ce:2c:28:ad:b9:b0:99:f1:15:b1:ef:37:45:25: 11:bc:81:97:d1:01:db:1b:f1:f7:ba:7b:14:8c:60:64:f6:40: 14:7a:ba:27:0d:75:7b:96:41:09:10:c8:aa:71:cc:00:9c:52: 95:b4:dc:05:17:c2:8e:00:26:a1:b5:04:7e:f9:80:9d:b3:1b: 58:54:f9:64:4a:b7:e9:4d:cf:41:38:e8:e1:58:63:c0:6a:35: 3a:7d:f3:63:49:86:ac:54:c4:85:47:29:54:ae:66:3a:12:cb: fe:c7:b3:89:c7:c2:8b:a9:84:9c:08:6e:25:fe:eb:cc:bb:44: 6d:68:22:88:83:3d:4f:bb:b1:b3:79:4e:2e:e7:3b:7f:7b:5e: 2c:e1:50:80:e6:e1:17:fa:57:c1:cb:6c:fc:48:76:20:aa:4f: b2:7b:8a:6d:90:6a:5c:07:e4:9d:61:84:bc:a7:21:78:8c:fa: 04:0e:53:71:de:48:83:f6:e1:d9:da:eb:99:5c:7b:55:13:88: 16:f1:c0:5f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9+IYVXM5swaWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YThkMWYzMGEtNjQyZi00Y2M1LWExN2YtOTQwYTdjYzE5MDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSeh2+HteppOehH1DrU46rQQ1qsnZ3JVNWVt u+aGIn4eHA2IDUiojnMq6s1LIJB6JmzGBsQpBpn60x+ymNXt0W4JmMoozECeh9sG dFuq1/wwhN3M9zGtG9TRXIPCoed4sv//6jnhyWfijHkkb7y8foEQ4MjnxkMOnHqO F+j1d+1JsX3BlKRbjxwZegbk6uQMyjRFC/c+i8UqCaaQguoBZgf1LbEjuGzNwqY5 VWRjdYEj3UzAVSuU7R+2wpeyyXkRmIWvdaQtJgtkZ+/i8a17Ko0GXMvEVI2Bsznn QapRnTtC0l/nlNRypU0jUBHh7swtKeWZ87MorpekE6waqN3CzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDxUkL9qI270Kt78Ep/w8Js1XpR4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWZkODEzOTYtNTE0Ny0z YzI0LTljZWUtNTg5NTdhMDY1OTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCGwsKVINWteRL2sNjy4+y5VPYamx6OGcoWR/FwpweaQ300Yr6OcCYa R2QUcITLhhzjZB5m+i37uhZEziworbmwmfEVse83RSURvIGX0QHbG/H3unsUjGBk 9kAUeronDXV7lkEJEMiqccwAnFKVtNwFF8KOACahtQR++YCdsxtYVPlkSrfpTc9B OOjhWGPAajU6ffNjSYasVMSFRylUrmY6Esv+x7OJx8KLqYScCG4l/uvMu0RtaCKI gz1Pu7GzeU4u5zt/e14s4VCA5uEX+lfBy2z8SHYgqk+ye4ptkGpcB+SdYYS8pyF4 jPoEDlNx3kiD9uHZ2uuZXHtVE4gW8cBf -----END CERTIFICATE-----Generated at Thu Mar 26 17:22:46 2026 by rpki-client