$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f20ab0a5-f910-3ea8-a01e-bcb09ea221a3.roa File: f20ab0a5-f910-3ea8-a01e-bcb09ea221a3.roa (raw, json) Hash identifier: W4tJF+1qagKb8s0MPxV8DTZ9wBHWZAUxlc+8MFsgFAg= Subject key identifier: 0A:F1:56:1F:79:A1:1F:51:F1:DB:E0:5A:98:5C:82:55:71:D4:96:51 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFDD8339B6594FDA56E340 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f20ab0a5-f910-3ea8-a01e-bcb09ea221a3.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396588 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:dd:83:39:b6:59:4f:da:56:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=f0de295a-c92a-4062-bc7a-5111af78206e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:e2:ea:28:85:d2:11:42:38:e3:a5:7f:eb:06: 30:e8:3b:09:78:c6:60:f3:88:cf:ea:1c:5d:37:4c: a0:72:30:d0:8e:54:7d:4e:dd:63:15:f5:ab:59:5a: d2:13:26:45:cd:ac:1c:10:16:fb:f4:31:c7:81:fe: 9c:7f:f5:35:76:83:af:97:19:69:bb:44:8f:cf:53: 9d:32:72:ec:d7:53:f5:5c:0e:8d:57:79:a8:32:c3: 78:9f:e9:e3:22:5c:78:5a:e3:ab:71:1b:d1:a4:2d: 72:10:9b:a1:f1:dc:d7:a8:50:c9:19:3c:89:c1:94: 02:bf:3f:b1:aa:24:e9:2e:85:bb:c1:4a:b0:8d:68: 66:84:04:d9:fe:8f:d5:0e:d0:0f:18:9f:63:64:24: 5e:28:dd:64:2d:d8:51:a8:07:35:41:dc:b5:38:60: 67:a9:70:53:de:9d:ef:07:3a:ef:14:43:fa:58:88: 91:d5:cf:b5:a0:a2:b3:75:7b:13:5d:6f:6c:bc:1f: 38:bc:8f:c1:76:27:4a:b4:b7:8e:ac:1b:4c:a3:a1: 14:f2:7c:50:4e:77:76:91:82:40:d5:6c:37:cb:7b: b5:15:d5:97:a7:7e:74:28:93:ed:85:7a:3b:f2:3b: 1d:fe:57:1c:82:4e:fe:6b:b3:b8:74:43:d3:16:3d: 6e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F1:56:1F:79:A1:1F:51:F1:DB:E0:5A:98:5C:82:55:71:D4:96:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f20ab0a5-f910-3ea8-a01e-bcb09ea221a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:69:bd:33:87:d8:25:a9:61:87:0a:a8:f0:d7:2d:32:3a:e3: fe:9d:bb:31:2a:6e:c1:30:bf:79:82:ee:8b:c7:80:49:62:26: 6a:aa:5f:87:00:5b:7a:b3:28:89:6b:22:c2:71:98:9b:f2:38: 73:b9:e8:d4:8c:97:47:f7:e6:a2:96:fb:09:95:53:87:d4:da: 2e:0b:58:29:88:28:ac:2e:fd:3a:8a:2a:b7:93:e5:59:7d:60: 3c:ef:37:15:7e:12:e9:7a:cc:46:c9:e7:10:da:47:de:26:9d: 8c:b5:0f:88:c3:ab:2e:08:9a:2c:ec:6e:90:94:a1:f8:c8:ad: ee:f5:8a:e8:5c:a6:0c:bd:57:d1:d9:e1:9d:6f:00:de:96:91: 11:e2:f0:bd:de:f1:6b:0c:d3:fd:5a:c2:90:e0:a0:d5:e4:80: 34:fc:f2:6c:fe:6f:64:6c:33:76:55:66:24:11:bb:1d:46:92: 1d:ed:b7:e3:8f:f2:f4:9d:49:e7:cf:fb:eb:1e:86:fc:73:b5: 6f:0d:c7:b6:85:0e:ad:3c:e3:8d:b9:7c:78:14:05:91:ea:4f: b0:ae:e2:19:5f:2d:c4:11:de:5d:4b:55:43:5a:da:e6:06:90: 47:02:ae:60:d6:24:5b:07:22:ff:c0:66:e2:db:ba:76:71:72: 49:07:ac:06 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/92DObZZT9pW40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZjBkZTI5NWEtYzkyYS00MDYyLWJjN2EtNTExMWFmNzgyMDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9+LqKIXSEUI446V/6wYw6DsJeMZg84jP6hxd N0ygcjDQjlR9Tt1jFfWrWVrSEyZFzawcEBb79DHHgf6cf/U1doOvlxlpu0SPz1Od MnLs11P1XA6NV3moMsN4n+njIlx4WuOrcRvRpC1yEJuh8dzXqFDJGTyJwZQCvz+x qiTpLoW7wUqwjWhmhATZ/o/VDtAPGJ9jZCReKN1kLdhRqAc1Qdy1OGBnqXBT3p3v BzrvFEP6WIiR1c+1oKKzdXsTXW9svB84vI/BdidKtLeOrBtMo6EU8nxQTnd2kYJA 1Ww3y3u1FdWXp350KJPthXo78jsd/lccgk7+a7O4dEPTFj1u4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFArxVh95oR9R8dvgWphcglVx1JZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjIwYWIwYTUtZjkxMC0z ZWE4LWEwMWUtYmNiMDllYTIyMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQABab0zh9glqWGHCqjw1y0yOuP+nbsxKm7BML95gu6Lx4BJYiZqql+H AFt6syiJayLCcZib8jhzuejUjJdH9+ailvsJlVOH1NouC1gpiCisLv06iiq3k+VZ fWA87zcVfhLpesxGyecQ2kfeJp2MtQ+Iw6suCJos7G6QlKH4yK3u9YroXKYMvVfR 2eGdbwDelpER4vC93vFrDNP9WsKQ4KDV5IA0/PJs/m9kbDN2VWYkEbsdRpId7bfj j/L0nUnnz/vrHob8c7VvDce2hQ6tPOONuXx4FAWR6k+wruIZXy3EEd5dS1VDWtrm BpBHAq5g1iRbByL/wGbi27p2cXJJB6wG -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:52 2026 by rpki-client