$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f6ec4095-dc43-3fc3-a650-a92921654c7b.roa File: f6ec4095-dc43-3fc3-a650-a92921654c7b.roa (raw, json) Hash identifier: 9pCesqsChrT+IkLNiR3qwf99uMdLVmOuY9ubMlfnTG4= Subject key identifier: 65:CC:87:D8:A6:FB:BA:11:03:66:2D:2C:A7:DA:88:0D:BD:44:2B:DA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFE1C814DA3421CDFD1880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f6ec4095-dc43-3fc3-a650-a92921654c7b.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396541 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:e1:c8:14:da:34:21:cd:fd:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=41eb240a-96ff-4343-86ea-70744d73f4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:03:2f:49:4c:b9:7c:8a:46:28:73:aa:36: 94:bc:46:6d:a2:6e:83:0f:3d:98:22:d7:82:a8:f7: 66:67:83:2e:c1:e9:3a:63:ac:fb:de:a7:06:63:be: e2:d5:a5:4c:70:36:d8:77:6c:d1:b6:cf:2e:f6:02: d6:89:ee:25:4c:dc:46:f3:93:37:fe:dc:af:8e:1f: 6c:61:91:03:53:2c:d3:f3:47:3f:9a:7c:9a:59:1d: bc:61:2b:86:10:e6:32:70:be:fc:22:fa:ba:02:db: fa:c7:33:7c:76:e4:51:05:a5:e3:62:b1:c0:d0:47: 9b:89:44:9b:e8:bb:f8:25:ea:05:64:80:19:25:75: 9e:86:d8:12:4e:70:1a:28:a0:59:43:b8:0f:dd:63: a2:c9:57:81:cc:18:83:10:b2:da:68:34:13:c0:b9: d8:a5:4b:77:f6:c4:28:31:a6:b5:50:45:30:ae:48: a1:6f:2d:b2:66:25:6a:3f:e3:de:25:a3:2d:bd:d1: 8f:b6:d6:3e:0f:9b:49:f0:3d:fb:8f:78:92:45:a7: c1:d9:f5:a5:3a:65:af:41:f3:08:df:9b:11:19:0a: 8d:57:0f:80:b7:6c:b5:4e:4c:02:9d:ea:84:c1:ba: a4:12:f0:31:14:d8:bb:cf:32:89:38:a3:a0:fe:f0: be:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CC:87:D8:A6:FB:BA:11:03:66:2D:2C:A7:DA:88:0D:BD:44:2B:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f6ec4095-dc43-3fc3-a650-a92921654c7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:a3:89:b1:80:f6:65:53:13:fe:ef:40:bb:01:76:e6:15:bd: c1:ba:dd:be:2d:14:72:25:4f:64:40:11:d6:91:77:80:8f:f5: 5e:fd:a6:ab:bc:8a:74:31:b8:22:69:38:9e:22:65:fc:12:99: ac:c7:64:97:e1:a9:13:57:cc:f6:03:41:83:55:ff:0f:f6:1c: fd:c9:d8:10:d9:ba:2a:03:f6:11:45:ea:c0:b9:69:7b:69:45: 22:5b:6f:92:a5:70:0a:2a:78:93:12:40:1e:48:0b:ae:d2:56: 4d:b2:f8:9a:2b:9e:09:3d:34:93:67:0e:71:8b:64:40:af:02: 86:1d:b1:17:9b:fc:89:dc:12:62:96:82:d3:eb:77:26:ee:57: 56:5c:25:46:d8:54:15:ac:a6:f9:bc:80:39:8b:10:2c:42:82: 9d:c9:2a:17:b1:72:e3:f2:35:f3:85:3b:26:87:c2:cb:68:c1: 97:a5:87:40:5b:70:36:42:22:62:cd:4e:29:f6:25:a2:ad:24: 12:61:96:ac:d4:1f:09:15:45:6f:74:19:89:77:fd:15:87:09: f6:2e:73:ce:7e:01:cd:a4:01:ce:4c:52:47:d0:de:0c:be:ce: df:7c:43:73:01:a9:2f:9d:63:a4:43:d4:5c:78:ff:65:05:fe: 5d:33:ae:63 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/+HIFNo0Ic39GIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NDFlYjI0MGEtOTZmZi00MzQzLTg2ZWEtNzA3NDRkNzNmNGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/oDL0lMuXyKRihzqjaUvEZtom6DDz2YIteC qPdmZ4Muwek6Y6z73qcGY77i1aVMcDbYd2zRts8u9gLWie4lTNxG85M3/tyvjh9s YZEDUyzT80c/mnyaWR28YSuGEOYycL78Ivq6Atv6xzN8duRRBaXjYrHA0EebiUSb 6Lv4JeoFZIAZJXWehtgSTnAaKKBZQ7gP3WOiyVeBzBiDELLaaDQTwLnYpUt39sQo Maa1UEUwrkihby2yZiVqP+PeJaMtvdGPttY+D5tJ8D37j3iSRafB2fWlOmWvQfMI 35sRGQqNVw+At2y1TkwCneqEwbqkEvAxFNi7zzKJOKOg/vC+dQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGXMh9im+7oRA2YtLKfaiA29RCvaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjZlYzQwOTUtZGM0My0z ZmMzLWE2NTAtYTkyOTIxNjU0YzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAIo4mxgPZlUxP+70C7AXbmFb3But2+LRRyJU9kQBHWkXeAj/Ve/aar vIp0MbgiaTieImX8Epmsx2SX4akTV8z2A0GDVf8P9hz9ydgQ2boqA/YRRerAuWl7 aUUiW2+SpXAKKniTEkAeSAuu0lZNsviaK54JPTSTZw5xi2RArwKGHbEXm/yJ3BJi loLT63cm7ldWXCVG2FQVrKb5vIA5ixAsQoKdySoXsXLj8jXzhTsmh8LLaMGXpYdA W3A2QiJizU4p9iWirSQSYZas1B8JFUVvdBmJd/0Vhwn2LnPOfgHNpAHOTFJH0N4M vs7ffENzAakvnWOkQ9RceP9lBf5dM65j -----END CERTIFICATE-----Generated at Thu Mar 26 11:15:55 2026 by rpki-client