$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8209dbf-5f1a-34d2-a613-64138dec78da.roa File: f8209dbf-5f1a-34d2-a613-64138dec78da.roa (raw, json) Hash identifier: V0tKN+Ujx4+2te2whTJEjlv40kckQdNbWrO6T0xGPTE= Subject key identifier: 6B:EE:72:DA:B2:E9:7C:AC:80:BC:0E:25:66:1C:FA:BB:B3:DC:42:0B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD925F890011BB67E8480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8209dbf-5f1a-34d2-a613-64138dec78da.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396590 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d9:25:f8:90:01:1b:b6:7e:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=b2cc7b84-8421-49d8-9a0b-5eeea9e3b798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4d:b8:26:ee:a7:74:c3:4c:cf:53:bd:43:c2: c6:1f:07:bd:d6:3a:56:fd:03:56:65:0e:15:ff:73: 04:e1:8e:f4:d9:e2:87:02:ff:49:b0:20:13:2f:c6: 8b:af:3f:56:e3:0d:e4:1c:41:05:71:6a:5d:21:3b: 39:48:76:ab:cd:43:f8:30:da:73:ed:00:08:45:7b: 10:f9:e3:8b:e0:51:77:50:ba:15:1a:91:a9:7f:23: 28:f2:c2:57:8c:26:18:32:49:b6:6a:fb:e2:0e:39: 3c:db:51:66:40:b7:ad:97:3a:3f:08:28:12:94:97: 95:c8:db:6c:19:6f:ea:6f:b1:f7:38:23:be:0e:45: 7e:2d:d7:98:58:b0:5b:7a:8c:1c:c7:73:b7:96:4e: 80:42:96:45:20:10:8f:0f:8c:51:7b:0a:44:f0:35: 5c:d0:04:16:13:7b:4b:d2:44:81:5b:cd:e9:5e:f5: fb:16:0c:27:51:d9:9d:13:fc:5d:38:81:14:12:fc: c3:d8:61:2e:30:7d:29:09:45:75:37:4c:63:0b:34: 53:75:95:e0:4b:71:50:8e:24:6a:ad:18:71:99:a8: 85:32:29:f5:11:f4:90:e3:0c:b4:9d:1f:2e:e0:1e: ac:22:fb:96:e8:cc:94:80:8a:a6:cf:bb:33:e1:26: f0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EE:72:DA:B2:E9:7C:AC:80:BC:0E:25:66:1C:FA:BB:B3:DC:42:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8209dbf-5f1a-34d2-a613-64138dec78da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:48:37:98:57:61:6e:96:ba:d4:08:e4:bc:d8:b9:66:c4:29: ab:30:8b:10:5e:3d:ec:94:9b:ac:b3:f0:a6:6b:0f:fa:ec:03: b5:a9:83:de:64:d7:33:3a:10:f3:ae:0e:7e:1b:9f:d6:b7:b8: 78:5b:0b:ad:ea:7c:46:8c:9b:28:31:fb:60:a2:21:2f:dc:89: 8a:39:5f:7d:ba:74:49:cd:3d:9f:4b:f7:52:24:ba:52:34:37: 99:ef:47:7c:2b:c9:6f:71:9b:06:74:01:cc:2e:d5:54:df:1e: 48:26:ec:3a:cd:10:73:3f:45:a8:d0:fe:df:68:c2:fb:e6:eb: 30:b9:86:6b:ef:34:4b:ca:52:e7:c7:4a:d1:82:a5:56:08:32: 1e:64:c9:62:43:34:8f:f0:85:2a:77:c4:00:ba:1c:52:44:4f: ee:d9:55:90:fa:8d:12:37:5a:9a:42:9a:3f:f2:61:87:11:2f: 0f:8a:09:d4:26:f8:fc:e0:bc:f8:19:ba:71:a0:e4:68:ba:cf: ae:5d:1a:f8:f1:e9:30:e0:fe:9e:5f:55:98:48:dc:19:e8:3d: 0f:ef:a2:d6:04:3a:60:83:3e:5e:be:ca:34:ef:e7:a5:64:91: 55:72:dd:50:1e:4c:2e:9c:07:88:ef:e8:ff:af:6b:3c:73:c8: b0:a6:17:07 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9kl+JABG7Z+hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YjJjYzdiODQtODQyMS00OWQ4LTlhMGItNWVlZWE5ZTNiNzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE24Ju6ndMNMz1O9Q8LGHwe91jpW/QNWZQ4V /3ME4Y702eKHAv9JsCATL8aLrz9W4w3kHEEFcWpdITs5SHarzUP4MNpz7QAIRXsQ +eOL4FF3ULoVGpGpfyMo8sJXjCYYMkm2avviDjk821FmQLetlzo/CCgSlJeVyNts GW/qb7H3OCO+DkV+LdeYWLBbeowcx3O3lk6AQpZFIBCPD4xRewpE8DVc0AQWE3tL 0kSBW83pXvX7FgwnUdmdE/xdOIEUEvzD2GEuMH0pCUV1N0xjCzRTdZXgS3FQjiRq rRhxmaiFMin1EfSQ4wy0nR8u4B6sIvuW6MyUgIqmz7sz4Sbw2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGvuctqy6XysgLwOJWYc+ruz3EILMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjgyMDlkYmYtNWYxYS0z NGQyLWE2MTMtNjQxMzhkZWM3OGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAeSDeYV2FulrrUCOS82LlmxCmrMIsQXj3slJuss/Cmaw/67AO1qYPe ZNczOhDzrg5+G5/Wt7h4Wwut6nxGjJsoMftgoiEv3ImKOV99unRJzT2fS/dSJLpS NDeZ70d8K8lvcZsGdAHMLtVU3x5IJuw6zRBzP0Wo0P7faML75uswuYZr7zRLylLn x0rRgqVWCDIeZMliQzSP8IUqd8QAuhxSRE/u2VWQ+o0SN1qaQpo/8mGHES8PignU Jvj84Lz4GbpxoORous+uXRr48ekw4P6eX1WYSNwZ6D0P76LWBDpggz5evso07+el ZJFVct1QHkwunAeI7+j/r2s8c8iwphcH -----END CERTIFICATE-----Generated at Thu Mar 26 11:18:43 2026 by rpki-client