$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8dfa8ec-1f57-3431-962a-33787eea5e55.roa File: f8dfa8ec-1f57-3431-962a-33787eea5e55.roa (raw, json) Hash identifier: 4ACTCnVYHYcm5mPNrIeIzlxOeKMWndieTHnGlbd/LcA= Subject key identifier: 2A:00:E3:70:F7:D2:3E:B4:1A:C6:06:30:F1:20:B6:AD:94:D4:C7:A6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD84245E6649B33B9BC40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8dfa8ec-1f57-3431-962a-33787eea5e55.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396543 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d8:42:45:e6:64:9b:33:b9:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=eec57f2e-d72f-4f8e-9da3-87920aa8c204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6c:a8:0b:46:bc:d5:d3:7f:ca:21:b8:b1:51: f4:4e:25:4d:f0:62:48:ed:f2:76:80:8e:51:df:60: 03:7c:a5:f0:8c:e5:58:e8:f5:6b:bb:76:d8:d2:f5: 56:bd:bf:e2:94:5f:92:3b:73:48:34:de:57:eb:3b: c6:31:db:78:b3:88:e9:59:fd:a0:b2:f3:2f:33:34: c1:e0:4c:f4:bc:5b:c1:9d:30:c4:b8:dd:e7:9c:42: bf:a3:cd:75:dd:8a:01:48:fd:a3:9b:25:5e:1b:04: b3:12:ba:77:23:f1:c9:5e:6a:8a:56:a9:9f:71:ad: b8:eb:cf:a1:64:58:27:6c:56:d8:f6:c5:ca:d9:0d: 16:0c:10:0e:e0:f4:a4:4f:dd:33:2b:59:09:c2:3d: c4:ea:af:ed:a0:d4:e2:5f:4a:e0:5e:5a:ee:98:c6: 50:03:5c:14:f4:e0:75:06:27:2f:39:fd:8f:27:1a: b8:e5:4f:03:69:f6:e2:d8:d6:ff:8d:e5:eb:b9:9f: 03:93:7a:28:0a:86:5e:77:a2:51:85:15:57:d3:21: 7f:f6:92:58:9c:78:af:36:ec:eb:5b:d9:c2:6c:a9: ed:8b:ea:46:12:1c:b0:fe:31:62:54:21:00:30:b0: 19:8e:bd:c9:0a:b7:53:dc:ae:13:29:45:56:d6:bc: 59:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:00:E3:70:F7:D2:3E:B4:1A:C6:06:30:F1:20:B6:AD:94:D4:C7:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8dfa8ec-1f57-3431-962a-33787eea5e55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:37:d4:19:e4:fb:39:4f:ff:ef:0b:a2:a3:61:4c:7e:35:f6: 12:5e:b0:c2:22:c5:66:cc:bd:fd:85:6e:ae:f9:34:91:fd:01: a9:d0:0c:64:fe:32:27:82:85:8f:b5:7f:07:de:55:99:df:da: e3:85:c2:6e:1d:05:9d:c1:08:41:d9:91:96:f4:3d:33:4e:a5: d9:a5:63:8a:5f:81:6c:c9:af:fb:07:10:f1:07:c4:4c:10:d4: 8a:aa:db:ee:07:7d:eb:a2:30:06:0c:db:a2:3f:a2:89:c7:81: 1a:cc:3f:76:26:22:6b:d9:87:7c:b9:b5:20:0a:ef:f5:20:93: aa:45:e7:70:17:50:0d:6e:a3:78:0a:3b:7f:3a:71:d4:b0:a1: d0:94:ca:89:e9:cc:8e:4a:5d:6e:32:1f:87:be:2f:fb:6e:46: 74:26:cd:05:54:ee:77:2d:a4:33:24:d4:0d:2f:73:d4:08:bd: 7d:7a:0b:c0:0e:57:fb:8e:6b:a3:bb:10:a5:45:26:ca:59:67: 5f:b3:2b:f3:9f:93:25:d0:32:26:92:f0:09:2b:b1:68:82:f0: 84:7e:1f:d9:65:7e:fd:04:bb:7c:21:dd:ac:7a:e0:a8:47:e5: fa:55:06:b4:8f:de:d3:81:68:69:79:ba:3a:79:0c:09:5e:30: 83:76:3b:8b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9hCReZkmzO5vEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZWVjNTdmMmUtZDcyZi00ZjhlLTlkYTMtODc5MjBhYThjMjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWyoC0a81dN/yiG4sVH0TiVN8GJI7fJ2gI5R 32ADfKXwjOVY6PVru3bY0vVWvb/ilF+SO3NINN5X6zvGMdt4s4jpWf2gsvMvMzTB 4Ez0vFvBnTDEuN3nnEK/o8113YoBSP2jmyVeGwSzErp3I/HJXmqKVqmfca2468+h ZFgnbFbY9sXK2Q0WDBAO4PSkT90zK1kJwj3E6q/toNTiX0rgXlrumMZQA1wU9OB1 BicvOf2PJxq45U8Dafbi2Nb/jeXruZ8Dk3ooCoZed6JRhRVX0yF/9pJYnHivNuzr W9nCbKnti+pGEhyw/jFiVCEAMLAZjr3JCrdT3K4TKUVW1rxZ1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCoA43D30j60GsYGMPEgtq2U1MemMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjhkZmE4ZWMtMWY1Ny0z NDMxLTk2MmEtMzM3ODdlZWE1ZTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB1N9QZ5Ps5T//vC6KjYUx+NfYSXrDCIsVmzL39hW6u+TSR/QGp0Axk /jIngoWPtX8H3lWZ39rjhcJuHQWdwQhB2ZGW9D0zTqXZpWOKX4Fsya/7BxDxB8RM ENSKqtvuB33rojAGDNuiP6KJx4EazD92JiJr2Yd8ubUgCu/1IJOqRedwF1ANbqN4 Cjt/OnHUsKHQlMqJ6cyOSl1uMh+Hvi/7bkZ0Js0FVO53LaQzJNQNL3PUCL19egvA Dlf7jmujuxClRSbKWWdfsyvzn5Ml0DImkvAJK7FogvCEfh/ZZX79BLt8Id2seuCo R+X6VQa0j97TgWhpebo6eQwJXjCDdjuL -----END CERTIFICATE-----Generated at Thu Mar 26 22:26:22 2026 by rpki-client