$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd8d471e-9bdc-3a47-94f8-ee7ec6a429fb.roa File: fd8d471e-9bdc-3a47-94f8-ee7ec6a429fb.roa (raw, json) Hash identifier: IyJHRQraKRdHU/0rcpvFWIHazRb1RE/MevBueavh6gA= Subject key identifier: 10:11:EA:DE:9E:2C:0E:49:4B:C6:FE:2C:12:5B:12:02:85:B9:E0:28 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3DFFD7E509F5C464A2091A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd8d471e-9bdc-3a47-94f8-ee7ec6a429fb.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396587 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d7:e5:09:f5:c4:64:a2:09:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=ec8a3060-c649-44bf-809b-cc01fe55422e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ab:d8:4a:db:d4:7d:09:68:8b:e2:39:33:4d: 42:83:a6:72:36:93:8e:b7:d0:0a:47:79:21:5f:3f: b1:3e:fa:96:b0:75:03:eb:4e:64:3a:a2:cc:4d:a6: 18:47:6e:5a:ce:87:9a:c7:ae:47:e7:16:51:09:de: 13:6c:eb:3d:02:85:8d:3c:e9:84:a5:61:96:ae:69: b8:14:c3:1b:24:26:52:5b:6c:13:8b:6c:5e:ba:e7: e4:e0:52:14:c7:e6:24:64:bb:3c:eb:6b:73:07:fc: 29:58:47:67:61:fb:51:b4:98:e9:f4:bc:33:74:70: 16:46:0c:89:6c:7a:86:79:01:28:94:84:dd:f0:c0: b4:20:7a:f8:3f:ae:13:05:3f:cc:d3:91:22:cd:52: d7:7c:13:7f:a5:44:6f:41:bf:79:b0:3b:b3:75:8b: 49:ee:97:24:15:68:a7:70:56:46:41:1a:6b:7d:e7: c7:da:dd:f1:1d:fd:4d:fd:95:01:18:56:14:59:28: 52:ce:a8:b5:74:e9:fa:ee:f7:71:ea:ec:d1:56:c4: 30:29:f2:f9:80:25:c5:23:dc:d9:03:db:82:20:48: 47:41:e9:31:5a:da:66:d6:84:30:1b:c2:97:d7:00: f7:52:d3:c5:28:24:a0:46:79:b6:aa:1f:79:ed:ac: 4c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:11:EA:DE:9E:2C:0E:49:4B:C6:FE:2C:12:5B:12:02:85:B9:E0:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd8d471e-9bdc-3a47-94f8-ee7ec6a429fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:7e:a2:1a:69:5e:13:c5:25:58:64:31:58:7a:ed:28:a4:aa: 35:31:42:22:6e:53:05:05:01:fb:8b:3b:a9:0e:51:22:f8:01: 2b:44:27:ec:36:60:49:f6:f1:17:e1:79:37:72:7a:46:4d:11: 71:e2:96:0c:43:eb:2a:b3:2b:46:9a:b5:f5:55:ee:12:9b:ed: c6:a7:a6:01:20:9f:f6:cd:65:b7:8f:c7:8d:f6:9b:ed:9c:c9: 33:b2:bf:39:ce:67:13:91:90:89:5a:32:3b:20:a0:08:3d:19: d4:8a:d4:ee:39:27:b0:0c:4d:8e:e5:c7:87:01:d4:9a:fc:43: b1:c0:63:3c:d4:01:81:4e:76:01:86:e9:68:3e:06:f9:51:3d: c3:b1:6c:16:74:0b:12:37:ad:b5:df:ec:5a:d5:57:70:ff:1a: 98:e4:f7:cb:ce:4a:cb:b3:47:9b:be:f6:4f:30:0b:95:fa:2f: 61:15:7a:b5:f6:f6:33:12:b3:b8:3a:18:fd:39:9b:44:a2:f8: 60:ef:ab:ea:90:42:a4:85:13:fc:69:df:29:3d:1d:69:ae:0e: f5:c0:b3:30:83:96:c4:7f:f4:72:99:da:ba:2e:fa:1c:af:8c: ed:3f:2a:33:54:2d:61:92:f6:02:33:e1:e0:97:ad:3c:6f:09: 73:6e:29:c2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/9flCfXEZKIJGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZWM4YTMwNjAtYzY0OS00NGJmLTgwOWItY2MwMWZlNTU0MjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqvYStvUfQloi+I5M01Cg6ZyNpOOt9AKR3kh Xz+xPvqWsHUD605kOqLMTaYYR25azoeax65H5xZRCd4TbOs9AoWNPOmEpWGWrmm4 FMMbJCZSW2wTi2xeuufk4FIUx+YkZLs862tzB/wpWEdnYftRtJjp9LwzdHAWRgyJ bHqGeQEolITd8MC0IHr4P64TBT/M05EizVLXfBN/pURvQb95sDuzdYtJ7pckFWin cFZGQRprfefH2t3xHf1N/ZUBGFYUWShSzqi1dOn67vdx6uzRVsQwKfL5gCXFI9zZ A9uCIEhHQekxWtpm1oQwG8KX1wD3UtPFKCSgRnm2qh957axMyQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBAR6t6eLA5JS8b+LBJbEgKFueAoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmQ4ZDQ3MWUtOWJkYy0z YTQ3LTk0ZjgtZWU3ZWM2YTQyOWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBofqIaaV4TxSVYZDFYeu0opKo1MUIiblMFBQH7izupDlEi+AErRCfs NmBJ9vEX4Xk3cnpGTRFx4pYMQ+sqsytGmrX1Ve4Sm+3Gp6YBIJ/2zWW3j8eN9pvt nMkzsr85zmcTkZCJWjI7IKAIPRnUitTuOSewDE2O5ceHAdSa/EOxwGM81AGBTnYB huloPgb5UT3DsWwWdAsSN6213+xa1Vdw/xqY5PfLzkrLs0ebvvZPMAuV+i9hFXq1 9vYzErO4Ohj9OZtEovhg76vqkEKkhRP8ad8pPR1prg71wLMwg5bEf/Rymdq6Lvoc r4ztPyozVC1hkvYCM+Hgl608bwlzbinC -----END CERTIFICATE-----Generated at Thu Mar 26 13:51:38 2026 by rpki-client