$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/041258b5-2978-33e4-9357-867a375a9965.roa File: 041258b5-2978-33e4-9357-867a375a9965.roa (raw, json) Hash identifier: uNik3j1C2/PEX5/I8Oklx8QNnfvkeARa+RGP327nPf8= Subject key identifier: 6D:77:03:FA:61:1C:FA:7C:05:6B:31:B3:EC:A1:30:5C:60:C5:31:B7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF878DA72FC21242C0FE20EC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/041258b5-2978-33e4-9357-867a375a9965.roa Signing time: Tue 24 Feb 2026 15:18:37 +0000 ROA not before: Tue 24 Feb 2026 15:18:37 +0000 ROA not after: Mon 25 May 2026 14:18:37 +0000 asID: 396572 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:78:da:72:fc:21:24:2c:0f:e2:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 24 15:18:37 2026 GMT Not After : May 25 14:18:37 2026 GMT Subject: CN=3e5b8a3b-4d70-4062-b09e-dd30216f4955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:11:79:28:f1:a5:7a:9a:03:1c:dc:e2:21:76: 96:7c:2f:72:a5:3e:c6:63:e8:af:60:d9:0e:95:2e: b0:0e:5e:5b:54:53:96:07:55:0f:53:20:4e:db:85: fc:62:e4:a6:71:5c:9b:1c:5f:a0:d2:48:cd:e1:94: 68:58:4b:fe:56:2e:4a:0b:a7:e4:72:e0:7c:1d:bf: c3:25:a9:5a:65:a5:88:05:31:43:60:fa:07:d6:85: 6e:9a:9f:7c:e0:94:af:a2:6d:85:03:a8:ba:c7:fb: 15:41:7b:5f:cd:bb:9e:4a:e0:54:4b:33:ea:dc:65: 30:0f:83:24:05:26:ac:5b:15:4d:cc:b4:28:41:ce: d8:6c:82:66:dc:10:bb:08:86:49:53:42:ab:80:c8: d4:41:f1:90:e2:9d:11:fb:22:c5:5f:44:10:95:f5: 73:d3:c9:d8:07:f1:9f:19:b2:43:c2:81:69:f6:59: 5d:bd:6a:1b:68:8f:57:ae:24:8f:37:12:5e:ee:21: 0f:2a:f2:29:13:43:a7:f7:4c:e7:ed:ce:f6:b6:81: 24:26:93:4d:e6:c7:55:c0:81:11:ad:0f:58:01:6c: 03:ca:34:e4:81:fa:ec:10:f2:9f:da:c4:4c:f8:22: 55:a7:70:3b:31:76:e6:ab:c4:8b:58:c3:17:b8:b4: db:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:77:03:FA:61:1C:FA:7C:05:6B:31:B3:EC:A1:30:5C:60:C5:31:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/041258b5-2978-33e4-9357-867a375a9965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:65:6d:14:70:58:8d:7f:59:4f:bf:98:f7:15:57:e9:55:0d: e7:e6:d8:e9:d1:fc:d8:6b:e6:3f:f6:f5:68:a8:fb:34:5c:7d: 29:97:8d:a4:50:e1:97:ed:5f:1c:d8:e4:14:4c:d6:be:53:68: 92:a4:50:2f:ea:00:54:b5:a2:eb:09:7c:21:87:68:5d:fe:cb: 15:9f:97:b9:cd:13:18:fe:a2:3b:d8:4d:53:21:8c:8d:f4:bd: 1f:01:cc:1e:e4:5c:c4:75:6f:b5:e5:74:26:d0:00:57:59:78: 19:e4:76:4f:ec:f2:99:34:05:1a:9d:8c:84:6d:a3:dd:52:16: c2:06:64:14:5e:be:b4:5e:01:7d:3e:fc:6a:9b:2d:a8:04:8b: 69:f6:ad:68:0b:a4:ca:8d:e1:0c:ea:8c:95:f2:11:79:d1:23: 48:91:c4:54:d8:ce:b3:fa:5e:ff:93:75:10:97:3e:ea:3f:1d: 49:92:af:60:2c:ac:c0:07:88:98:c8:3b:03:ee:ee:2c:55:f8: 35:12:2a:6f:a1:bf:b0:db:1b:48:ed:d6:8c:9c:a1:bc:9c:ef: 65:90:f9:b0:45:19:bb:30:96:29:e8:bc:74:19:5a:c4:fd:c3: 9a:2c:23:73:06:4b:ae:09:6d:cd:32:c5:68:77:88:48:9d:9c: 8b:ff:80:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4eNpy/CEkLA/iDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyNDE1MTgzN1oXDTI2MDUyNTE0MTgzN1owLzEtMCsGA1UEAxMk M2U1YjhhM2ItNGQ3MC00MDYyLWIwOWUtZGQzMDIxNmY0OTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xF5KPGlepoDHNziIXaWfC9ypT7GY+ivYNkO lS6wDl5bVFOWB1UPUyBO24X8YuSmcVybHF+g0kjN4ZRoWEv+Vi5KC6fkcuB8Hb/D JalaZaWIBTFDYPoH1oVump984JSvom2FA6i6x/sVQXtfzbueSuBUSzPq3GUwD4Mk BSasWxVNzLQoQc7YbIJm3BC7CIZJU0KrgMjUQfGQ4p0R+yLFX0QQlfVz08nYB/Gf GbJDwoFp9lldvWobaI9XriSPNxJe7iEPKvIpE0On90zn7c72toEkJpNN5sdVwIER rQ9YAWwDyjTkgfrsEPKf2sRM+CJVp3A7MXbmq8SLWMMXuLTb4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG13A/phHPp8BWsxs+yhMFxgxTG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDQxMjU4YjUtMjk3OC0z M2U0LTkzNTctODY3YTM3NWE5OTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdlbRRwWI1/WU+/mPcVV+lVDefm2OnR/Nhr5j/29Wio+zRcfSmXjaRQ 4ZftXxzY5BRM1r5TaJKkUC/qAFS1ousJfCGHaF3+yxWfl7nNExj+ojvYTVMhjI30 vR8BzB7kXMR1b7XldCbQAFdZeBnkdk/s8pk0BRqdjIRto91SFsIGZBRevrReAX0+ /GqbLagEi2n2rWgLpMqN4QzqjJXyEXnRI0iRxFTYzrP6Xv+TdRCXPuo/HUmSr2As rMAHiJjIOwPu7ixV+DUSKm+hv7DbG0jt1oycobyc72WQ+bBFGbswlinovHQZWsT9 w5osI3MGS64Jbc0yxWh3iEidnIv/gDk= -----END CERTIFICATE-----Generated at Mon Mar 2 08:55:57 2026 by rpki-client