$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0db6e0cd-9d2a-3179-b845-986a5641f92d.roa File: 0db6e0cd-9d2a-3179-b845-986a5641f92d.roa (raw, json) Hash identifier: ZEUhA+a/60yni/yM12j2hYf0Bt2IHqMDrOTijGYlypk= Subject key identifier: 60:84:F5:8A:4D:E6:32:D1:2C:E1:4B:31:17:63:12:A1:71:D5:82:0A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF878DC83887123278507C7C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0db6e0cd-9d2a-3179-b845-986a5641f92d.roa Signing time: Tue 24 Feb 2026 15:18:38 +0000 ROA not before: Tue 24 Feb 2026 15:18:38 +0000 ROA not after: Mon 25 May 2026 14:18:38 +0000 asID: 397202 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:78:dc:83:88:71:23:27:85:07:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 24 15:18:38 2026 GMT Not After : May 25 14:18:38 2026 GMT Subject: CN=ad43d023-f229-4dae-8c20-dc1393ac91e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:36:33:38:06:d3:cd:1c:5b:43:01:2f:84:98: 7f:f1:20:08:dd:42:cb:b7:9d:b8:99:61:5e:3d:54: 5c:42:16:98:8e:ef:45:49:31:81:c0:75:51:01:3b: 07:23:62:cc:e3:ac:f5:5c:73:a6:75:b1:2b:93:88: 65:1a:54:b6:cf:1e:fd:f3:47:08:53:97:9b:f3:2e: c0:80:8d:17:61:25:71:81:54:73:44:ba:53:1b:e5: 8d:bf:88:80:74:6e:0c:d3:2c:c5:ea:fc:5a:a2:00: 22:3c:92:f5:8d:91:aa:2d:8f:30:9c:b5:d9:91:35: 40:d6:26:2f:10:80:d8:64:35:9a:75:52:5a:f2:f3: ce:be:4f:4c:56:66:fe:03:94:6f:df:7b:35:23:64: df:7f:b8:ff:ba:7b:72:93:2b:11:dc:08:06:15:c1: cd:93:64:8d:34:37:15:50:31:0a:99:51:39:5e:4d: 6d:be:bc:b4:9a:4c:00:9f:0d:6f:93:c1:bf:0f:8d: ce:69:20:05:1a:04:ea:3a:e8:92:78:58:ad:24:0e: 43:8e:78:4b:0e:f5:45:1b:7c:ff:07:38:9f:5f:8e: 97:a4:0d:ff:db:53:0e:c0:13:61:86:06:4d:f9:1b: 33:c3:4f:59:3f:79:08:f5:d1:f2:b0:31:81:b3:f0: 45:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:84:F5:8A:4D:E6:32:D1:2C:E1:4B:31:17:63:12:A1:71:D5:82:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0db6e0cd-9d2a-3179-b845-986a5641f92d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b2:96:1f:de:16:ab:68:94:48:eb:d8:52:f2:8b:9b:d1:b0: ab:f4:f0:89:56:cb:fd:ac:ad:1d:bc:49:47:52:1b:fa:37:34: 19:32:28:ce:c4:aa:2d:59:f0:a4:60:b8:78:2d:49:ff:ef:41: 4a:ff:d8:c7:39:65:ad:82:da:47:7e:cc:89:13:3a:6f:4e:1d: 91:a7:8f:a2:b7:2d:cd:a1:dd:8f:2c:93:6d:a7:a1:f5:66:93: cc:14:36:00:7c:d6:ef:f3:48:cb:b7:33:33:a3:1d:6c:e1:2d: 2d:b0:36:33:83:de:73:ac:72:f2:cf:81:55:b8:2c:bc:4c:07: 3d:b1:7b:13:92:53:ee:ff:40:05:70:20:82:64:66:1d:c9:86: 24:49:d4:e1:94:ae:e9:cf:52:14:6d:dc:2d:3a:fd:3d:76:b3: a7:6d:20:f8:44:5d:e5:f2:f2:18:b6:28:97:83:e6:77:b4:eb: c1:97:4b:81:29:62:98:1e:9f:b4:ac:0d:29:97:44:fe:bd:02: 19:24:4d:7a:83:1c:84:4c:a4:54:f2:b7:8e:d8:f7:a9:a3:4d: e3:91:a8:b8:88:81:d9:08:7b:78:57:98:c0:12:b8:00:b8:55: 93:ac:2a:85:bf:d9:a5:52:7f:e0:93:11:94:01:56:b9:88:bc: 7b:d8:ea:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4eNyDiHEjJ4UHx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyNDE1MTgzOFoXDTI2MDUyNTE0MTgzOFowLzEtMCsGA1UEAxMk YWQ0M2QwMjMtZjIyOS00ZGFlLThjMjAtZGMxMzkzYWM5MWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTYzOAbTzRxbQwEvhJh/8SAI3ULLt524mWFe PVRcQhaYju9FSTGBwHVRATsHI2LM46z1XHOmdbErk4hlGlS2zx7980cIU5eb8y7A gI0XYSVxgVRzRLpTG+WNv4iAdG4M0yzF6vxaogAiPJL1jZGqLY8wnLXZkTVA1iYv EIDYZDWadVJa8vPOvk9MVmb+A5Rv33s1I2Tff7j/untykysR3AgGFcHNk2SNNDcV UDEKmVE5Xk1tvry0mkwAnw1vk8G/D43OaSAFGgTqOuiSeFitJA5DjnhLDvVFG3z/ BzifX46XpA3/21MOwBNhhgZN+Rszw09ZP3kI9dHysDGBs/BFTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCE9YpN5jLRLOFLMRdjEqFx1YIKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGRiNmUwY2QtOWQyYS0z MTc5LWI4NDUtOTg2YTU2NDFmOTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKylh/eFqtolEjr2FLyi5vRsKv08IlWy/2srR28SUdSG/o3NBkyKM7E qi1Z8KRguHgtSf/vQUr/2Mc5Za2C2kd+zIkTOm9OHZGnj6K3Lc2h3Y8sk22nofVm k8wUNgB81u/zSMu3MzOjHWzhLS2wNjOD3nOscvLPgVW4LLxMBz2xexOSU+7/QAVw IIJkZh3JhiRJ1OGUrunPUhRt3C06/T12s6dtIPhEXeXy8hi2KJeD5ne068GXS4Ep Ypgen7SsDSmXRP69AhkkTXqDHIRMpFTyt47Y96mjTeORqLiIgdkIe3hXmMASuAC4 VZOsKoW/2aVSf+CTEZQBVrmIvHvY6o0= -----END CERTIFICATE-----Generated at Mon Mar 2 02:02:29 2026 by rpki-client