$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1447ec8a-b015-3be8-a570-2336d23d8551.roa File: 1447ec8a-b015-3be8-a570-2336d23d8551.roa (raw, json) Hash identifier: H7RxQ1cDQkWWoA+GeAgSuAr3MSQn2Hha2/NZ0KuJ1fw= Subject key identifier: 40:3A:D9:E5:BA:13:16:69:E2:57:DA:54:F5:0D:0A:F7:CA:70:A6:17 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF878DA482DE58E4EA5B12B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1447ec8a-b015-3be8-a570-2336d23d8551.roa Signing time: Tue 24 Feb 2026 15:18:37 +0000 ROA not before: Tue 24 Feb 2026 15:18:37 +0000 ROA not after: Mon 25 May 2026 14:18:37 +0000 asID: 396571 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:78:da:48:2d:e5:8e:4e:a5:b1:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 24 15:18:37 2026 GMT Not After : May 25 14:18:37 2026 GMT Subject: CN=db3a6624-5444-4ffe-acca-cf2c70bb6f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:56:7e:ad:4c:6b:ac:43:4f:a5:b8:a5:49:98: 50:ea:d8:75:e7:be:75:48:e3:c8:ad:c0:3b:92:d2: e9:97:b9:06:ce:01:f3:8d:40:ea:25:3f:3b:d2:08: ea:52:8c:de:2c:3f:04:4e:69:0d:12:13:05:bc:55: 56:e6:ae:1e:f8:33:7f:d9:80:47:d2:06:18:1e:37: 77:10:2c:0c:18:2c:84:3c:fb:6f:31:a7:06:3f:b3: e7:9f:d5:8d:5a:82:c4:62:3e:d9:b9:a9:7d:f9:2c: c3:21:8f:31:c7:3d:f7:db:d4:25:ce:0f:3d:56:da: fe:25:72:72:60:6b:65:35:df:22:79:a7:7b:00:99: 31:b9:6f:49:33:3a:1a:d9:81:cd:68:77:66:ee:95: a4:50:74:da:9c:b9:c3:ff:06:d0:96:1c:e2:d2:14: f1:a5:58:7e:de:2c:d9:f6:00:0e:16:2e:68:ab:43: 04:6a:cc:85:61:f0:33:fc:32:3f:c1:28:7d:1f:13: 78:61:39:22:ff:4a:ff:e7:ee:02:03:a8:42:90:59: f2:9f:ba:fb:dc:be:7b:93:07:1c:08:1f:3c:bd:dc: f0:5b:c6:42:0b:a7:a5:28:c2:76:32:4a:52:0f:3a: a9:a5:d0:80:81:a3:06:4b:77:e8:2f:f9:e3:11:18: fd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3A:D9:E5:BA:13:16:69:E2:57:DA:54:F5:0D:0A:F7:CA:70:A6:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1447ec8a-b015-3be8-a570-2336d23d8551.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:89:ca:48:cc:7b:ce:a3:89:14:18:3e:42:9f:ab:cb:9e:cd: 3d:86:bf:fd:77:43:c2:35:89:c8:c9:ce:8b:2e:6e:f8:3f:6b: f3:17:8f:aa:4f:a4:2e:6b:82:f0:e3:cd:32:b1:f0:dc:1a:06: 9a:b5:5f:41:c9:a0:84:e7:37:42:85:c3:f9:f8:7b:77:59:4d: d0:a6:44:76:a9:4a:51:d2:32:05:c0:68:57:19:db:31:07:6d: c0:17:79:b1:6e:b1:7b:92:d9:33:d9:31:e1:6d:b7:4c:17:6c: da:4f:22:83:a3:5f:a9:dd:8c:ba:ec:88:6a:66:02:77:82:dd: 61:01:f8:49:2c:29:f7:89:9c:27:bc:64:70:73:91:1e:89:d9: e1:77:17:8e:a6:2f:8d:94:bd:a0:3e:c3:5c:60:76:46:a1:2a: 91:f6:da:72:f2:c5:8e:21:1a:05:80:c1:57:ff:84:9e:ff:14: 46:d4:72:2d:8b:1b:29:78:6f:95:20:1f:8c:65:c1:da:ae:53: 4a:31:d1:00:48:56:33:81:6b:69:7c:1f:b3:6a:3b:37:c2:ba: c9:df:63:db:e2:8a:1d:0d:34:8f:9f:1d:88:3b:64:23:f9:22: 5b:66:e0:45:48:ef:cc:94:93:8a:15:13:06:5e:94:8f:22:01: 1a:b6:9b:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4eNpILeWOTqWxKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyNDE1MTgzN1oXDTI2MDUyNTE0MTgzN1owLzEtMCsGA1UEAxMk ZGIzYTY2MjQtNTQ0NC00ZmZlLWFjY2EtY2YyYzcwYmI2ZjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFZ+rUxrrENPpbilSZhQ6th15751SOPIrcA7 ktLpl7kGzgHzjUDqJT870gjqUozeLD8ETmkNEhMFvFVW5q4e+DN/2YBH0gYYHjd3 ECwMGCyEPPtvMacGP7Pnn9WNWoLEYj7Zual9+SzDIY8xxz3329Qlzg89Vtr+JXJy YGtlNd8iead7AJkxuW9JMzoa2YHNaHdm7pWkUHTanLnD/wbQlhzi0hTxpVh+3izZ 9gAOFi5oq0MEasyFYfAz/DI/wSh9HxN4YTki/0r/5+4CA6hCkFnyn7r73L57kwcc CB88vdzwW8ZCC6elKMJ2MkpSDzqppdCAgaMGS3foL/njERj9EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEA62eW6ExZp4lfaVPUNCvfKcKYXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTQ0N2VjOGEtYjAxNS0z YmU4LWE1NzAtMjMzNmQyM2Q4NTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+JykjMe86jiRQYPkKfq8uezT2Gv/13Q8I1icjJzosubvg/a/MXj6pP pC5rgvDjzTKx8NwaBpq1X0HJoITnN0KFw/n4e3dZTdCmRHapSlHSMgXAaFcZ2zEH bcAXebFusXuS2TPZMeFtt0wXbNpPIoOjX6ndjLrsiGpmAneC3WEB+EksKfeJnCe8 ZHBzkR6J2eF3F46mL42UvaA+w1xgdkahKpH22nLyxY4hGgWAwVf/hJ7/FEbUci2L Gyl4b5UgH4xlwdquU0ox0QBIVjOBa2l8H7NqOzfCusnfY9viih0NNI+fHYg7ZCP5 Iltm4EVI78yUk4oVEwZelI8iARq2mz0= -----END CERTIFICATE-----Generated at Mon Mar 2 03:54:39 2026 by rpki-client