$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3088ab51-2f5b-3a3c-97d7-fcf7a6f4970e.roa File: 3088ab51-2f5b-3a3c-97d7-fcf7a6f4970e.roa (raw, json) Hash identifier: pXBqjl1DE0hR+M9eRybsa/LiUBDCF3D1RYXhny3T7cA= Subject key identifier: A0:55:E1:C4:9F:59:DB:72:6E:DC:39:02:EE:20:B1:1B:BE:C5:E2:9D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF878D933AC3885F5FB973F60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3088ab51-2f5b-3a3c-97d7-fcf7a6f4970e.roa Signing time: Tue 24 Feb 2026 15:18:36 +0000 ROA not before: Tue 24 Feb 2026 15:18:36 +0000 ROA not after: Mon 25 May 2026 14:18:36 +0000 asID: 396827 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:78:d9:33:ac:38:85:f5:fb:97:3f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 24 15:18:36 2026 GMT Not After : May 25 14:18:36 2026 GMT Subject: CN=879c07db-5a26-4079-98db-f62ba1da00f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:52:d5:52:6b:e9:c3:c1:e5:be:64:78:21:97: 07:85:28:37:76:b4:d1:64:04:35:61:1f:36:dd:af: f4:8d:b2:69:42:2f:37:06:0e:7f:b3:a8:d3:a8:23: db:da:7e:11:bc:4d:dc:a2:5e:07:43:78:f7:63:a6: e3:e9:53:07:1e:7c:47:ce:db:74:50:4d:cb:55:1a: 65:27:b0:0c:ee:af:07:67:8c:d8:ca:bb:df:43:a1: ff:42:55:59:b8:13:50:f2:b8:15:36:2c:cc:79:2f: 7d:60:d0:5f:7d:f1:b6:3f:71:bb:2f:cb:9a:b6:4a: ff:4f:10:64:3a:07:f6:71:d4:b9:6f:68:23:ab:4d: 96:c1:11:cd:1f:12:22:ac:0c:86:00:f1:54:d1:f5: d2:13:8f:70:17:19:e7:ce:07:87:39:78:db:9e:b0: c8:e3:33:09:be:d6:93:ce:7d:94:67:18:17:d6:97: e2:c3:f8:f5:d8:e8:ff:ea:88:2f:8c:2e:8e:f6:ac: 3b:08:02:59:92:b4:2e:b3:c8:88:51:59:7c:fd:6d: f3:a5:df:8f:23:3d:cc:d3:35:7a:13:9a:0b:ee:00: b6:77:23:e3:8f:c9:b2:3c:9c:62:fa:66:f7:c4:7d: 52:4d:ac:21:fc:9d:cd:bf:a3:b3:5f:e4:8b:13:0c: 23:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:55:E1:C4:9F:59:DB:72:6E:DC:39:02:EE:20:B1:1B:BE:C5:E2:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3088ab51-2f5b-3a3c-97d7-fcf7a6f4970e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:28:98:81:43:65:41:f2:aa:07:c6:d2:81:fc:96:c2:25:d2: 96:9a:2e:e7:64:2b:a4:cc:7a:f1:ad:b2:e7:87:a0:9b:bb:d3: 74:eb:f8:49:21:ac:e2:d5:74:50:47:e5:6c:61:67:41:bc:0d: 97:2e:17:6b:0a:50:27:81:73:75:60:1d:0e:c2:d8:c1:91:3f: 38:0e:ac:43:47:27:ad:14:b5:7c:cd:91:ff:a3:17:e5:7a:2d: ad:05:22:d8:3c:6c:3f:65:a2:78:a5:5c:64:ef:4f:7d:15:5b: 00:83:82:3f:1b:df:cf:31:67:49:2a:e6:5c:25:f7:d7:17:fa: ad:da:d2:71:88:a1:69:7c:a8:d2:c8:92:c8:db:52:39:89:1f: 18:25:fc:12:34:be:52:5b:5b:06:3a:71:57:3c:00:43:40:a9: 0e:8e:70:e6:84:b9:7a:b7:7c:b9:01:71:68:e4:be:4a:65:84: a9:20:fe:d5:1a:76:b7:15:f7:a7:bc:79:07:d1:05:08:17:2c: 13:ea:44:d0:c7:38:95:1f:c0:e2:7f:b5:b3:a1:a7:68:1e:e1: 5a:f8:06:d7:c0:b4:91:75:95:b3:44:03:e9:af:ea:41:53:08: 4f:56:07:5d:e8:b3:fe:5b:3e:a7:c6:8c:09:de:d5:a5:db:30: c2:86:b1:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4eNkzrDiF9fuXP2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyNDE1MTgzNloXDTI2MDUyNTE0MTgzNlowLzEtMCsGA1UEAxMk ODc5YzA3ZGItNWEyNi00MDc5LTk4ZGItZjYyYmExZGEwMGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVLVUmvpw8HlvmR4IZcHhSg3drTRZAQ1YR82 3a/0jbJpQi83Bg5/s6jTqCPb2n4RvE3col4HQ3j3Y6bj6VMHHnxHztt0UE3LVRpl J7AM7q8HZ4zYyrvfQ6H/QlVZuBNQ8rgVNizMeS99YNBfffG2P3G7L8uatkr/TxBk Ogf2cdS5b2gjq02WwRHNHxIirAyGAPFU0fXSE49wFxnnzgeHOXjbnrDI4zMJvtaT zn2UZxgX1pfiw/j12Oj/6ogvjC6O9qw7CAJZkrQus8iIUVl8/W3zpd+PIz3M0zV6 E5oL7gC2dyPjj8myPJxi+mb3xH1STawh/J3Nv6OzX+SLEwwjDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBV4cSfWdtybtw5Au4gsRu+xeKdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzA4OGFiNTEtMmY1Yi0z YTNjLTk3ZDctZmNmN2E2ZjQ5NzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoomIFDZUHyqgfG0oH8lsIl0paaLudkK6TMevGtsueHoJu703Tr+Ekh rOLVdFBH5WxhZ0G8DZcuF2sKUCeBc3VgHQ7C2MGRPzgOrENHJ60UtXzNkf+jF+V6 La0FItg8bD9lonilXGTvT30VWwCDgj8b388xZ0kq5lwl99cX+q3a0nGIoWl8qNLI ksjbUjmJHxgl/BI0vlJbWwY6cVc8AENAqQ6OcOaEuXq3fLkBcWjkvkplhKkg/tUa drcV96e8eQfRBQgXLBPqRNDHOJUfwOJ/tbOhp2ge4Vr4BtfAtJF1lbNEA+mv6kFT CE9WB13os/5bPqfGjAne1aXbMMKGsdU= -----END CERTIFICATE-----Generated at Wed Mar 4 08:41:26 2026 by rpki-client