$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f2d8f6a-3167-316a-8895-801a562b5b83.roa File: 3f2d8f6a-3167-316a-8895-801a562b5b83.roa (raw, json) Hash identifier: EfsSamKECPVmYochdFQ0gwkNsFNd7okWl5FNAOqogTY= Subject key identifier: AC:25:76:EF:A2:47:DB:84:A1:0C:02:B3:5E:94:07:DF:F2:7E:1E:2A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF878D8F104430F0A76E51300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f2d8f6a-3167-316a-8895-801a562b5b83.roa Signing time: Tue 24 Feb 2026 15:18:36 +0000 ROA not before: Tue 24 Feb 2026 15:18:36 +0000 ROA not after: Mon 25 May 2026 14:18:36 +0000 asID: 396596 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:78:d8:f1:04:43:0f:0a:76:e5:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 24 15:18:36 2026 GMT Not After : May 25 14:18:36 2026 GMT Subject: CN=bafe5de2-9c6a-4ee8-b465-0a163c2661f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:03:6c:bb:2b:b0:98:3a:a4:4f:68:b9:aa:e2: 5e:93:67:c6:5d:e1:44:72:f1:52:2c:7a:4c:09:bd: 55:b3:71:0e:88:88:0c:6b:7a:dd:ab:50:c6:35:14: 4e:fc:14:51:99:0f:65:50:07:79:b4:45:3f:3c:f2: 5c:b4:2d:aa:b7:80:fe:fd:c7:a8:37:9c:4c:18:49: a1:45:ef:ff:5d:99:2f:8f:dd:a0:23:3a:34:58:05: 80:4c:3a:c0:89:a3:81:59:0e:40:5e:4c:b6:e6:99: f4:a0:57:7f:8c:5c:d9:c4:bd:05:df:c2:27:6c:66: 52:ef:20:f8:3b:47:e9:2e:32:ff:ec:9c:63:82:89: 0e:03:8e:4c:08:b1:15:ec:9c:28:5e:41:f1:ae:06: b8:da:be:bc:f9:57:fb:cb:e7:6b:10:f0:4f:03:40: 78:11:85:d7:f7:00:37:d6:1a:b1:5c:40:cf:c8:b2: 7e:62:8a:3e:e4:8e:fe:08:bc:7e:a2:28:3b:e4:cd: 02:e9:70:d4:0f:bb:be:2f:12:16:a2:1e:fb:07:30: 60:12:38:62:7d:de:72:b1:92:c9:5e:9a:1d:8e:07: 05:af:86:ed:8f:26:a5:00:65:13:90:74:cd:24:79: 4a:db:4d:d9:7a:6f:e4:de:7d:21:38:34:8c:09:a5: b8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:25:76:EF:A2:47:DB:84:A1:0C:02:B3:5E:94:07:DF:F2:7E:1E:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f2d8f6a-3167-316a-8895-801a562b5b83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:3d:1d:2d:81:b6:b4:8d:fb:d4:58:ff:0e:a0:b1:02:66:b2: a5:3b:d4:f5:1f:90:bb:eb:68:7d:c8:f7:68:26:d3:f2:f5:24: 29:85:0e:47:79:33:35:96:2f:b0:5b:23:37:2c:02:f0:e6:7e: 3b:3d:10:84:6e:48:7a:1c:ef:fa:cd:3c:30:e7:a0:e1:1c:15: 74:8e:e7:a0:29:51:f2:51:6e:4a:da:cd:c3:b1:5e:6c:31:5c: 17:04:09:a9:2c:2b:14:6d:0e:5d:6e:47:d2:07:10:38:e1:28: 69:c4:d9:6d:98:42:17:10:cc:be:ca:24:12:87:38:c6:23:56: 0e:b2:75:84:34:7e:01:eb:84:88:25:bf:49:e0:e4:67:cb:b4: e6:ba:ae:d3:30:23:aa:9e:99:90:a1:99:a0:1a:8e:b0:a7:3c: fa:d6:c3:a7:48:44:a3:df:24:f7:14:5a:f8:d6:94:f4:3e:fa: 42:48:aa:3f:7d:b4:d3:ce:55:ee:94:e7:eb:e7:e4:f2:73:f9: 3e:17:50:21:f7:63:0f:2b:c1:51:c6:ef:8a:96:42:ce:54:fa: 06:47:91:93:26:a2:96:d9:35:2c:cb:38:5e:e4:76:31:a1:5d: 30:55:d1:09:29:8b:64:10:79:11:7c:11:fc:e8:66:57:f9:3e: c6:49:74:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4eNjxBEMPCnblEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyNDE1MTgzNloXDTI2MDUyNTE0MTgzNlowLzEtMCsGA1UEAxMk YmFmZTVkZTItOWM2YS00ZWU4LWI0NjUtMGExNjNjMjY2MWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgNsuyuwmDqkT2i5quJek2fGXeFEcvFSLHpM Cb1Vs3EOiIgMa3rdq1DGNRRO/BRRmQ9lUAd5tEU/PPJctC2qt4D+/ceoN5xMGEmh Re//XZkvj92gIzo0WAWATDrAiaOBWQ5AXky25pn0oFd/jFzZxL0F38InbGZS7yD4 O0fpLjL/7JxjgokOA45MCLEV7JwoXkHxrga42r68+Vf7y+drEPBPA0B4EYXX9wA3 1hqxXEDPyLJ+Yoo+5I7+CLx+oig75M0C6XDUD7u+LxIWoh77BzBgEjhifd5ysZLJ XpodjgcFr4btjyalAGUTkHTNJHlK203Zem/k3n0hODSMCaW4NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwldu+iR9uEoQwCs16UB9/yfh4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2YyZDhmNmEtMzE2Ny0z MTZhLTg4OTUtODAxYTU2MmI1YjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE49HS2BtrSN+9RY/w6gsQJmsqU71PUfkLvraH3I92gm0/L1JCmFDkd5 MzWWL7BbIzcsAvDmfjs9EIRuSHoc7/rNPDDnoOEcFXSO56ApUfJRbkrazcOxXmwx XBcECaksKxRtDl1uR9IHEDjhKGnE2W2YQhcQzL7KJBKHOMYjVg6ydYQ0fgHrhIgl v0ng5GfLtOa6rtMwI6qemZChmaAajrCnPPrWw6dIRKPfJPcUWvjWlPQ++kJIqj99 tNPOVe6U5+vn5PJz+T4XUCH3Yw8rwVHG74qWQs5U+gZHkZMmopbZNSzLOF7kdjGh XTBV0Qkpi2QQeRF8EfzoZlf5PsZJdIo= -----END CERTIFICATE-----Generated at Mon Mar 2 08:57:06 2026 by rpki-client