$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e5e0682-f063-354e-a906-eeb48497a495.roa File: 4e5e0682-f063-354e-a906-eeb48497a495.roa (raw, json) Hash identifier: cJJHuiYwTtdn1Kl9yC5D66yRJ5Izs9UQV6mdCylEtYE= Subject key identifier: 04:73:2D:E6:D1:EF:7A:2C:CB:7A:6F:9A:6E:93:12:BA:24:C9:9D:54 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF878D800DF5D5F630E9E2C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e5e0682-f063-354e-a906-eeb48497a495.roa Signing time: Tue 24 Feb 2026 15:18:36 +0000 ROA not before: Tue 24 Feb 2026 15:18:36 +0000 ROA not after: Mon 25 May 2026 14:18:36 +0000 asID: 36618 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:78:d8:00:df:5d:5f:63:0e:9e:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 24 15:18:36 2026 GMT Not After : May 25 14:18:36 2026 GMT Subject: CN=b9a82088-1db6-43a0-827e-bc9db5675be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:8e:aa:ed:c5:7c:fe:6c:f2:82:fb:98:6a: 37:86:30:dc:97:5a:ae:41:58:64:43:fa:54:eb:aa: 8b:6e:7c:e4:5c:0f:0f:50:e1:c5:01:32:f4:43:d4: 15:09:07:5b:41:7b:3c:a3:1d:63:a2:7e:14:ef:62: e7:b0:51:75:05:a2:ac:a4:a7:cf:70:5d:37:bd:12: f0:ef:3d:c1:d3:26:72:90:07:f2:de:ec:71:05:60: 8d:d2:af:d6:97:4b:0b:10:4a:7b:12:9a:b3:9a:f1: 77:26:e4:20:cf:07:9a:d4:71:58:bc:02:8d:fb:3e: b8:4d:29:cb:e0:c9:b9:e8:65:b7:94:8d:c9:eb:f8: 6b:59:b3:16:45:4c:a2:3d:47:ef:81:63:6b:2b:4a: 12:ad:18:a4:f9:d1:14:c7:d4:b9:97:d5:fc:ce:34: 1a:ca:d2:a3:18:a5:6c:e5:66:e0:66:38:b3:34:2e: e7:13:eb:e8:a2:75:28:62:77:6f:b3:49:11:7e:31: 96:a7:c8:d7:18:5f:52:d3:99:32:a3:f8:dc:53:bd: 39:4e:b0:3a:29:b4:cc:43:41:64:f1:6a:84:1d:c6: 36:7f:1a:c7:34:2b:61:85:6a:47:5e:8b:d1:7f:b5: 6d:9e:f5:90:08:b3:c6:13:75:08:0e:d8:da:cd:32: f3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:73:2D:E6:D1:EF:7A:2C:CB:7A:6F:9A:6E:93:12:BA:24:C9:9D:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e5e0682-f063-354e-a906-eeb48497a495.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:c9:cd:38:24:3f:35:33:a8:86:ea:5d:2b:cd:d6:5d:10:62: 24:3e:84:bc:9a:72:3b:3c:24:0f:a2:78:e6:da:b6:54:b8:f0: ec:26:64:c9:5b:50:d0:19:d6:28:19:e5:a2:f1:e5:67:34:f9: 61:32:6e:14:5d:66:90:50:f0:f4:0a:25:40:7d:95:0b:79:d5: c3:95:cb:5a:86:40:c4:da:a0:4e:bb:61:a4:57:68:6d:03:12: 17:d2:93:32:eb:ef:dc:2d:23:3a:5e:ac:12:7b:3f:9b:24:28: 50:29:75:ab:ad:fb:5e:84:17:b9:47:2a:cb:08:1c:09:bd:07: bb:b4:c7:b0:0d:d2:c1:e2:cf:16:e0:cc:15:81:d0:12:61:54: 4a:2f:e0:1a:76:98:81:52:36:f6:b9:a6:c9:47:92:6e:02:dc: c3:02:fc:32:6d:d5:ff:a9:47:e1:d0:d6:b4:3a:e7:0c:89:25: 45:6b:dc:df:dd:0f:e5:0a:9e:de:1b:56:f0:0d:4c:6d:b3:94: fa:2d:58:32:53:ac:ad:e2:f8:b4:ee:a7:e6:ca:0a:d2:58:bb: 11:76:b0:85:2f:c2:06:69:42:9e:bb:52:ad:d5:fd:3d:91:61: b3:ac:51:cb:a1:eb:17:38:dd:21:0c:bf:30:c1:a9:eb:51:d0: c7:a8:d2:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4eNgA311fYw6eLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyNDE1MTgzNloXDTI2MDUyNTE0MTgzNlowLzEtMCsGA1UEAxMk YjlhODIwODgtMWRiNi00M2EwLTgyN2UtYmM5ZGI1Njc1YmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuyOqu3FfP5s8oL7mGo3hjDcl1quQVhkQ/pU 66qLbnzkXA8PUOHFATL0Q9QVCQdbQXs8ox1jon4U72LnsFF1BaKspKfPcF03vRLw 7z3B0yZykAfy3uxxBWCN0q/Wl0sLEEp7EpqzmvF3JuQgzwea1HFYvAKN+z64TSnL 4Mm56GW3lI3J6/hrWbMWRUyiPUfvgWNrK0oSrRik+dEUx9S5l9X8zjQaytKjGKVs 5WbgZjizNC7nE+voonUoYndvs0kRfjGWp8jXGF9S05kyo/jcU705TrA6KbTMQ0Fk 8WqEHcY2fxrHNCthhWpHXovRf7VtnvWQCLPGE3UIDtjazTLzYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARzLebR73osy3pvmm6TErokyZ1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGU1ZTA2ODItZjA2My0z NTRlLWE5MDYtZWViNDg0OTdhNDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbJzTgkPzUzqIbqXSvN1l0QYiQ+hLyacjs8JA+ieObatlS48OwmZMlb UNAZ1igZ5aLx5Wc0+WEybhRdZpBQ8PQKJUB9lQt51cOVy1qGQMTaoE67YaRXaG0D EhfSkzLr79wtIzperBJ7P5skKFApdaut+16EF7lHKssIHAm9B7u0x7AN0sHizxbg zBWB0BJhVEov4Bp2mIFSNva5pslHkm4C3MMC/DJt1f+pR+HQ1rQ65wyJJUVr3N/d D+UKnt4bVvANTG2zlPotWDJTrK3i+LTup+bKCtJYuxF2sIUvwgZpQp67Uq3V/T2R YbOsUcuh6xc43SEMvzDBqetR0Meo0vs= -----END CERTIFICATE-----Generated at Mon Mar 2 08:57:04 2026 by rpki-client