$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a72e019-be99-3887-a12d-2d4ba43ed4e7.roa File: 5a72e019-be99-3887-a12d-2d4ba43ed4e7.roa (raw, json) Hash identifier: wE4j7o9jqoJuleli7rP6cP02vG+z304/L3/6GWZlW48= Subject key identifier: 9D:89:24:F8:FE:E6:48:A2:CE:89:26:12:D5:E9:5B:36:25:83:57:A9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF878D8DA3F1ED60020BFCE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a72e019-be99-3887-a12d-2d4ba43ed4e7.roa Signing time: Tue 24 Feb 2026 15:18:36 +0000 ROA not before: Tue 24 Feb 2026 15:18:36 +0000 ROA not after: Mon 25 May 2026 14:18:36 +0000 asID: 397196 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:78:d8:da:3f:1e:d6:00:20:bf:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 24 15:18:36 2026 GMT Not After : May 25 14:18:36 2026 GMT Subject: CN=1c0cf0d0-765a-415e-bd10-20a929d35e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:05:61:db:0e:90:11:94:52:65:1b:0a:60:b4: 54:b1:06:8d:57:62:68:17:65:3f:5f:32:8e:44:fe: b1:80:d5:22:7f:47:63:29:da:f0:2b:6c:44:8a:a8: 51:c4:8d:97:f3:18:01:28:d3:33:0d:2c:c2:e5:4e: 51:ce:f5:5e:de:7d:81:a5:96:84:ba:59:62:2f:17: f6:a1:e9:db:95:0b:76:70:44:4f:3c:7c:98:8a:70: 26:90:fa:23:e1:45:e6:83:c6:d8:08:b4:c2:aa:2a: b2:cd:2c:58:16:86:b2:14:c7:f2:e9:42:88:66:2e: 7f:61:61:91:83:f0:44:1c:97:85:7a:06:fe:a0:ee: 77:3d:c3:5e:3d:2a:0c:16:f4:af:b9:a2:c2:ff:5d: e2:a9:85:1c:cf:ab:71:5b:42:6e:c6:4c:9e:25:3e: e6:f2:03:b2:b5:7f:66:ad:10:d6:2f:c7:ae:9d:10: 64:f4:90:98:ee:8b:d0:6d:e6:04:d7:d6:7f:04:59: 4b:33:88:f6:68:9f:30:d9:5c:dc:46:fe:06:63:b4: 08:09:53:a3:5c:b2:24:09:fa:47:ab:da:a5:78:a6: 93:63:97:ee:a5:7d:55:f3:fe:fc:81:a8:d6:5a:00: 47:e6:69:d9:8c:34:e4:e3:a6:7b:2e:74:67:a4:fb: fd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:89:24:F8:FE:E6:48:A2:CE:89:26:12:D5:E9:5B:36:25:83:57:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a72e019-be99-3887-a12d-2d4ba43ed4e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:91:49:04:eb:0a:ba:a2:f5:82:40:f2:c7:ff:9e:d5:73:db: 74:f6:b6:5b:d5:39:b6:0b:91:f3:20:fd:7b:9b:fd:37:72:bb: 1a:9a:45:3a:8a:9b:f7:3c:16:82:fe:00:13:89:07:4e:06:cc: f7:07:c9:84:6c:35:35:61:94:f0:a0:98:bd:13:eb:e8:8a:21: 49:9d:e9:c8:7d:4a:bc:c5:84:7b:f2:8d:59:3d:fa:3a:8a:d7: 33:58:ed:4a:43:77:a0:1f:b9:bb:5a:8d:dc:ea:55:70:87:36: 1f:00:6a:11:86:01:a2:96:fc:27:67:ca:f1:3c:05:74:23:3c: 5c:a9:6c:90:49:f4:18:f0:ca:6e:78:51:04:75:f7:4a:c6:d6: a1:f7:5c:56:17:8f:6e:fd:a1:2f:a1:57:03:e0:8a:e1:7f:12: f9:b7:c4:5f:a0:bb:93:4c:85:1c:bd:da:19:38:2f:bd:02:f2: 93:27:fd:5a:10:a9:18:1a:85:c8:48:38:5b:ee:db:62:46:6a: dd:22:95:71:c8:86:81:70:20:16:31:34:75:0a:61:38:1f:3c: 54:9e:9c:b7:16:76:7c:5c:f2:b6:ad:4a:55:f0:c1:77:e5:ac: e0:18:24:54:ad:99:1f:08:a6:49:1f:d8:3b:c6:8d:0f:b0:a0: d4:da:26:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4eNjaPx7WACC/zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyNDE1MTgzNloXDTI2MDUyNTE0MTgzNlowLzEtMCsGA1UEAxMk MWMwY2YwZDAtNzY1YS00MTVlLWJkMTAtMjBhOTI5ZDM1ZThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQVh2w6QEZRSZRsKYLRUsQaNV2JoF2U/XzKO RP6xgNUif0djKdrwK2xEiqhRxI2X8xgBKNMzDSzC5U5RzvVe3n2BpZaEulliLxf2 oenblQt2cERPPHyYinAmkPoj4UXmg8bYCLTCqiqyzSxYFoayFMfy6UKIZi5/YWGR g/BEHJeFegb+oO53PcNePSoMFvSvuaLC/13iqYUcz6txW0JuxkyeJT7m8gOytX9m rRDWL8eunRBk9JCY7ovQbeYE19Z/BFlLM4j2aJ8w2VzcRv4GY7QICVOjXLIkCfpH q9qleKaTY5fupX1V8/78gajWWgBH5mnZjDTk46Z7LnRnpPv9lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2JJPj+5kiizokmEtXpWzYlg1epMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWE3MmUwMTktYmU5OS0z ODg3LWExMmQtMmQ0YmE0M2VkNGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmRSQTrCrqi9YJA8sf/ntVz23T2tlvVObYLkfMg/Xub/TdyuxqaRTqK m/c8FoL+ABOJB04GzPcHyYRsNTVhlPCgmL0T6+iKIUmd6ch9SrzFhHvyjVk9+jqK 1zNY7UpDd6AfubtajdzqVXCHNh8AahGGAaKW/CdnyvE8BXQjPFypbJBJ9Bjwym54 UQR190rG1qH3XFYXj279oS+hVwPgiuF/Evm3xF+gu5NMhRy92hk4L70C8pMn/VoQ qRgahchIOFvu22JGat0ilXHIhoFwIBYxNHUKYTgfPFSenLcWdnxc8ratSlXwwXfl rOAYJFStmR8Ipkkf2DvGjQ+woNTaJnE= -----END CERTIFICATE-----Generated at Mon Mar 2 14:50:50 2026 by rpki-client