$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9f7c2bc3-a37e-3d0f-bdf5-da9cc35e7740.roa File: 9f7c2bc3-a37e-3d0f-bdf5-da9cc35e7740.roa (raw, json) Hash identifier: 1czsJUWJnkDi6tAmA4N0OpsAcjCtCkaso6cX+mW3LPI= Subject key identifier: 19:9E:82:5B:59:06:96:34:52:06:7B:CF:A5:6B:2D:4F:84:F3:92:85 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF878DB8776067135E7419300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9f7c2bc3-a37e-3d0f-bdf5-da9cc35e7740.roa Signing time: Tue 24 Feb 2026 15:18:37 +0000 ROA not before: Tue 24 Feb 2026 15:18:37 +0000 ROA not after: Mon 25 May 2026 14:18:37 +0000 asID: 396544 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:78:db:87:76:06:71:35:e7:41:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 24 15:18:37 2026 GMT Not After : May 25 14:18:37 2026 GMT Subject: CN=2ed5c032-7838-4b3e-9c5f-8e5f82322dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:51:01:70:a9:a0:3c:49:ca:d6:24:8c:db:57: 05:6b:a9:6d:18:cd:51:67:2d:69:00:b3:10:25:d8: 25:40:b7:57:4f:70:65:66:87:87:bf:de:e1:3e:4d: e0:22:5b:ee:15:1c:6e:44:ee:a6:93:f0:f4:92:3d: 6d:cc:a6:38:52:8f:2f:2b:e3:2a:1a:41:a7:61:06: 22:d3:2a:40:71:fc:6a:8e:e3:1a:09:dd:8c:86:bc: 65:11:bc:b7:99:27:bc:7d:72:50:cb:8e:39:5a:0c: 16:96:32:c6:eb:e5:d6:94:a0:86:7e:49:ec:4f:18: 39:a1:9a:d5:96:23:36:fa:4a:96:38:a9:b3:f8:e5: 85:26:d4:2b:a2:d4:21:3d:e7:d8:14:c3:90:1a:42: 73:7f:a6:ac:21:2d:3c:26:2a:c4:7b:2b:cd:81:62: a7:98:5c:31:57:b1:e8:79:5e:57:19:66:06:bf:c7: 6a:a9:4d:8d:27:98:68:79:8f:77:64:4c:aa:1f:a4: eb:a4:99:43:bf:02:46:09:46:0d:50:18:c3:08:db: 05:6e:36:12:a0:77:d9:aa:5c:db:2b:12:72:cf:28: c6:ac:9f:56:9d:13:13:da:3d:dd:f6:fd:c0:b3:1d: 90:93:50:a4:7b:5d:aa:2f:da:90:e6:93:c9:a1:bd: 24:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9E:82:5B:59:06:96:34:52:06:7B:CF:A5:6B:2D:4F:84:F3:92:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9f7c2bc3-a37e-3d0f-bdf5-da9cc35e7740.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e1:3a:5c:71:47:7e:35:f8:2f:1f:a5:69:70:99:b1:40:26: 0f:97:c2:d5:ce:da:5b:4d:25:16:18:88:4e:38:3d:ae:55:c2: 19:5e:91:ec:71:be:29:b6:f9:0b:bc:32:57:43:6d:32:77:da: 44:e4:33:94:aa:23:db:80:6e:61:3b:32:7a:ac:da:2f:9e:75: 58:12:c9:cc:d1:be:38:6f:e8:51:b2:83:3c:5b:bb:d6:48:23: 90:a3:d9:d0:1a:6e:8e:b7:d2:a0:17:61:98:0f:c1:b3:9d:79: a6:01:d4:e4:88:60:17:30:dd:c0:2b:1f:01:a8:d9:ab:14:9a: 28:ee:af:64:07:53:3c:d1:57:ca:02:c4:07:9f:97:74:e7:1b: a8:23:a7:35:56:0b:c5:8c:72:83:86:13:0e:bb:76:1a:a2:00: aa:d3:7a:b0:65:84:37:69:fe:08:94:0a:2e:00:76:f1:65:dc: 85:11:1a:a2:5f:12:33:6c:2e:26:37:a1:72:5d:a6:57:b5:c8: b8:50:4e:16:1b:c3:e7:95:58:29:e1:98:9d:41:04:25:9f:5f: da:b7:b7:2b:91:ce:a8:25:c1:e0:b3:af:a1:7f:29:e1:b8:68: 32:20:e2:75:6d:47:f3:e5:a8:75:23:7a:eb:e9:d0:6c:36:ff: 51:1f:9c:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4eNuHdgZxNedBkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyNDE1MTgzN1oXDTI2MDUyNTE0MTgzN1owLzEtMCsGA1UEAxMk MmVkNWMwMzItNzgzOC00YjNlLTljNWYtOGU1ZjgyMzIyZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1EBcKmgPEnK1iSM21cFa6ltGM1RZy1pALMQ JdglQLdXT3BlZoeHv97hPk3gIlvuFRxuRO6mk/D0kj1tzKY4Uo8vK+MqGkGnYQYi 0ypAcfxqjuMaCd2MhrxlEby3mSe8fXJQy445WgwWljLG6+XWlKCGfknsTxg5oZrV liM2+kqWOKmz+OWFJtQrotQhPefYFMOQGkJzf6asIS08JirEeyvNgWKnmFwxV7Ho eV5XGWYGv8dqqU2NJ5hoeY93ZEyqH6TrpJlDvwJGCUYNUBjDCNsFbjYSoHfZqlzb KxJyzyjGrJ9WnRMT2j3d9v3Asx2Qk1Cke12qL9qQ5pPJob0kPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmegltZBpY0UgZ7z6VrLU+E85KFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWY3YzJiYzMtYTM3ZS0z ZDBmLWJkZjUtZGE5Y2MzNWU3NzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHhOlxxR341+C8fpWlwmbFAJg+XwtXO2ltNJRYYiE44Pa5Vwhlekexx vim2+Qu8MldDbTJ32kTkM5SqI9uAbmE7Mnqs2i+edVgSyczRvjhv6FGygzxbu9ZI I5Cj2dAabo630qAXYZgPwbOdeaYB1OSIYBcw3cArHwGo2asUmijur2QHUzzRV8oC xAefl3TnG6gjpzVWC8WMcoOGEw67dhqiAKrTerBlhDdp/giUCi4AdvFl3IURGqJf EjNsLiY3oXJdple1yLhQThYbw+eVWCnhmJ1BBCWfX9q3tyuRzqglweCzr6F/KeG4 aDIg4nVtR/PlqHUjeuvp0Gw2/1EfnPo= -----END CERTIFICATE-----Generated at Mon Mar 2 01:52:25 2026 by rpki-client