$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba5fa9b1-1046-3dd2-b8a0-b01994be841b.roa File: ba5fa9b1-1046-3dd2-b8a0-b01994be841b.roa (raw, json) Hash identifier: A1JSQduY6vFkm9uDZdipV4J8XRykhTjMIf1m7S3zS94= Subject key identifier: 6A:30:DA:4C:44:B3:5E:61:FC:F2:14:E6:60:43:03:96:D0:1B:D4:9D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF878D994BEEE18E3E5317B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba5fa9b1-1046-3dd2-b8a0-b01994be841b.roa Signing time: Tue 24 Feb 2026 15:18:36 +0000 ROA not before: Tue 24 Feb 2026 15:18:36 +0000 ROA not after: Mon 25 May 2026 14:18:36 +0000 asID: 396599 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:78:d9:94:be:ee:18:e3:e5:31:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 24 15:18:36 2026 GMT Not After : May 25 14:18:36 2026 GMT Subject: CN=9cfda707-50f0-4e13-9360-f4cf5fb6e164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:65:04:41:12:8f:07:25:24:c9:8a:cf:81:7e: 62:32:0c:62:85:0f:55:30:50:96:c6:f7:7e:3a:78: c2:75:4a:0a:45:76:7d:8c:41:aa:52:41:14:0c:84: 62:41:d6:cc:ae:c5:96:63:27:91:cc:25:81:c1:cc: 9b:15:b1:b9:33:9b:9d:86:c2:35:b8:68:18:4a:4b: cc:ca:64:eb:5c:d3:43:97:27:d5:91:e0:ad:3e:b1: af:f3:a0:91:15:f4:28:85:ec:aa:fc:95:2b:b4:2f: 2c:ee:f4:27:08:a6:d9:67:61:bb:4b:57:24:2d:ab: 76:e2:84:5b:e8:9e:3b:80:30:03:34:51:13:43:99: d9:1c:89:b5:80:aa:a0:92:4c:7f:a0:3a:29:d1:e0: a4:17:05:60:7e:1b:80:84:72:8f:ae:ec:a7:22:cd: e7:29:df:fb:3c:1c:59:cb:6d:45:cb:66:2e:00:ff: 9b:28:0a:33:21:8d:71:fd:5c:2e:11:85:9f:1a:a1: d5:6d:bb:70:ea:05:e2:b1:65:84:0e:cb:45:84:8b: 51:5f:3a:eb:59:2f:b9:cb:d4:1f:1e:b6:28:c1:f9: cb:5e:8b:32:74:77:fa:e0:e9:46:7f:9d:5f:5e:26: bb:d7:8a:23:33:94:05:1e:66:06:bf:97:f5:fc:b3: a7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:30:DA:4C:44:B3:5E:61:FC:F2:14:E6:60:43:03:96:D0:1B:D4:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba5fa9b1-1046-3dd2-b8a0-b01994be841b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:7e:36:25:e2:bf:db:79:ae:54:d6:1b:57:5c:e3:ff:dc:71: 4a:61:71:9c:8f:1e:84:bc:81:a9:62:59:ce:e7:1c:57:f4:30: 3a:69:6c:b3:55:60:47:e5:e4:ea:7e:bf:a1:ba:bf:64:27:1b: 5a:c2:da:e2:8e:1a:e2:72:8a:19:fc:7b:97:ac:48:ea:0e:4d: ea:ff:a0:6c:37:f9:4a:e2:ed:fe:9c:eb:3a:72:56:5b:1a:33: 48:ac:20:e8:a4:62:42:50:32:03:d5:78:89:2e:9e:59:e4:e3: 98:17:89:b4:ac:89:1a:d7:58:8e:e5:fe:04:5e:75:50:07:30: 4e:4d:97:61:2f:7c:47:49:aa:21:dc:b0:7a:d5:5b:23:88:80: 54:ff:4e:10:e8:49:d7:3b:ae:d8:60:41:fb:5b:ff:18:16:1a: eb:d8:aa:b8:1d:a2:56:3b:fc:a4:07:2b:6e:38:7d:ca:1f:dc: a7:fd:90:49:2b:72:d1:2f:c0:f2:b5:91:74:2a:76:fe:62:f4: ab:f5:fe:77:dc:dc:0c:71:6f:3c:56:09:8f:5f:86:22:75:ff: df:49:79:51:32:9e:6a:db:0e:22:eb:74:4f:23:0d:28:99:88: 5b:1f:6c:7a:a0:11:ed:f9:79:17:fc:c9:58:8e:ba:92:4f:fe: d0:a1:2b:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4eNmUvu4Y4+Uxe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyNDE1MTgzNloXDTI2MDUyNTE0MTgzNlowLzEtMCsGA1UEAxMk OWNmZGE3MDctNTBmMC00ZTEzLTkzNjAtZjRjZjVmYjZlMTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWUEQRKPByUkyYrPgX5iMgxihQ9VMFCWxvd+ OnjCdUoKRXZ9jEGqUkEUDIRiQdbMrsWWYyeRzCWBwcybFbG5M5udhsI1uGgYSkvM ymTrXNNDlyfVkeCtPrGv86CRFfQoheyq/JUrtC8s7vQnCKbZZ2G7S1ckLat24oRb 6J47gDADNFETQ5nZHIm1gKqgkkx/oDop0eCkFwVgfhuAhHKPruynIs3nKd/7PBxZ y21Fy2YuAP+bKAozIY1x/VwuEYWfGqHVbbtw6gXisWWEDstFhItRXzrrWS+5y9Qf HrYowfnLXosydHf64OlGf51fXia714ojM5QFHmYGv5f1/LOnSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGow2kxEs15h/PIU5mBDA5bQG9SdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmE1ZmE5YjEtMTA0Ni0z ZGQyLWI4YTAtYjAxOTk0YmU4NDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABN+NiXiv9t5rlTWG1dc4//ccUphcZyPHoS8galiWc7nHFf0MDppbLNV YEfl5Op+v6G6v2QnG1rC2uKOGuJyihn8e5esSOoOTer/oGw3+Uri7f6c6zpyVlsa M0isIOikYkJQMgPVeIkunlnk45gXibSsiRrXWI7l/gRedVAHME5Nl2EvfEdJqiHc sHrVWyOIgFT/ThDoSdc7rthgQftb/xgWGuvYqrgdolY7/KQHK244fcof3Kf9kEkr ctEvwPK1kXQqdv5i9Kv1/nfc3AxxbzxWCY9fhiJ1/99JeVEynmrbDiLrdE8jDSiZ iFsfbHqgEe35eRf8yViOupJP/tChK1s= -----END CERTIFICATE-----Generated at Mon Mar 2 03:38:53 2026 by rpki-client