$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb84e975-80b0-3e5a-8460-ff34f30a5150.roa File: cb84e975-80b0-3e5a-8460-ff34f30a5150.roa (raw, json) Hash identifier: lRHPtBYGnuJ3TMETjUnnbOKElma/sFZ4WCIdind7hYs= Subject key identifier: 9E:CA:A3:48:B1:BB:3F:D0:1B:63:49:02:5B:96:ED:60:BB:E3:08:D9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF878D763A6650A89DC510500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb84e975-80b0-3e5a-8460-ff34f30a5150.roa Signing time: Tue 24 Feb 2026 15:18:35 +0000 ROA not before: Tue 24 Feb 2026 15:18:35 +0000 ROA not after: Mon 25 May 2026 14:18:35 +0000 asID: 396602 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:78:d7:63:a6:65:0a:89:dc:51:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 24 15:18:35 2026 GMT Not After : May 25 14:18:35 2026 GMT Subject: CN=b925d1b7-15e1-443f-95ee-d5e1f8b69b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4f:04:67:da:2e:44:95:32:16:4e:01:02:9d: 2b:97:e7:cc:c3:52:13:2f:4a:a0:58:f3:9a:ec:d2: c5:b9:c0:5c:92:d1:71:60:e4:33:54:bc:9d:8c:36: 7c:e3:ac:96:e1:cf:e4:95:2b:37:67:dd:e2:36:8b: 1a:e2:62:12:58:85:be:08:0b:3b:f4:77:51:6b:02: d8:2a:82:9e:e0:e1:38:f4:e7:08:82:c2:14:eb:84: 53:d8:ff:34:50:fa:6f:33:7a:5c:b2:f2:db:b8:57: 37:6a:d6:a8:b6:9a:10:99:e8:87:6f:8d:d6:65:d2: 85:04:0b:39:82:5f:90:ac:c6:d5:19:aa:fc:f6:7e: cd:a8:be:c9:15:4c:28:eb:d6:19:7c:cc:83:97:c3: 5a:a6:ab:4d:2e:9e:7a:5a:d8:ae:74:c3:34:b0:2d: df:8a:c1:ca:b7:f0:9e:4d:46:e1:26:69:ca:c1:b6: 74:da:04:28:a2:0e:c8:85:3d:95:94:a0:ac:23:31: 6b:e7:f3:cb:79:97:a5:2b:f4:e2:eb:ce:b4:bb:34: b0:83:90:04:1b:26:ea:05:db:3f:e6:3d:60:bc:1a: 87:88:9d:38:1e:2a:2a:50:6c:7a:f0:e8:6a:d6:da: 97:33:42:a9:3f:9b:07:f7:ad:fd:b9:7d:3c:5d:b1: c6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CA:A3:48:B1:BB:3F:D0:1B:63:49:02:5B:96:ED:60:BB:E3:08:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb84e975-80b0-3e5a-8460-ff34f30a5150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:83:e0:9b:31:cd:cc:1c:68:a9:70:0d:ac:d3:30:68:56:61: 40:41:e9:5e:4a:1e:7b:53:73:07:f3:90:e2:25:08:b4:c4:a3: bf:14:81:34:33:42:80:72:ba:7d:b2:17:59:f9:cc:c0:b1:92: f5:af:8f:11:d0:86:0f:e9:cf:4b:73:85:02:d8:05:7b:2d:73: f0:d4:56:29:13:a0:1d:c6:76:e8:be:05:26:01:0f:66:51:8a: 38:60:10:a0:61:9e:e3:fa:21:04:1f:00:df:b2:1d:48:4f:93: 85:cc:eb:a1:40:0f:6f:b2:72:36:57:d6:da:58:ed:ec:a1:2c: 22:e5:c2:11:8d:02:ef:32:3b:3f:7a:2a:d2:5d:f5:d9:66:9e: 30:12:02:76:03:e1:08:66:07:a3:82:74:b7:c9:f0:22:9e:59: a5:88:22:a3:98:09:de:02:e0:c5:98:8c:2f:44:98:cc:e1:40: 81:5f:2d:6f:00:d1:10:19:24:3b:17:81:ac:0d:e5:b6:43:13: 36:2a:89:7c:ed:74:89:cf:be:9c:c4:de:93:0d:66:b0:d4:ea: f1:97:ca:53:c7:6c:39:9e:da:46:2a:75:19:3a:58:84:85:0c: f3:ed:50:91:aa:a9:d9:81:a8:91:de:53:94:57:14:0c:ae:06: bb:59:8d:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4eNdjpmUKidxRBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyNDE1MTgzNVoXDTI2MDUyNTE0MTgzNVowLzEtMCsGA1UEAxMk YjkyNWQxYjctMTVlMS00NDNmLTk1ZWUtZDVlMWY4YjY5YjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU8EZ9ouRJUyFk4BAp0rl+fMw1ITL0qgWPOa 7NLFucBcktFxYOQzVLydjDZ846yW4c/klSs3Z93iNosa4mISWIW+CAs79HdRawLY KoKe4OE49OcIgsIU64RT2P80UPpvM3pcsvLbuFc3ataotpoQmeiHb43WZdKFBAs5 gl+QrMbVGar89n7NqL7JFUwo69YZfMyDl8NapqtNLp56WtiudMM0sC3fisHKt/Ce TUbhJmnKwbZ02gQoog7IhT2VlKCsIzFr5/PLeZelK/Ti6860uzSwg5AEGybqBds/ 5j1gvBqHiJ04HioqUGx68Ohq1tqXM0KpP5sH9639uX08XbHGKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7Ko0ixuz/QG2NJAluW7WC74wjZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2I4NGU5NzUtODBiMC0z ZTVhLTg0NjAtZmYzNGYzMGE1MTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaD4JsxzcwcaKlwDazTMGhWYUBB6V5KHntTcwfzkOIlCLTEo78UgTQz QoByun2yF1n5zMCxkvWvjxHQhg/pz0tzhQLYBXstc/DUVikToB3Gdui+BSYBD2ZR ijhgEKBhnuP6IQQfAN+yHUhPk4XM66FAD2+ycjZX1tpY7eyhLCLlwhGNAu8yOz96 KtJd9dlmnjASAnYD4QhmB6OCdLfJ8CKeWaWIIqOYCd4C4MWYjC9EmMzhQIFfLW8A 0RAZJDsXgawN5bZDEzYqiXztdInPvpzE3pMNZrDU6vGXylPHbDme2kYqdRk6WISF DPPtUJGqqdmBqJHeU5RXFAyuBrtZjX4= -----END CERTIFICATE-----Generated at Mon Mar 2 08:56:25 2026 by rpki-client