$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d325d748-9365-338f-ad66-8b82d9d70a93.roa File: d325d748-9365-338f-ad66-8b82d9d70a93.roa (raw, json) Hash identifier: 6AQKHCEPqlckPeqN4owolxL5OZUSdf+IgiujNMx2RxI= Subject key identifier: F6:60:66:8E:B5:28:61:C3:55:A4:A0:A7:20:78:AC:1F:4B:A9:67:A4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF878D7043FA1C7116AC66480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d325d748-9365-338f-ad66-8b82d9d70a93.roa Signing time: Tue 24 Feb 2026 15:18:35 +0000 ROA not before: Tue 24 Feb 2026 15:18:35 +0000 ROA not after: Mon 25 May 2026 14:18:35 +0000 asID: 396608 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:78:d7:04:3f:a1:c7:11:6a:c6:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 24 15:18:35 2026 GMT Not After : May 25 14:18:35 2026 GMT Subject: CN=8805a94b-ea01-468b-8d04-6899d770a7f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e8:cb:60:db:b0:be:30:7f:b4:20:c7:25:6f: 40:f3:66:6a:dc:2b:74:8f:52:bd:03:20:43:22:9c: 86:e2:90:bc:3a:7d:d2:f9:b7:ba:c9:a6:19:9e:fc: 31:a0:ca:9f:b8:37:82:91:ad:e6:cd:0e:8d:35:0a: 34:26:a8:0d:0a:70:c5:69:76:86:0b:26:72:ee:8e: 55:50:7a:5f:38:bd:f1:e2:de:c9:65:ba:81:59:d9: 29:dd:6a:26:36:c8:79:96:74:ad:9c:8e:42:91:af: 0b:0d:98:27:3d:75:7e:b2:49:df:27:d4:eb:ed:d2: 9e:bd:68:28:46:7c:44:91:17:5a:d0:79:9c:7a:8e: 3c:88:53:d0:28:bf:0e:fc:a9:69:3e:d2:3f:8b:05: 3e:25:a7:bc:03:b5:fc:6f:32:71:09:da:05:f9:7d: d0:de:74:db:f2:1f:6a:05:4b:98:8a:ed:99:69:9f: d7:bb:da:21:1a:28:4d:e8:2d:05:12:44:38:d2:9c: a4:00:bb:a9:6c:45:03:3e:f8:7a:e9:36:55:0d:49: fb:22:d6:e7:52:2f:66:8e:75:a4:1a:36:e0:92:e0: 25:a3:dc:30:9e:e9:18:d9:cf:0a:ca:88:5b:ec:00: 04:18:9d:52:9e:b1:37:12:2f:fe:9e:3e:e1:0c:b6: 96:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:60:66:8E:B5:28:61:C3:55:A4:A0:A7:20:78:AC:1F:4B:A9:67:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d325d748-9365-338f-ad66-8b82d9d70a93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:fc:27:71:0e:78:aa:c4:64:53:f6:5b:d4:6b:2e:f3:5e:80: 67:a8:e4:eb:f2:8f:6f:50:b2:44:f6:1f:4c:39:85:7a:11:27: 08:86:6e:7e:e9:6b:74:05:02:dc:83:49:07:2b:f6:7b:3b:bd: d0:8f:11:71:49:1f:c0:43:18:82:f4:46:96:35:22:48:b8:94: bd:e3:95:51:cd:cf:7b:8b:7c:67:7d:6d:66:b1:9c:ee:e4:f3: 9e:2d:8e:4e:d7:05:e3:81:39:19:8c:c0:96:30:c4:07:d2:1c: da:97:4f:f0:3e:06:0b:fd:16:08:98:fe:59:35:ff:a0:25:6d: b2:f2:8d:ad:d8:05:d2:c6:4f:93:4c:23:14:18:45:c3:b2:9e: 9e:1c:66:68:91:10:5d:cb:35:d7:0e:b2:bf:14:3c:4a:97:c5: 79:78:49:05:9d:07:72:4d:ea:bd:c8:39:54:0e:d2:35:5c:fa: b5:4d:ea:73:89:37:a1:23:85:0f:6e:2d:35:78:bb:b8:a1:b2: 02:7f:dd:73:c4:6f:65:0b:1d:65:be:3b:42:48:43:1b:f3:92: aa:0a:8a:49:c4:2d:a6:56:0f:97:bb:66:cb:1b:82:a1:ac:67: 01:7a:ae:a0:df:0a:bf:bd:8c:d9:a6:cb:10:f5:95:5f:26:46: 3e:b8:3f:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4eNcEP6HHEWrGZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyNDE1MTgzNVoXDTI2MDUyNTE0MTgzNVowLzEtMCsGA1UEAxMk ODgwNWE5NGItZWEwMS00NjhiLThkMDQtNjg5OWQ3NzBhN2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhejLYNuwvjB/tCDHJW9A82Zq3Ct0j1K9AyBD IpyG4pC8On3S+be6yaYZnvwxoMqfuDeCka3mzQ6NNQo0JqgNCnDFaXaGCyZy7o5V UHpfOL3x4t7JZbqBWdkp3WomNsh5lnStnI5Cka8LDZgnPXV+sknfJ9Tr7dKevWgo RnxEkRda0Hmceo48iFPQKL8O/KlpPtI/iwU+Jae8A7X8bzJxCdoF+X3Q3nTb8h9q BUuYiu2ZaZ/Xu9ohGihN6C0FEkQ40pykALupbEUDPvh66TZVDUn7ItbnUi9mjnWk GjbgkuAlo9wwnukY2c8Kyohb7AAEGJ1SnrE3Ei/+nj7hDLaW9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZgZo61KGHDVaSgpyB4rB9LqWekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDMyNWQ3NDgtOTM2NS0z MzhmLWFkNjYtOGI4MmQ5ZDcwYTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr8J3EOeKrEZFP2W9RrLvNegGeo5Ovyj29QskT2H0w5hXoRJwiGbn7p a3QFAtyDSQcr9ns7vdCPEXFJH8BDGIL0RpY1Iki4lL3jlVHNz3uLfGd9bWaxnO7k 854tjk7XBeOBORmMwJYwxAfSHNqXT/A+Bgv9FgiY/lk1/6AlbbLyja3YBdLGT5NM IxQYRcOynp4cZmiREF3LNdcOsr8UPEqXxXl4SQWdB3JN6r3IOVQO0jVc+rVN6nOJ N6EjhQ9uLTV4u7ihsgJ/3XPEb2ULHWW+O0JIQxvzkqoKiknELaZWD5e7ZssbgqGs ZwF6rqDfCr+9jNmmyxD1lV8mRj64P84= -----END CERTIFICATE-----Generated at Mon Mar 2 05:54:00 2026 by rpki-client