$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de23efa0-52a1-3215-86a7-21eacb33347d.roa File: de23efa0-52a1-3215-86a7-21eacb33347d.roa (raw, json) Hash identifier: 2p1NmmwQgIG+SkaIF+w3GkRFEUFFzC/G7royG8wDmUE= Subject key identifier: F8:81:11:2C:72:BE:2A:ED:C2:4C:B1:A7:63:4C:C2:7C:3D:11:C0:FC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF878DD5B43C9BE57C046B918 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de23efa0-52a1-3215-86a7-21eacb33347d.roa Signing time: Tue 24 Feb 2026 15:18:38 +0000 ROA not before: Tue 24 Feb 2026 15:18:38 +0000 ROA not after: Mon 25 May 2026 14:18:38 +0000 asID: 396595 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:78:dd:5b:43:c9:be:57:c0:46:b9:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 24 15:18:38 2026 GMT Not After : May 25 14:18:38 2026 GMT Subject: CN=6aad8243-d4f0-47e5-b445-df73c96b58bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cf:21:99:a2:2c:c5:52:75:f4:fd:27:10:4a: 55:d3:89:80:86:f6:14:0b:99:62:1b:89:b7:7e:e5: 87:c8:e8:af:a9:f8:4d:9b:44:73:06:76:2f:16:cb: b2:1d:c3:72:91:1a:0d:7c:53:ac:34:4c:f7:cc:22: d8:a1:8d:4e:38:50:c1:a1:b7:c2:4f:51:36:69:6e: 96:02:35:d5:48:31:1a:1a:6e:5e:d6:17:38:03:77: 18:6e:c6:10:71:80:62:62:b7:92:1a:04:23:96:bb: 1f:72:6d:59:ef:74:61:6a:e1:e1:42:5b:6f:5a:4c: 32:6c:fd:4a:dc:ba:f1:cf:b2:19:ad:6f:1b:09:02: 8a:b3:41:da:f2:c7:a5:33:63:55:33:0c:e1:a6:28: 36:61:9a:ea:81:47:5f:81:e8:b2:4d:fc:98:51:c0: 57:cb:6f:f1:5e:4d:9b:e8:f3:8b:3b:d6:c6:23:f4: ba:62:9e:53:5f:29:7e:7f:e9:81:48:7f:24:eb:f4: 4c:64:26:9d:1a:ea:d3:b3:7c:05:ed:08:94:3e:80: dc:f8:05:0e:6a:5c:b4:e1:47:f6:88:85:db:a1:65: bc:f6:81:68:9f:f2:51:9b:46:22:e9:9d:8b:9d:a8: b9:bd:70:c4:e4:45:5d:3f:8b:79:9d:21:a8:f3:16: d4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:81:11:2C:72:BE:2A:ED:C2:4C:B1:A7:63:4C:C2:7C:3D:11:C0:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de23efa0-52a1-3215-86a7-21eacb33347d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:e1:1b:aa:6b:c7:9a:4c:26:ed:41:a8:e9:65:22:b6:67:9c: 03:1e:0f:f6:8c:52:52:7a:2a:6a:e6:c9:92:17:44:61:7e:2d: 66:7f:de:10:4c:fb:d8:c6:30:a3:57:4f:99:42:7e:c6:5f:d8: 96:8d:1e:87:1a:1f:8a:22:97:f7:60:34:e5:13:8a:50:5e:bd: 2e:3e:f8:a7:ec:a6:1c:be:4a:7d:47:38:18:e7:90:5c:36:76: 1e:98:1a:e5:40:67:23:41:1a:1e:a8:1c:57:a1:4e:6e:7c:c6: e3:5b:69:e4:28:a6:f4:02:14:d1:d6:02:c1:7c:9c:c0:84:6d: f6:89:76:f3:82:b0:af:43:c6:d5:9c:d8:8e:2b:c9:2c:7a:93: 2c:ed:b4:ed:34:19:c5:6b:ac:11:40:fd:ef:c2:bb:9b:22:b7: e8:77:c7:ee:dd:39:9a:19:aa:01:73:da:39:21:83:5f:fb:c0: f5:ea:d5:f8:66:3f:99:f2:71:4e:64:29:7a:48:a3:6f:29:3c: ca:43:9b:25:07:e0:f2:78:90:3c:98:8a:40:af:b9:dd:49:fb: 2b:f8:14:25:5f:15:e5:5d:cf:cd:2e:cb:6b:0a:11:d9:0b:3d: 39:c9:cc:09:e4:6f:72:53:cf:98:e2:99:c6:bf:9e:f9:3e:47: 1a:47:2a:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4eN1bQ8m+V8BGuRgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyNDE1MTgzOFoXDTI2MDUyNTE0MTgzOFowLzEtMCsGA1UEAxMk NmFhZDgyNDMtZDRmMC00N2U1LWI0NDUtZGY3M2M5NmI1OGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs8hmaIsxVJ19P0nEEpV04mAhvYUC5liG4m3 fuWHyOivqfhNm0RzBnYvFsuyHcNykRoNfFOsNEz3zCLYoY1OOFDBobfCT1E2aW6W AjXVSDEaGm5e1hc4A3cYbsYQcYBiYreSGgQjlrsfcm1Z73RhauHhQltvWkwybP1K 3Lrxz7IZrW8bCQKKs0Ha8selM2NVMwzhpig2YZrqgUdfgeiyTfyYUcBXy2/xXk2b 6POLO9bGI/S6Yp5TXyl+f+mBSH8k6/RMZCadGurTs3wF7QiUPoDc+AUOaly04Uf2 iIXboWW89oFon/JRm0Yi6Z2Lnai5vXDE5EVdP4t5nSGo8xbUZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiBESxyvirtwkyxp2NMwnw9EcD8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGUyM2VmYTAtNTJhMS0z MjE1LTg2YTctMjFlYWNiMzMzNDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnhG6prx5pMJu1BqOllIrZnnAMeD/aMUlJ6KmrmyZIXRGF+LWZ/3hBM +9jGMKNXT5lCfsZf2JaNHocaH4oil/dgNOUTilBevS4++Kfsphy+Sn1HOBjnkFw2 dh6YGuVAZyNBGh6oHFehTm58xuNbaeQopvQCFNHWAsF8nMCEbfaJdvOCsK9DxtWc 2I4rySx6kyzttO00GcVrrBFA/e/Cu5sit+h3x+7dOZoZqgFz2jkhg1/7wPXq1fhm P5nycU5kKXpIo28pPMpDmyUH4PJ4kDyYikCvud1J+yv4FCVfFeVdz80uy2sKEdkL PTnJzAnkb3JTz5jimca/nvk+RxpHKpw= -----END CERTIFICATE-----Generated at Mon Mar 2 08:56:18 2026 by rpki-client