$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df21e502-8161-3f1e-ad17-bfbca0611bbf.roa File: df21e502-8161-3f1e-ad17-bfbca0611bbf.roa (raw, json) Hash identifier: UkXQq6xueRYdxZewFkK3oKRio3NSUcvpuSN8KQCvR4k= Subject key identifier: FA:E0:9D:8E:1A:35:D7:18:2D:A1:F1:0B:EC:6F:F7:E1:62:FD:DA:A2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF878DA65FAAB2DE82E8EFD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df21e502-8161-3f1e-ad17-bfbca0611bbf.roa Signing time: Tue 24 Feb 2026 15:18:37 +0000 ROA not before: Tue 24 Feb 2026 15:18:37 +0000 ROA not after: Mon 25 May 2026 14:18:37 +0000 asID: 396611 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:78:da:65:fa:ab:2d:e8:2e:8e:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 24 15:18:37 2026 GMT Not After : May 25 14:18:37 2026 GMT Subject: CN=ef8bc0d2-487b-43ec-9dc6-94af2be7a4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:97:1b:75:a6:60:f6:af:9f:5c:b5:31:d7:96: 47:5f:84:62:76:3d:99:8a:eb:57:de:db:31:ce:fd: 9e:c7:a9:d7:58:ce:d8:81:0b:80:ef:13:c7:7d:ed: 19:62:ba:18:29:e3:68:04:44:ec:fd:9f:a8:72:c3: d1:93:3e:9e:80:0b:a4:26:4c:9a:22:6c:a4:29:91: ce:b9:bd:26:db:52:8d:1d:b8:95:19:48:74:62:71: 13:0f:c6:9b:7d:10:af:8f:60:1b:a6:6d:b3:49:2d: ae:27:23:01:08:34:e7:6d:e9:70:fa:98:2b:14:ce: 6b:5f:9e:04:c0:71:eb:da:13:69:aa:c6:29:e5:0a: fb:4d:30:a8:6b:89:0f:d8:1a:da:bb:47:41:55:c8: 7f:53:49:25:f0:67:0d:f9:ea:49:8e:82:b9:13:d0: 85:a7:d8:55:e7:f0:98:ce:8c:65:20:ba:82:cf:cd: b3:4e:61:cc:76:c8:5c:30:61:55:e9:23:3b:74:b4: 8f:b2:ce:d5:3c:a3:2b:ba:69:23:e1:90:7a:4a:e1: 28:62:01:40:a9:6f:80:b0:55:bc:9a:6d:b1:26:25: bd:80:fb:8d:35:dd:7f:50:46:14:b7:3e:4a:7c:84: 97:fd:e8:59:69:ed:62:63:66:ab:87:de:5c:0f:9e: e0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E0:9D:8E:1A:35:D7:18:2D:A1:F1:0B:EC:6F:F7:E1:62:FD:DA:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df21e502-8161-3f1e-ad17-bfbca0611bbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:89:fb:28:6e:7c:7e:6f:18:da:b3:6e:4d:35:8f:bc:21:29: 6f:64:b6:3c:4e:8e:25:14:16:d2:ab:9f:81:ac:23:98:07:94: 63:7a:a2:75:91:ac:5b:e5:94:f9:6c:5b:6a:f6:d6:06:81:39: 1c:50:97:5a:78:ad:79:ef:18:ea:8d:1c:ad:05:10:95:75:06: 4d:50:f2:30:2f:78:f7:43:e2:ce:90:77:5b:2a:80:a6:b0:af: c8:60:8b:eb:c3:c2:27:b5:e6:ec:79:a7:8a:5e:40:87:c9:7d: 14:11:cc:e9:9e:7b:e4:f0:23:68:c0:1e:60:51:da:63:61:4b: 98:8b:23:0d:e4:49:59:12:c2:66:1d:91:f3:a7:d9:94:ff:83: c7:7f:d8:d0:c6:03:8a:8e:7a:83:20:4a:34:7e:ca:0a:9c:15: 0b:d8:15:3d:44:80:c9:a2:bc:18:e3:92:db:90:51:4f:b2:e3: 7b:4e:b5:51:ae:66:c7:f8:0c:0a:74:a5:a7:94:fa:d8:d0:c1: 65:63:65:da:7b:9d:14:2e:16:17:5e:ef:87:58:82:06:73:6d: 11:91:ee:b3:66:6d:43:2d:d5:f7:f4:04:11:0a:f5:97:38:9f: 8d:e3:39:dc:4d:6e:35:9c:9b:ee:7b:23:1e:05:c6:c3:33:59: 75:d7:ab:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4eNpl+qst6C6O/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyNDE1MTgzN1oXDTI2MDUyNTE0MTgzN1owLzEtMCsGA1UEAxMk ZWY4YmMwZDItNDg3Yi00M2VjLTlkYzYtOTRhZjJiZTdhNGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpcbdaZg9q+fXLUx15ZHX4Ridj2ZiutX3tsx zv2ex6nXWM7YgQuA7xPHfe0ZYroYKeNoBETs/Z+ocsPRkz6egAukJkyaImykKZHO ub0m21KNHbiVGUh0YnETD8abfRCvj2Abpm2zSS2uJyMBCDTnbelw+pgrFM5rX54E wHHr2hNpqsYp5Qr7TTCoa4kP2Brau0dBVch/U0kl8GcN+epJjoK5E9CFp9hV5/CY zoxlILqCz82zTmHMdshcMGFV6SM7dLSPss7VPKMrumkj4ZB6SuEoYgFAqW+AsFW8 mm2xJiW9gPuNNd1/UEYUtz5KfISX/ehZae1iY2arh95cD57gdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrgnY4aNdcYLaHxC+xv9+Fi/dqiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGYyMWU1MDItODE2MS0z ZjFlLWFkMTctYmZiY2EwNjExYmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSJ+yhufH5vGNqzbk01j7whKW9ktjxOjiUUFtKrn4GsI5gHlGN6onWR rFvllPlsW2r21gaBORxQl1p4rXnvGOqNHK0FEJV1Bk1Q8jAvePdD4s6Qd1sqgKaw r8hgi+vDwie15ux5p4peQIfJfRQRzOmee+TwI2jAHmBR2mNhS5iLIw3kSVkSwmYd kfOn2ZT/g8d/2NDGA4qOeoMgSjR+ygqcFQvYFT1EgMmivBjjktuQUU+y43tOtVGu Zsf4DAp0paeU+tjQwWVjZdp7nRQuFhde74dYggZzbRGR7rNmbUMt1ff0BBEK9Zc4 n43jOdxNbjWcm+57Ix4FxsMzWXXXq+A= -----END CERTIFICATE-----Generated at Mon Mar 2 05:09:49 2026 by rpki-client