$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e25b1570-412d-35af-92ce-5dffe2920b3d.roa File: e25b1570-412d-35af-92ce-5dffe2920b3d.roa (raw, json) Hash identifier: GfNb/YPMLdiSX+1nTn61VaAaH3p613ep6X/CfwTF7+g= Subject key identifier: E7:44:CB:06:58:B4:E1:02:8C:83:21:D4:78:98:9F:D3:3E:08:0A:E9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF878DB24399C791745E7EDA4 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e25b1570-412d-35af-92ce-5dffe2920b3d.roa Signing time: Tue 24 Feb 2026 15:18:37 +0000 ROA not before: Tue 24 Feb 2026 15:18:37 +0000 ROA not after: Mon 25 May 2026 14:18:37 +0000 asID: 397200 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:78:db:24:39:9c:79:17:45:e7:ed:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 24 15:18:37 2026 GMT Not After : May 25 14:18:37 2026 GMT Subject: CN=f7a61def-757e-41dd-abac-3399dda7eb05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bd:85:e3:fa:2c:a4:5b:7b:47:ec:d7:86:49: e3:e3:f8:78:29:35:a4:91:7f:26:f0:04:db:09:8a: 37:84:9b:56:05:f2:d9:db:1c:50:45:82:d9:4b:74: da:b8:00:cd:51:8a:18:6c:52:01:0b:f6:18:e3:72: f3:76:e0:52:0d:e7:28:cf:b6:56:f1:5f:11:98:fa: 78:dc:59:25:76:34:ea:14:92:44:ac:8e:d9:cd:4b: 72:e9:c5:4f:18:63:f7:af:52:79:7b:15:c7:52:43: ab:3d:4e:c6:b8:77:61:6a:60:9f:d3:1d:68:fc:1e: eb:e0:94:a0:8b:24:98:8b:47:20:7f:5a:e4:27:1b: e0:b9:fc:74:13:07:d2:9e:69:c1:c3:5a:40:49:d9: c2:8c:85:d3:63:e5:b7:8e:0f:ad:3e:12:f9:da:bb: da:2a:e8:dd:d6:97:ea:80:b6:ec:1c:d9:bb:0a:b9: e5:d4:5d:78:58:0d:da:26:43:89:e3:ba:29:89:88: ad:63:02:14:fa:97:9a:4f:4e:35:66:3b:8e:0a:41: e9:33:d3:dd:b0:7e:97:77:21:22:7a:69:37:60:74: 28:f2:1c:1e:50:0b:05:42:34:ce:26:90:4e:d8:07: 28:29:c2:c9:5c:97:b0:c0:39:85:ee:53:23:5a:67: 07:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:44:CB:06:58:B4:E1:02:8C:83:21:D4:78:98:9F:D3:3E:08:0A:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e25b1570-412d-35af-92ce-5dffe2920b3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:13:30:11:f5:d2:14:fb:4d:1e:7e:c2:ea:03:33:82:12:74: ff:c1:ac:b1:ee:ee:fa:43:12:9d:10:38:fb:ea:a8:d2:3f:83: 6b:d8:a2:90:65:88:43:6b:ae:ce:a4:87:c3:e1:5c:b4:ad:8e: 2a:62:e8:35:7f:2c:73:e2:fa:25:99:2b:f7:f9:9d:14:0d:c8: b1:3a:1f:a9:41:0a:73:c9:ce:6e:8e:8a:9c:75:9b:cb:f6:51: a4:b6:83:02:55:52:1d:d8:b0:12:90:f6:f9:ab:f9:b7:24:4c: af:e4:88:4f:f9:e5:c3:ea:e3:c0:b1:55:71:74:d2:1c:1d:c8: 28:d5:d4:08:5b:5b:43:7b:dd:ae:c3:d9:62:2b:8d:7f:f1:b1: a7:9c:01:c1:f3:12:2e:dc:93:53:5a:0d:10:02:61:07:75:bd: 14:65:9d:dc:8e:f6:c3:0a:f2:01:6f:47:73:87:07:5a:c1:38: 97:57:0a:b8:43:9f:ed:c3:a5:5a:15:b0:1d:1b:35:5b:3b:e1: 7b:02:7d:b5:6f:a3:7f:3a:ab:1b:7d:32:0c:1a:b9:5d:90:4f: e6:3a:58:b5:ce:74:69:da:df:8e:60:43:a1:84:6c:d2:86:15: b1:96:c5:55:b9:23:5d:0e:54:65:b5:50:f5:43:76:aa:99:d9: 96:ce:86:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4eNskOZx5F0Xn7aQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyNDE1MTgzN1oXDTI2MDUyNTE0MTgzN1owLzEtMCsGA1UEAxMk ZjdhNjFkZWYtNzU3ZS00MWRkLWFiYWMtMzM5OWRkYTdlYjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL2F4/ospFt7R+zXhknj4/h4KTWkkX8m8ATb CYo3hJtWBfLZ2xxQRYLZS3TauADNUYoYbFIBC/YY43LzduBSDecoz7ZW8V8RmPp4 3FkldjTqFJJErI7ZzUty6cVPGGP3r1J5exXHUkOrPU7GuHdhamCf0x1o/B7r4JSg iySYi0cgf1rkJxvgufx0EwfSnmnBw1pASdnCjIXTY+W3jg+tPhL52rvaKujd1pfq gLbsHNm7Crnl1F14WA3aJkOJ47opiYitYwIU+peaT041ZjuOCkHpM9PdsH6XdyEi emk3YHQo8hweUAsFQjTOJpBO2AcoKcLJXJewwDmF7lMjWmcHJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdEywZYtOECjIMh1HiYn9M+CArpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTI1YjE1NzAtNDEyZC0z NWFmLTkyY2UtNWRmZmUyOTIwYjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABITMBH10hT7TR5+wuoDM4ISdP/BrLHu7vpDEp0QOPvqqNI/g2vYopBl iENrrs6kh8PhXLStjipi6DV/LHPi+iWZK/f5nRQNyLE6H6lBCnPJzm6Oipx1m8v2 UaS2gwJVUh3YsBKQ9vmr+bckTK/kiE/55cPq48CxVXF00hwdyCjV1AhbW0N73a7D 2WIrjX/xsaecAcHzEi7ck1NaDRACYQd1vRRlndyO9sMK8gFvR3OHB1rBOJdXCrhD n+3DpVoVsB0bNVs74XsCfbVvo386qxt9MgwauV2QT+Y6WLXOdGna345gQ6GEbNKG FbGWxVW5I10OVGW1UPVDdqqZ2ZbOhhk= -----END CERTIFICATE-----Generated at Mon Mar 2 02:02:02 2026 by rpki-client