$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3dba7cb-dc15-35d1-9e3b-3be1070e8cf5.roa File: f3dba7cb-dc15-35d1-9e3b-3be1070e8cf5.roa (raw, json) Hash identifier: Z5ecaXgg7fSVQKUjODBxBvnZhkpFoMMHXLwoj5OvgrU= Subject key identifier: 6F:07:18:38:1F:AE:30:71:44:FD:CB:45:CA:1A:28:B8:0A:41:9B:62 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF878DC60491D270B7F023540 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3dba7cb-dc15-35d1-9e3b-3be1070e8cf5.roa Signing time: Tue 24 Feb 2026 15:18:38 +0000 ROA not before: Tue 24 Feb 2026 15:18:38 +0000 ROA not after: Mon 25 May 2026 14:18:38 +0000 asID: 397212 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:78:dc:60:49:1d:27:0b:7f:02:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 24 15:18:38 2026 GMT Not After : May 25 14:18:38 2026 GMT Subject: CN=c497925c-dc79-4d23-96bf-22636544ff6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4f:1d:e0:0f:2f:3e:bb:68:e9:00:26:16:7b: 8f:25:aa:fa:2d:40:ce:b6:35:ab:08:e0:40:13:a7: 4d:05:92:07:24:70:79:be:fc:3d:73:c9:c3:07:22: 46:56:38:d6:85:a3:fe:6f:26:26:e4:62:2e:9e:c9: da:73:8b:ab:f8:90:a0:3c:11:15:0f:12:95:db:57: ff:a1:9a:44:36:28:fa:d2:24:9c:37:ac:f6:3e:f9: 05:04:b7:44:75:cd:b0:ef:8f:8d:c8:92:21:ee:7d: e2:f8:b8:0d:40:a4:eb:0d:cd:d1:03:31:c5:0d:81: e6:53:da:3e:2f:09:b1:19:e9:35:ef:be:28:9a:8a: df:7a:83:3d:80:a7:86:0e:62:6a:38:73:72:74:39: 31:a4:fa:32:3d:14:89:36:a1:7e:51:a9:ad:92:d4: 8f:80:1b:86:95:bf:d9:9b:59:a6:4f:84:23:ce:b9: 50:c1:04:c0:a0:20:37:c4:03:70:6c:45:29:86:75: 2a:70:34:fc:c0:4a:3b:16:9e:6f:c9:9e:86:0f:90: a5:51:d5:51:ba:cc:83:e8:25:b9:34:6f:44:b5:7a: f3:68:e6:ad:d9:b1:47:70:f4:95:cb:1d:cf:a1:72: ea:02:aa:73:84:f9:39:67:24:59:1b:7f:12:a7:dd: 7b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:07:18:38:1F:AE:30:71:44:FD:CB:45:CA:1A:28:B8:0A:41:9B:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3dba7cb-dc15-35d1-9e3b-3be1070e8cf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:5d:d3:ba:8d:b5:a0:5b:69:38:3d:38:89:54:ad:f9:78:87: 52:57:79:07:d3:a0:ec:73:fc:06:d0:85:ec:7f:d4:42:6a:12: 19:47:aa:f9:2b:11:f4:7f:30:36:55:3e:69:a5:b8:cf:f1:c2: 94:2f:9a:7e:fd:1c:27:7e:36:54:5f:cd:1a:66:7d:7c:cf:1f: 11:a8:2e:63:b8:a6:4b:a7:ab:ab:d9:01:31:42:81:c3:33:95: 1c:4b:39:65:55:12:4b:d6:a6:c7:4f:bd:7c:d1:b5:ad:12:f4: 7e:fd:d5:c4:db:c9:3d:62:51:71:f6:e5:cf:a8:02:02:1d:90: 49:6d:d0:d9:e2:fa:df:fa:45:c1:48:90:e7:52:3e:36:5b:84: 26:ba:f1:8b:62:27:4d:00:f0:79:7e:09:c3:3c:61:a9:22:ac: 6d:df:87:2d:c4:19:0b:34:1e:49:7e:be:5e:35:61:c8:38:79: ad:36:ad:cf:ed:45:a3:54:60:b0:93:c5:0b:c0:ee:e7:82:17: 4b:06:d7:66:e5:31:0f:c9:a1:4e:5e:69:76:8a:34:b0:ee:e1: 16:e5:61:f7:18:01:11:ab:79:7a:fa:22:97:3b:c4:dd:d2:db: 81:ee:97:09:26:e2:5b:e3:0c:4d:b1:d4:b7:12:d1:a8:65:73: 2d:25:18:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4eNxgSR0nC38CNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyNDE1MTgzOFoXDTI2MDUyNTE0MTgzOFowLzEtMCsGA1UEAxMk YzQ5NzkyNWMtZGM3OS00ZDIzLTk2YmYtMjI2MzY1NDRmZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnE8d4A8vPrto6QAmFnuPJar6LUDOtjWrCOBA E6dNBZIHJHB5vvw9c8nDByJGVjjWhaP+byYm5GIunsnac4ur+JCgPBEVDxKV21f/ oZpENij60iScN6z2PvkFBLdEdc2w74+NyJIh7n3i+LgNQKTrDc3RAzHFDYHmU9o+ LwmxGek1774omorfeoM9gKeGDmJqOHNydDkxpPoyPRSJNqF+UamtktSPgBuGlb/Z m1mmT4QjzrlQwQTAoCA3xANwbEUphnUqcDT8wEo7Fp5vyZ6GD5ClUdVRusyD6CW5 NG9EtXrzaOat2bFHcPSVyx3PoXLqAqpzhPk5ZyRZG38Sp917DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8HGDgfrjBxRP3LRcoaKLgKQZtiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjNkYmE3Y2ItZGMxNS0z NWQxLTllM2ItM2JlMTA3MGU4Y2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRd07qNtaBbaTg9OIlUrfl4h1JXeQfToOxz/AbQhex/1EJqEhlHqvkr EfR/MDZVPmmluM/xwpQvmn79HCd+NlRfzRpmfXzPHxGoLmO4pkunq6vZATFCgcMz lRxLOWVVEkvWpsdPvXzRta0S9H791cTbyT1iUXH25c+oAgIdkElt0Nni+t/6RcFI kOdSPjZbhCa68YtiJ00A8Hl+CcM8YakirG3fhy3EGQs0Hkl+vl41Ycg4ea02rc/t RaNUYLCTxQvA7ueCF0sG12blMQ/JoU5eaXaKNLDu4RblYfcYARGreXr6Ipc7xN3S 24Hulwkm4lvjDE2x1LcS0ahlcy0lGLk= -----END CERTIFICATE-----Generated at Mon Mar 2 05:09:45 2026 by rpki-client