$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f87ac7e5-b52a-38be-b0c2-8a47b622a680.roa File: f87ac7e5-b52a-38be-b0c2-8a47b622a680.roa (raw, json) Hash identifier: y4CBUFdh/aA+vmq6MDgXvNvA1rjD0EzVzNXUO5wWwho= Subject key identifier: 36:29:A2:8D:07:B6:81:E5:65:01:79:35:79:7D:92:C1:48:D4:30:6D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584CF878D9AFD833A75198A68680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f87ac7e5-b52a-38be-b0c2-8a47b622a680.roa Signing time: Tue 24 Feb 2026 15:18:36 +0000 ROA not before: Tue 24 Feb 2026 15:18:36 +0000 ROA not after: Mon 25 May 2026 14:18:36 +0000 asID: 396543 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:78:d9:af:d8:33:a7:51:98:a6:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 24 15:18:36 2026 GMT Not After : May 25 14:18:36 2026 GMT Subject: CN=446568b4-f072-4bf5-8898-418b707668f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0b:5c:02:30:08:1b:3c:53:41:53:9f:03:b5: 17:ef:c3:14:2f:6f:c9:ff:c4:0a:a4:8f:cd:b9:77: 2d:2a:a1:3a:bc:7b:2a:d1:72:f0:2e:54:e3:01:fa: 73:00:2b:a4:a6:3e:ba:f4:87:6d:86:8b:8b:30:a6: 5d:8e:ae:73:31:cf:b6:b4:e5:f1:d9:39:a2:66:23: 17:cb:2a:cc:f8:65:15:7b:5a:b6:20:90:57:14:b5: 87:68:75:db:49:1a:b2:74:32:aa:61:39:0a:68:0a: e5:a8:d6:07:9a:10:3e:cb:c7:2c:b7:88:3b:14:80: 94:1d:de:18:f1:9e:77:15:39:d8:80:c6:1b:9e:03: 30:14:9c:4c:9d:e9:e0:dd:3b:a1:73:d6:21:31:01: fb:5d:16:98:9a:c6:45:42:7f:8f:7a:a1:4c:1a:22: 72:dc:06:4f:3a:9f:57:46:58:9d:6b:e1:26:ba:75: 68:98:c8:bf:0a:e8:30:e6:8c:58:fb:8d:82:90:e6: a9:27:09:50:cc:e6:b8:6c:9b:06:60:92:f8:df:1a: b4:91:3d:40:5c:38:3b:78:b0:be:7b:f9:79:dc:bb: 05:66:45:37:c9:6b:95:17:57:33:58:ef:7a:d6:ad: f1:a0:79:61:5b:ad:86:76:4a:25:ba:96:ff:3d:8e: 33:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:29:A2:8D:07:B6:81:E5:65:01:79:35:79:7D:92:C1:48:D4:30:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f87ac7e5-b52a-38be-b0c2-8a47b622a680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d6:1b:c2:c7:55:39:c2:50:c5:44:ba:e0:1c:b8:32:ca:72: 32:cc:34:d5:62:0e:51:79:30:45:91:12:de:47:b0:09:33:01: 85:cf:fb:5f:3b:c3:70:8f:80:2c:d5:d3:8f:aa:a4:6f:73:36: 75:b8:48:88:a3:c7:eb:2a:17:ca:5b:d9:44:7f:25:b8:f6:6e: 53:ae:4d:a9:5c:f8:be:69:69:1c:56:69:3e:fa:b4:3a:74:7c: 79:fa:3f:22:a3:ff:b5:58:56:b7:6b:7d:7e:b2:49:b0:12:77: 65:97:33:cb:47:45:c4:ca:87:e6:64:e5:b2:75:2e:e7:8a:92: 6c:dc:be:90:19:ec:72:10:34:64:b2:b6:26:32:53:af:9b:5a: 1a:1d:f0:5a:86:71:f7:0f:b7:5f:e1:d7:6a:1e:50:cd:41:ec: f4:15:b5:e6:2b:3c:fd:d6:ad:32:a8:6e:13:33:06:14:df:a8: 22:f0:d8:d1:13:0d:fc:04:13:70:fb:47:34:49:18:c0:af:4d: 62:72:8c:5a:cf:cd:d0:08:ba:a3:ce:63:5d:ac:a6:63:b9:3e: 4f:4a:fd:a8:ef:cc:4e:e7:b8:07:e0:0e:63:d0:11:3d:cf:62: 4c:e1:fd:0b:c7:f7:a3:a6:dd:53:f0:c4:4a:5d:c1:e6:67:29: c8:aa:9a:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4eNmv2DOnUZimhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDIyNDE1MTgzNloXDTI2MDUyNTE0MTgzNlowLzEtMCsGA1UEAxMk NDQ2NTY4YjQtZjA3Mi00YmY1LTg4OTgtNDE4YjcwNzY2OGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAtcAjAIGzxTQVOfA7UX78MUL2/J/8QKpI/N uXctKqE6vHsq0XLwLlTjAfpzACukpj669IdthouLMKZdjq5zMc+2tOXx2TmiZiMX yyrM+GUVe1q2IJBXFLWHaHXbSRqydDKqYTkKaArlqNYHmhA+y8cst4g7FICUHd4Y 8Z53FTnYgMYbngMwFJxMneng3Tuhc9YhMQH7XRaYmsZFQn+PeqFMGiJy3AZPOp9X Rlida+EmunVomMi/Cugw5oxY+42CkOapJwlQzOa4bJsGYJL43xq0kT1AXDg7eLC+ e/l53LsFZkU3yWuVF1czWO961q3xoHlhW62Gdkolupb/PY4zzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYpoo0HtoHlZQF5NXl9ksFI1DBtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjg3YWM3ZTUtYjUyYS0z OGJlLWIwYzItOGE0N2I2MjJhNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjWG8LHVTnCUMVEuuAcuDLKcjLMNNViDlF5MEWREt5HsAkzAYXP+187 w3CPgCzV04+qpG9zNnW4SIijx+sqF8pb2UR/Jbj2blOuTalc+L5paRxWaT76tDp0 fHn6PyKj/7VYVrdrfX6ySbASd2WXM8tHRcTKh+Zk5bJ1LueKkmzcvpAZ7HIQNGSy tiYyU6+bWhod8FqGcfcPt1/h12oeUM1B7PQVteYrPP3WrTKobhMzBhTfqCLw2NET DfwEE3D7RzRJGMCvTWJyjFrPzdAIuqPOY12spmO5Pk9K/ajvzE7nuAfgDmPQET3P Ykzh/QvH96Om3VPwxEpdweZnKciqmt8= -----END CERTIFICATE-----Generated at Mon Mar 2 01:53:22 2026 by rpki-client