$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ea4ff8-a757-3282-be61-5854c9bdee32.roa File: 40ea4ff8-a757-3282-be61-5854c9bdee32.roa (raw, json) Hash identifier: XNu1TabX9uxDKLL9ACdwP8JiseHm3pHKevubzs4oa88= Subject key identifier: 05:DF:D4:AA:65:D6:0C:02:BE:B0:D0:8C:20:CB:BC:74:3B:6A:C6:55 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D5243C43587CA9A047FE84800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ea4ff8-a757-3282-be61-5854c9bdee32.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 0 IP address blocks: 209.112.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:c4:35:87:ca:9a:04:7f:e8:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=0a8a4d2b-5daf-4f3d-a854-02706e133264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:da:c4:af:ce:ad:41:7b:62:5a:bc:f7:f1:16: f3:58:2c:70:62:03:7b:95:c8:c6:4c:58:92:a7:68: 1f:d1:ba:f8:c0:e4:79:7b:47:93:de:a5:86:ca:f1: c5:95:00:5e:55:76:da:4a:53:6f:eb:5c:23:b8:12: d2:4c:dc:d4:f6:7b:cd:6a:97:c0:f7:59:fd:2d:43: fe:e7:15:ab:42:8a:e8:10:5d:da:4f:13:59:f6:ef: 62:7b:8c:35:0e:48:66:a2:e1:fa:a3:47:cd:9f:7b: da:e4:3b:bb:f8:45:b7:03:06:1b:1e:3e:76:91:61: 1f:0f:e8:97:9d:63:1b:85:eb:7d:71:b3:38:84:ab: e9:cf:75:6a:d4:b4:e4:73:01:7e:35:f1:23:fd:f7: 44:e8:1d:cb:16:5f:d2:78:f5:9b:16:3e:ee:b2:c1: 3a:68:66:d9:65:78:be:50:13:3f:b7:b5:6f:cf:4e: a8:37:08:85:01:d7:a2:74:37:6e:c3:55:3d:7b:28: b1:df:e1:10:e5:04:7b:5d:e7:8a:f7:a2:fc:9a:d2: 2e:69:1b:66:c8:a6:5c:bb:88:c9:56:96:f9:6e:46: 89:5b:fd:89:dc:34:94:fe:75:0b:7b:11:e4:5c:66: ea:0e:4e:95:8a:be:8a:91:09:48:9c:ad:37:31:58: a5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DF:D4:AA:65:D6:0C:02:BE:B0:D0:8C:20:CB:BC:74:3B:6A:C6:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ea4ff8-a757-3282-be61-5854c9bdee32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:db:d3:a7:c2:bc:0c:2d:bb:a6:d2:97:25:0d:c1:77:25:5b: 07:e9:19:d3:02:bd:f3:d9:bf:ab:44:88:98:af:ac:21:52:21: 36:2f:02:99:a0:e6:19:95:a3:fe:8d:55:52:6c:89:c9:04:d9: c1:6e:fd:f4:82:ab:5f:5e:00:c6:db:74:90:8f:a6:f3:9b:d3: f8:79:c1:ba:11:07:c7:db:99:88:58:d4:33:7f:90:14:8d:12: 6f:3f:67:5b:43:ac:09:96:39:e9:8d:3e:04:29:48:ab:bf:5f: c7:b9:56:5b:02:c1:fa:74:fa:d7:22:cc:65:0f:aa:03:db:f5: 56:9f:16:25:85:5e:d5:75:f2:0a:b2:6c:f3:82:6f:ad:39:1a: 3e:bd:d6:09:b5:d3:ad:e5:51:aa:fe:6b:4b:c4:f3:2e:34:f0: 7c:a3:cc:5e:2b:43:bb:50:da:99:59:72:3e:b5:54:3a:fc:cc: 50:a8:7a:67:59:e9:90:d0:cc:7f:ad:7f:f4:fc:61:ca:9c:52: 18:66:e4:d4:09:25:c5:0e:97:e4:e4:cd:54:3e:d7:39:cc:e8: 28:4f:25:0c:2c:02:d3:4e:ed:46:da:c1:ba:81:9c:c9:42:b0: 0a:92:5a:a7:2a:2e:30:1e:ad:27:c6:2e:ab:9d:da:31:5c:3d: 19:4c:06:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ8Q1h8qaBH/oSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk MGE4YTRkMmItNWRhZi00ZjNkLWE4NTQtMDI3MDZlMTMzMjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9rEr86tQXtiWrz38RbzWCxwYgN7lcjGTFiS p2gf0br4wOR5e0eT3qWGyvHFlQBeVXbaSlNv61wjuBLSTNzU9nvNapfA91n9LUP+ 5xWrQoroEF3aTxNZ9u9ie4w1DkhmouH6o0fNn3va5Du7+EW3AwYbHj52kWEfD+iX nWMbhet9cbM4hKvpz3Vq1LTkcwF+NfEj/fdE6B3LFl/SePWbFj7ussE6aGbZZXi+ UBM/t7Vvz06oNwiFAdeidDduw1U9eyix3+EQ5QR7XeeK96L8mtIuaRtmyKZcu4jJ Vpb5bkaJW/2J3DSU/nULexHkXGbqDk6Vir6KkQlInK03MVilnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXf1Kpl1gwCvrDQjCDLvHQ7asZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDBlYTRmZjgtYTc1Ny0z MjgyLWJlNjEtNTg1NGM5YmRlZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLb06fCvAwtu6bSlyUNwXclWwfpGdMCvfPZv6tEiJivrCFSITYvApmg 5hmVo/6NVVJsickE2cFu/fSCq19eAMbbdJCPpvOb0/h5wboRB8fbmYhY1DN/kBSN Em8/Z1tDrAmWOemNPgQpSKu/X8e5VlsCwfp0+tcizGUPqgPb9VafFiWFXtV18gqy bPOCb605Gj691gm1063lUar+a0vE8y408HyjzF4rQ7tQ2plZcj61VDr8zFCoemdZ 6ZDQzH+tf/T8YcqcUhhm5NQJJcUOl+TkzVQ+1znM6ChPJQwsAtNO7UbawbqBnMlC sAqSWqcqLjAerSfGLqud2jFcPRlMBms= -----END CERTIFICATE-----Generated at Mon Mar 30 04:25:02 2026 by rpki-client