$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b59a356-3a3b-35d1-ab4e-417f84fd1f8d.roa File: 1b59a356-3a3b-35d1-ab4e-417f84fd1f8d.roa (raw, json) Hash identifier: jzB2xxIhDkcHsyQLBXqlE42NJbRjFB4ruChuc9qADmk= Subject key identifier: 02:F9:01:BF:A8:E4:C8:52:40:FD:4C:32:27:72:80:0C:C3:26:FE:00 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1E4475A2EB74FCEC1AB15E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b59a356-3a3b-35d1-ab4e-417f84fd1f8d.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 397209 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:75:a2:eb:74:fc:ec:1a:b1:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=cb978a0c-f6b7-466b-bc88-c22e4d914ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:12:b3:0a:b3:e2:4f:01:6b:ab:80:2a:da:ba: 47:fb:05:f2:bd:e9:f0:53:e8:ff:90:d8:2c:b7:74: e5:77:27:2f:e8:6f:6d:89:18:ff:df:cf:b2:48:dc: f6:64:6c:b9:e8:e8:3f:28:fe:77:00:29:80:5b:ec: 8c:d8:3f:42:d8:54:f1:58:c6:34:65:23:60:2b:22: d3:8b:80:1e:f4:e0:ca:25:ff:8b:0e:fb:75:66:a0: e0:a0:ae:e1:93:f6:18:37:d2:a0:dc:1a:b7:c8:b4: 31:a2:16:a0:9c:bc:96:42:21:57:fd:04:20:c2:19: 39:82:e7:e8:a0:3b:49:81:94:75:73:32:10:73:45: 10:fe:43:e8:72:96:9a:d8:9c:e8:7d:fc:a5:aa:82: 79:d2:15:be:d6:2a:d1:4a:06:93:ee:6e:fd:81:53: df:44:60:8c:80:40:e0:5d:2d:b0:c0:44:35:2c:47: 4b:3a:57:1f:21:77:cd:d1:03:c4:e5:ea:03:1f:1b: 9d:52:45:27:85:49:ad:cd:00:5b:42:45:e6:22:aa: ba:29:9f:79:2b:50:ad:a7:ed:f2:27:e8:62:1c:2d: 96:83:59:1f:77:0b:74:d2:5b:0d:cb:99:c9:a9:01: cf:66:be:98:ad:3d:82:db:cd:4d:8d:d0:46:bd:fa: 37:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F9:01:BF:A8:E4:C8:52:40:FD:4C:32:27:72:80:0C:C3:26:FE:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b59a356-3a3b-35d1-ab4e-417f84fd1f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:85:4d:42:6c:d1:90:18:50:e7:7b:d2:9c:81:56:a8:0c:50: 78:ba:bd:52:31:3c:bc:ed:51:8f:3e:5c:01:1a:cf:e6:d5:d5: 66:cc:3d:e6:ba:91:c6:2c:d8:ff:4e:85:0a:78:21:61:71:e9: 07:2e:9a:ca:e8:00:43:d8:f5:59:fc:03:f3:bb:60:20:94:25: 87:3c:ed:20:69:0d:3e:ee:48:6d:5b:15:5c:37:0d:98:f8:5c: eb:25:c3:3b:91:8f:25:b8:95:56:61:ee:a2:d0:49:4d:3f:b9: ed:cc:b3:f7:72:67:1a:95:f9:54:ba:41:3e:03:94:01:3f:ad: ae:16:e0:dd:86:c3:f7:ae:a5:e5:a6:50:a6:6f:74:69:f2:3e: 3d:9a:fd:64:b3:35:71:18:35:b4:2c:b7:dc:bf:60:8b:37:cc: ca:91:06:9d:21:a4:42:f2:f7:93:bb:f4:b9:e9:64:2f:30:fe: 34:9e:3a:1f:e0:11:a3:b3:99:5a:0c:b2:45:82:48:80:7f:f1: 55:fc:2d:99:e5:c7:6b:7f:a4:0a:16:18:23:e7:50:3d:84:b3: ac:0c:df:1a:81:25:12:4f:6b:64:89:71:d0:39:f5:09:1e:a7: 98:90:ed:cf:d2:52:97:38:8a:8d:42:15:19:44:3e:22:65:ee: f1:f8:3a:86 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4eRHWi63T87BqxXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk Y2I5NzhhMGMtZjZiNy00NjZiLWJjODgtYzIyZTRkOTE0YWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBKzCrPiTwFrq4Aq2rpH+wXyvenwU+j/kNgs t3Tldycv6G9tiRj/38+ySNz2ZGy56Og/KP53ACmAW+yM2D9C2FTxWMY0ZSNgKyLT i4Ae9ODKJf+LDvt1ZqDgoK7hk/YYN9Kg3Bq3yLQxohagnLyWQiFX/QQgwhk5gufo oDtJgZR1czIQc0UQ/kPocpaa2JzoffylqoJ50hW+1irRSgaT7m79gVPfRGCMgEDg XS2wwEQ1LEdLOlcfIXfN0QPE5eoDHxudUkUnhUmtzQBbQkXmIqq6KZ95K1Ctp+3y J+hiHC2Wg1kfdwt00lsNy5nJqQHPZr6YrT2C281NjdBGvfo30QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAL5Ab+o5MhSQP1MMidygAzDJv4AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWI1OWEzNTYtM2EzYi0z NWQxLWFiNGUtNDE3Zjg0ZmQxZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAxhU1CbNGQGFDne9KcgVaoDFB4ur1SMTy87VGPPlwBGs/m1dVmzD3m upHGLNj/ToUKeCFhcekHLprK6ABD2PVZ/APzu2AglCWHPO0gaQ0+7khtWxVcNw2Y +FzrJcM7kY8luJVWYe6i0ElNP7ntzLP3cmcalflUukE+A5QBP62uFuDdhsP3rqXl plCmb3Rp8j49mv1kszVxGDW0LLfcv2CLN8zKkQadIaRC8veTu/S56WQvMP40njof 4BGjs5laDLJFgkiAf/FV/C2Z5cdrf6QKFhgj51A9hLOsDN8agSUST2tkiXHQOfUJ HqeYkO3P0lKXOIqNQhUZRD4iZe7x+DqG -----END CERTIFICATE-----Generated at Sat Jun 13 13:09:19 2026 by rpki-client