$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ba9a73b-fc5d-35e7-930f-1d8f8b39711c.roa File: 1ba9a73b-fc5d-35e7-930f-1d8f8b39711c.roa (raw, json) Hash identifier: KXM23g+3lnSKl59nEB70OpEjZlzHzdp+dwdocxhKkkw= Subject key identifier: 8F:B6:AF:4A:8B:15:0A:0C:81:47:4A:41:DB:99:FA:A6:3C:32:95:62 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DD8F077A16302AB7A6C36AD00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ba9a73b-fc5d-35e7-930f-1d8f8b39711c.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 396582 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:77:a1:63:02:ab:7a:6c:36:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=7cadbc3d-63e6-4a73-8125-6c61e20511b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:03:4e:ef:50:a4:1d:43:d2:9b:45:f0:06:fc: 1e:55:1d:e3:0f:9a:b1:66:46:f8:f5:1b:a1:71:4c: 14:c6:6b:2b:52:5a:dc:8a:9a:25:4e:a4:75:8e:6b: d0:b1:8b:5e:98:37:7d:ee:fb:02:5d:14:b0:f3:2c: 96:8f:53:e8:4d:eb:a1:78:0d:2c:da:77:20:f6:bb: 3a:6a:bc:e0:e3:7d:bc:36:61:70:63:da:49:ec:21: d1:dd:7d:5b:47:ea:f1:1a:9b:d7:55:38:02:3a:c0: f6:f3:bf:c0:3e:bb:dc:2f:cf:2d:03:8a:88:77:9c: d2:42:1e:cf:f8:dc:74:b4:fa:b7:27:11:30:77:83: 1f:17:6a:c4:20:0a:93:9c:b2:2d:d8:67:f5:3e:b0: 6b:e7:6f:08:59:ab:0b:a7:97:9b:d0:a8:82:dd:40: 60:17:30:92:83:b3:13:89:8b:16:32:d7:72:01:b9: 47:76:6a:f7:79:f1:ee:33:47:c1:fe:ff:24:77:a9: 95:ca:9a:09:bc:ee:bb:d9:63:0f:e3:86:1c:93:00: 7c:53:a7:68:48:ca:2d:e1:1c:d1:a5:4f:bb:01:84: d4:ae:17:b8:96:1b:f5:3d:24:ae:a9:5e:f2:36:d1: 28:ca:68:02:ef:ef:49:c1:af:02:07:7d:cb:74:9c: 0a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B6:AF:4A:8B:15:0A:0C:81:47:4A:41:DB:99:FA:A6:3C:32:95:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ba9a73b-fc5d-35e7-930f-1d8f8b39711c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:90:d4:82:fa:44:bb:60:44:b7:8d:25:0b:26:f9:76:78:a7: d6:df:56:5b:ef:b1:37:56:9f:67:1e:0d:b6:44:cc:6e:7d:12: db:3f:ea:66:70:1d:db:ed:c4:8e:6d:ef:0a:e4:84:a0:c6:ff: 35:21:76:9d:49:d0:80:6c:96:2a:01:3e:eb:4f:5e:af:f7:87: fb:17:ab:c1:40:e6:de:5c:f4:db:04:37:d2:8b:80:68:af:51: b0:e9:7f:98:69:1c:a8:e6:ea:ed:cc:e4:12:20:00:d7:f2:23: 44:e3:18:ef:56:4c:90:39:ae:5f:2c:e7:af:c5:26:b5:52:1b: 2d:43:ba:5d:30:90:ee:a9:bc:49:8a:df:0c:59:ab:fd:ee:5f: 5b:ef:b7:ff:f5:48:ab:b2:2a:dd:89:b6:26:fb:e1:84:98:1e: 04:20:b1:fd:ac:4e:ff:b1:9c:60:e0:fc:be:df:81:1e:38:7a: ee:af:ec:e7:6a:50:c0:ca:35:87:36:b5:88:47:09:f5:f9:a3: 3e:e4:2c:c5:cc:c2:55:e3:93:c7:65:0f:d6:d9:3c:55:8c:cd: a1:13:21:71:e6:bd:d7:84:ec:9b:b4:a1:2f:49:1a:be:19:3f: 2b:1a:3f:bd:4c:38:12:5c:92:a7:2a:60:4d:1c:8a:6e:25:10: 08:94:0b:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8HehYwKremw2rQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk N2NhZGJjM2QtNjNlNi00YTczLTgxMjUtNmM2MWUyMDUxMWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngNO71CkHUPSm0XwBvweVR3jD5qxZkb49Ruh cUwUxmsrUlrcipolTqR1jmvQsYtemDd97vsCXRSw8yyWj1PoTeuheA0s2ncg9rs6 arzg4328NmFwY9pJ7CHR3X1bR+rxGpvXVTgCOsD287/APrvcL88tA4qId5zSQh7P +Nx0tPq3JxEwd4MfF2rEIAqTnLIt2Gf1PrBr528IWasLp5eb0KiC3UBgFzCSg7MT iYsWMtdyAblHdmr3efHuM0fB/v8kd6mVypoJvO672WMP44YckwB8U6doSMot4RzR pU+7AYTUrhe4lhv1PSSuqV7yNtEoymgC7+9Jwa8CB33LdJwKYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+2r0qLFQoMgUdKQduZ+qY8MpViMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWJhOWE3M2ItZmM1ZC0z NWU3LTkzMGYtMWQ4ZjhiMzk3MTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6Q1IL6RLtgRLeNJQsm+XZ4p9bfVlvvsTdWn2ceDbZEzG59Ets/6mZw HdvtxI5t7wrkhKDG/zUhdp1J0IBslioBPutPXq/3h/sXq8FA5t5c9NsEN9KLgGiv UbDpf5hpHKjm6u3M5BIgANfyI0TjGO9WTJA5rl8s56/FJrVSGy1Dul0wkO6pvEmK 3wxZq/3uX1vvt//1SKuyKt2Jtib74YSYHgQgsf2sTv+xnGDg/L7fgR44eu6v7Odq UMDKNYc2tYhHCfX5oz7kLMXMwlXjk8dlD9bZPFWMzaETIXHmvdeE7Ju0oS9JGr4Z PysaP71MOBJckqcqYE0cim4lEAiUC2g= -----END CERTIFICATE-----Generated at Sat Jun 13 18:02:35 2026 by rpki-client