$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/208090c8-c54d-3acb-bfae-6917a4631c38.roa File: 208090c8-c54d-3acb-bfae-6917a4631c38.roa (raw, json) Hash identifier: ttFxgkOAm1QB5iun/9PXvNjLQLdfPVNrHdGF+dFlcz0= Subject key identifier: 00:5A:F1:99:48:36:01:22:53:B2:5E:2F:A9:89:70:30:F1:CE:6E:22 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DD8F077957081AB3D0F7E7840 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/208090c8-c54d-3acb-bfae-6917a4631c38.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 396584 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:77:95:70:81:ab:3d:0f:7e:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=6dea6eaa-bccf-4092-8862-53febfc5c73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e4:89:5c:9f:99:01:ed:8a:de:f2:fc:cb:71: e2:8f:9e:7b:cd:f2:76:16:ac:13:2a:42:37:3f:d4: fc:23:86:e0:be:24:c4:53:e6:cc:5d:fe:f2:5b:07: 4c:dd:b9:5d:f0:17:a6:df:1c:0d:4a:c1:9e:24:90: 1e:90:2b:43:07:06:9d:18:f3:2e:11:ef:d4:1d:29: c8:4e:a7:7c:a6:5a:ce:fd:69:95:74:10:41:69:b2: ff:57:03:16:ac:54:70:b8:06:2d:c6:d7:21:02:39: b7:16:92:dc:9b:a5:55:59:cf:29:45:8d:26:21:3e: 5e:43:59:31:de:55:7b:6a:b7:e4:00:9f:56:7c:f6: 0c:52:10:33:24:a4:97:2c:0f:17:de:6c:76:47:a0: ce:1b:fe:67:f3:d1:28:cf:9c:44:30:08:f8:c9:47: 57:79:64:56:58:c4:65:4d:29:7b:ef:4c:b9:c9:6c: eb:45:f8:80:1d:77:0a:81:5a:9c:56:e6:80:b2:64: 8f:77:6f:be:69:6e:f3:25:80:2a:0a:85:c9:c0:36: 0c:8c:03:23:af:6c:71:d6:c6:f3:3a:bb:43:cc:cc: ab:4c:6e:e8:ed:bb:93:18:13:38:18:79:da:03:15: 64:46:72:4e:e5:9a:7d:10:84:97:c1:bf:e5:68:bf: ad:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5A:F1:99:48:36:01:22:53:B2:5E:2F:A9:89:70:30:F1:CE:6E:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/208090c8-c54d-3acb-bfae-6917a4631c38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:64:67:6d:c8:a5:0a:62:ed:da:22:ad:5c:98:b3:2a:02:68: a7:c7:37:de:9e:a7:fb:95:f9:92:a5:93:ea:3f:cd:70:5a:5f: 58:a0:37:5d:91:55:42:9c:51:0a:05:1c:53:c0:73:ad:21:dc: 84:f2:28:72:c5:57:1c:33:97:32:c4:ab:dd:2a:cd:f1:b5:25: 9b:76:89:a3:65:78:05:cb:bd:76:72:b4:12:3d:2f:fe:4c:1a: f0:83:d3:61:f7:96:32:75:50:c4:25:b2:c3:0c:47:a3:b7:39: 7f:89:02:32:0e:9b:ed:35:2f:e9:f1:d7:4f:0b:8d:5f:02:5f: 7d:28:8c:27:14:e3:1d:c2:67:92:8f:ae:11:8c:a3:78:fa:12: e3:18:b6:d2:8a:6b:4f:e3:6e:d7:da:22:91:3b:e2:d4:b9:36: 60:46:90:dc:39:d7:b9:88:5c:ed:87:4b:51:51:b9:27:92:cb: b8:fc:ec:1f:11:16:47:cd:2e:f8:a3:a9:e7:92:f7:0b:c3:4d: e1:c6:6c:4b:9d:2c:8f:08:fd:67:66:14:b8:f8:53:1f:3e:c0: 55:b2:f4:78:06:eb:f4:3e:a0:5e:da:f8:28:af:37:36:69:dc: 52:b0:b6:90:0e:8c:e9:4b:7e:da:0f:00:20:66:d6:7a:e5:38: b6:48:f2:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8HeVcIGrPQ9+eEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk NmRlYTZlYWEtYmNjZi00MDkyLTg4NjItNTNmZWJmYzVjNzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquSJXJ+ZAe2K3vL8y3Hij557zfJ2FqwTKkI3 P9T8I4bgviTEU+bMXf7yWwdM3bld8Bem3xwNSsGeJJAekCtDBwadGPMuEe/UHSnI Tqd8plrO/WmVdBBBabL/VwMWrFRwuAYtxtchAjm3FpLcm6VVWc8pRY0mIT5eQ1kx 3lV7arfkAJ9WfPYMUhAzJKSXLA8X3mx2R6DOG/5n89Eoz5xEMAj4yUdXeWRWWMRl TSl770y5yWzrRfiAHXcKgVqcVuaAsmSPd2++aW7zJYAqCoXJwDYMjAMjr2xx1sbz OrtDzMyrTG7o7buTGBM4GHnaAxVkRnJO5Zp9EISXwb/laL+t7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABa8ZlINgEiU7JeL6mJcDDxzm4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjA4MDkwYzgtYzU0ZC0z YWNiLWJmYWUtNjkxN2E0NjMxYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlkZ23IpQpi7doirVyYsyoCaKfHN96ep/uV+ZKlk+o/zXBaX1igN12R VUKcUQoFHFPAc60h3ITyKHLFVxwzlzLEq90qzfG1JZt2iaNleAXLvXZytBI9L/5M GvCD02H3ljJ1UMQlssMMR6O3OX+JAjIOm+01L+nx108LjV8CX30ojCcU4x3CZ5KP rhGMo3j6EuMYttKKa0/jbtfaIpE74tS5NmBGkNw517mIXO2HS1FRuSeSy7j87B8R FkfNLvijqeeS9wvDTeHGbEudLI8I/WdmFLj4Ux8+wFWy9HgG6/Q+oF7a+CivNzZp 3FKwtpAOjOlLftoPACBm1nrlOLZI8iY= -----END CERTIFICATE-----Generated at Sat Jun 13 14:32:15 2026 by rpki-client