$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21c8994c-b7a9-3921-a776-411828754690.roa File: 21c8994c-b7a9-3921-a776-411828754690.roa (raw, json) Hash identifier: RJ+G7FI62H820E3ybor7hungoq0ZWGWlBhkhan8up9c= Subject key identifier: D4:4A:D0:01:BA:D5:F8:BE:12:6C:68:05:84:E6:B5:5E:8C:FC:EF:35 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1E4473F95B93A297A56C8F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21c8994c-b7a9-3921-a776-411828754690.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 396614 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:73:f9:5b:93:a2:97:a5:6c:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=9ba893e7-5524-48f5-b53b-c4e59943afa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d0:e4:7b:6e:23:e9:ae:26:b8:e9:7a:f8:1d: d6:27:5a:9d:8d:19:28:16:26:92:28:84:34:e2:37: 08:8a:bb:39:af:25:76:1f:a7:c9:3a:d0:90:d1:a8: 60:6f:04:51:59:2c:e3:ba:c7:16:6a:40:1c:63:85: b2:00:d9:e6:00:15:72:e4:12:37:bb:71:5f:c4:94: b3:47:8b:d1:dd:38:af:8b:01:e9:11:5a:9b:dc:98: 83:2e:63:46:c6:48:b3:e4:28:42:ea:1e:92:d9:64: 0a:d5:3b:30:d3:85:5b:d5:12:d2:30:7d:87:8d:72: 5c:d6:c4:01:ce:52:67:5b:2b:7d:5c:f4:51:dd:86: f5:97:09:4f:b6:61:3b:e5:86:3d:43:e5:04:25:e9: 9a:ec:f1:3f:d6:66:d7:49:55:b1:cf:b1:fe:82:87: 4f:b3:24:16:d9:2a:e6:e5:73:93:4b:b6:0b:8f:d8: 3d:fb:dd:79:a0:5a:2c:1b:d4:8a:6e:ef:ad:a8:ca: 5a:1b:d5:b7:6f:99:9f:65:3d:39:42:fe:52:f1:c1: a5:84:b9:f8:27:94:1a:67:9f:a7:e2:6b:11:0e:12: 0e:33:09:5e:c8:aa:1a:61:16:48:3c:1f:dc:a0:e8: 02:4b:7a:08:a1:93:41:c2:da:81:57:ee:15:e8:58: 22:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4A:D0:01:BA:D5:F8:BE:12:6C:68:05:84:E6:B5:5E:8C:FC:EF:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21c8994c-b7a9-3921-a776-411828754690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:d9:94:b3:d4:85:8c:d3:42:b2:43:89:e5:7a:13:a9:c8:57: 10:28:ca:e0:9a:b6:d4:bf:27:be:51:cd:05:2d:05:6b:19:6f: 03:4f:3c:5c:5f:fb:02:0c:14:6c:3c:97:21:d1:84:e9:91:78: 20:a7:4c:4d:ec:4c:0c:6e:00:a5:04:e7:a4:b7:25:d0:cd:6b: 63:7e:8a:b7:07:da:2c:5c:74:b1:75:8c:b6:63:e2:da:b2:dd: 07:fc:bc:6c:45:5c:2f:0b:02:b5:79:c2:59:c9:c3:07:11:0b: 48:95:e8:39:15:4d:1b:e1:42:c1:86:c2:d1:9d:0d:f8:3e:95: 1c:40:ab:1c:45:13:5c:c5:19:54:db:d8:1e:60:f9:f2:19:78: 55:65:88:fe:3f:5e:bf:f1:40:5b:0b:09:05:ed:03:54:43:52: 37:be:fa:36:83:d4:34:db:21:60:b5:1d:70:24:e6:ae:f7:85: 75:74:a2:7c:de:66:d3:a0:b3:91:ee:a8:9e:1a:2b:a3:b8:82: ed:ea:4b:0f:e3:f5:cd:df:4d:2b:37:16:b2:3f:cb:31:d8:24: 58:1b:6b:bd:b7:a4:3b:b5:db:84:18:aa:2c:47:1f:81:c5:7b: 5d:f2:7d:a0:43:84:ec:be:73:b8:ee:e6:4a:c3:ac:cd:d1:5a: d4:74:26:44 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4eRHP5W5Oil6Vsj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk OWJhODkzZTctNTUyNC00OGY1LWI1M2ItYzRlNTk5NDNhZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNDke24j6a4muOl6+B3WJ1qdjRkoFiaSKIQ0 4jcIirs5ryV2H6fJOtCQ0ahgbwRRWSzjuscWakAcY4WyANnmABVy5BI3u3FfxJSz R4vR3TiviwHpEVqb3JiDLmNGxkiz5ChC6h6S2WQK1Tsw04Vb1RLSMH2HjXJc1sQB zlJnWyt9XPRR3Yb1lwlPtmE75YY9Q+UEJema7PE/1mbXSVWxz7H+godPsyQW2Srm 5XOTS7YLj9g9+915oFosG9SKbu+tqMpaG9W3b5mfZT05Qv5S8cGlhLn4J5QaZ5+n 4msRDhIOMwleyKoaYRZIPB/coOgCS3oIoZNBwtqBV+4V6FgiXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNRK0AG61fi+EmxoBYTmtV6M/O81MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjFjODk5NGMtYjdhOS0z OTIxLWE3NzYtNDExODI4NzU0NjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCC2ZSz1IWM00KyQ4nlehOpyFcQKMrgmrbUvye+Uc0FLQVrGW8DTzxc X/sCDBRsPJch0YTpkXggp0xN7EwMbgClBOektyXQzWtjfoq3B9osXHSxdYy2Y+La st0H/LxsRVwvCwK1ecJZycMHEQtIleg5FU0b4ULBhsLRnQ34PpUcQKscRRNcxRlU 29geYPnyGXhVZYj+P16/8UBbCwkF7QNUQ1I3vvo2g9Q02yFgtR1wJOau94V1dKJ8 3mbToLOR7qieGiujuILt6ksP4/XN300rNxayP8sx2CRYG2u9t6Q7tduEGKosRx+B xXtd8n2gQ4TsvnO47uZKw6zN0VrUdCZE -----END CERTIFICATE-----Generated at Sat Jun 13 19:14:39 2026 by rpki-client