$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21d82432-bfb2-3a6c-aa9b-fbb74e79ab83.roa File: 21d82432-bfb2-3a6c-aa9b-fbb74e79ab83.roa (raw, json) Hash identifier: sOP91BWxPbX/HZhmfOMK+pvMdLNi5mcYvLKu5OpEfxQ= Subject key identifier: 70:92:13:F0:A6:0F:0F:57:2E:1B:5C:48:D2:A6:2E:D9:DE:34:C0:72 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DD8F079EADFFBF57F5F7CFB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21d82432-bfb2-3a6c-aa9b-fbb74e79ab83.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 211369 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:79:ea:df:fb:f5:7f:5f:7c:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=59a47876-63a4-4778-a5d3-da63a9c10212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:93:8c:8a:96:b3:3c:a1:5f:c8:80:6c:04:65: 15:fd:fa:53:8b:52:55:19:ec:e1:b6:11:93:1a:a6: 91:84:7c:4a:40:72:34:0a:40:d9:46:4d:7a:c7:3b: 58:e7:4d:47:69:e7:96:e6:0c:e3:c8:dd:ca:20:1b: 91:26:3c:7b:8c:4f:c1:d6:0d:98:f4:89:db:cf:e8: 84:9f:ee:f5:74:72:b4:fb:e9:b4:f8:c4:a5:31:11: 10:3e:bc:1d:b2:e5:0d:92:8a:a8:c0:82:ed:d6:b0: f8:43:c1:50:b0:b2:4f:8a:ec:1a:28:d7:07:43:f8: 32:72:16:0d:3a:cb:d1:2e:fc:57:93:d4:f0:f8:d3: 13:a7:9f:7b:3d:b3:09:88:56:08:38:8a:19:c3:5d: 6d:3c:b9:86:f7:8d:ac:eb:27:5b:70:7e:33:0a:1d: c6:83:53:ce:13:bc:6e:1d:6d:b3:8d:f8:b5:60:af: e4:67:d6:a6:b6:a8:09:ac:d0:55:43:68:69:fb:dc: 05:d3:8c:2e:38:c9:c4:0b:94:39:a8:84:fa:65:ae: 7c:3a:f8:ba:04:3e:10:f7:6c:46:eb:8b:d1:42:0e: 5c:ff:67:6c:0d:a4:34:f9:2b:d9:0d:8c:46:b0:74: 5a:1b:21:fb:5b:1a:ea:24:03:0f:1c:59:70:60:7f: b0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:92:13:F0:A6:0F:0F:57:2E:1B:5C:48:D2:A6:2E:D9:DE:34:C0:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21d82432-bfb2-3a6c-aa9b-fbb74e79ab83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:7c:cd:1f:0e:5f:4c:15:5f:01:4d:52:9a:4c:ef:2f:4b:f7: c0:68:9b:81:2d:bf:9a:1f:a2:c1:e5:46:c2:96:48:32:1b:99: b9:f0:31:61:8d:73:e3:04:da:74:3e:fb:77:0d:c2:b1:27:fa: 78:71:d3:ca:cf:f6:49:a2:4c:86:35:63:3b:85:57:75:b2:4d: 47:aa:85:ab:96:ba:65:0b:07:67:b3:5d:68:1d:33:1f:ea:c7: 12:8b:55:ec:28:ab:d9:3c:80:89:27:bd:53:ea:81:56:ed:f1: 38:c7:74:88:9a:23:1c:d3:0d:28:d4:81:ce:8f:98:79:53:72: 53:c3:7f:4e:bc:29:4f:be:40:14:7c:d7:07:b5:9b:d4:f1:74: 7e:2c:76:2d:e4:ac:bc:36:3c:66:89:92:c0:28:92:61:28:e7: 35:d8:06:73:4f:16:07:29:b5:73:4c:5a:63:79:d7:94:87:a9: 66:a3:e7:54:3b:9a:33:31:5b:2d:dd:e2:66:f3:32:44:72:19: 97:16:00:05:3e:37:52:8c:a0:b0:b7:e2:af:7f:7d:b9:67:5f: 81:2e:cf:ba:5f:e1:6b:03:2b:22:b2:08:48:ea:e8:5d:66:d7: 88:af:e3:0f:65:16:14:fa:47:6a:c4:78:d7:a5:95:1c:63:ff: fa:7c:78:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8Hnq3/v1f198+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk NTlhNDc4NzYtNjNhNC00Nzc4LWE1ZDMtZGE2M2E5YzEwMjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5OMipazPKFfyIBsBGUV/fpTi1JVGezhthGT GqaRhHxKQHI0CkDZRk16xztY501HaeeW5gzjyN3KIBuRJjx7jE/B1g2Y9Inbz+iE n+71dHK0++m0+MSlMREQPrwdsuUNkoqowILt1rD4Q8FQsLJPiuwaKNcHQ/gychYN OsvRLvxXk9Tw+NMTp597PbMJiFYIOIoZw11tPLmG942s6ydbcH4zCh3Gg1POE7xu HW2zjfi1YK/kZ9amtqgJrNBVQ2hp+9wF04wuOMnEC5Q5qIT6Za58Ovi6BD4Q92xG 64vRQg5c/2dsDaQ0+SvZDYxGsHRaGyH7WxrqJAMPHFlwYH+wVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCSE/CmDw9XLhtcSNKmLtneNMByMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjFkODI0MzItYmZiMi0z YTZjLWFhOWItZmJiNzRlNzlhYjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt8zR8OX0wVXwFNUppM7y9L98Bom4Etv5ofosHlRsKWSDIbmbnwMWGN c+ME2nQ++3cNwrEn+nhx08rP9kmiTIY1YzuFV3WyTUeqhauWumULB2ezXWgdMx/q xxKLVewoq9k8gIknvVPqgVbt8TjHdIiaIxzTDSjUgc6PmHlTclPDf068KU++QBR8 1we1m9TxdH4sdi3krLw2PGaJksAokmEo5zXYBnNPFgcptXNMWmN515SHqWaj51Q7 mjMxWy3d4mbzMkRyGZcWAAU+N1KMoLC34q9/fblnX4Euz7pf4WsDKyKyCEjq6F1m 14iv4w9lFhT6R2rEeNellRxj//p8eFI= -----END CERTIFICATE-----Generated at Sat Jun 13 14:32:22 2026 by rpki-client