$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2c4c59bd-d42c-350f-8fd8-10c8008393f2.roa File: 2c4c59bd-d42c-350f-8fd8-10c8008393f2.roa (raw, json) Hash identifier: qJ6Q5kKxYgbhXowquXJDStL4avCzJy2RyUuP0GZu4uE= Subject key identifier: 8F:35:AC:FC:4A:E3:EE:0E:23:D7:AD:08:EB:E7:39:F5:83:D0:2F:2A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DD8F07B12501DFB4267597200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2c4c59bd-d42c-350f-8fd8-10c8008393f2.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 396560 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:7b:12:50:1d:fb:42:67:59:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=1a325c8c-8834-4c30-bb40-763e00853f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a8:85:ee:d8:ee:38:96:21:b8:a9:0b:b0:77: ce:9e:46:8d:f2:0a:49:2d:d3:ca:29:00:89:98:6b: 80:9a:57:e2:52:81:94:f2:7e:a9:c7:e6:88:bf:2a: 56:a1:df:11:7a:7a:50:63:0c:dc:e3:68:18:22:19: 91:e1:b3:fa:7d:4a:76:fe:16:e0:c5:4c:c4:46:65: 80:44:f7:34:15:90:d6:c5:0e:5d:db:f3:3e:2c:f6: c6:55:64:d5:3e:d6:a6:ed:70:62:2a:62:77:56:88: 2c:9b:c6:c5:6c:cc:ed:8d:f5:c6:7e:da:84:9d:f4: 94:c6:01:d8:57:d1:70:ee:42:ed:30:65:b5:32:fc: f1:0e:43:01:41:66:68:e0:b5:63:10:16:5f:bb:9e: f0:03:fe:d4:87:15:d3:2e:90:28:bb:ec:4a:f4:17: a2:8c:40:76:3c:b9:11:39:ed:6b:54:77:f8:53:f5: dd:04:2b:96:b5:bc:31:6c:50:36:c0:03:e2:0b:b2: 3a:af:82:b2:68:5a:0b:92:4d:26:ac:ed:11:7a:fb: f9:ce:2d:fc:6b:70:6a:23:45:24:fc:49:d4:63:95: 2c:1b:90:cd:f0:9d:48:59:9b:66:41:7e:ba:50:ff: a5:8b:b8:14:a5:2b:b2:42:61:61:9b:65:1b:82:6e: c6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:35:AC:FC:4A:E3:EE:0E:23:D7:AD:08:EB:E7:39:F5:83:D0:2F:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2c4c59bd-d42c-350f-8fd8-10c8008393f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a8:5a:d1:18:fc:83:4e:70:2d:d9:9a:27:22:65:ec:41:d5: 59:d3:05:7b:44:e4:57:f7:b7:34:da:49:23:a8:5f:c1:48:d5: ed:15:5c:9d:7e:c9:c0:c1:d6:ff:0d:d3:c4:a6:27:01:00:d0: 1a:9d:30:3f:7d:35:28:b3:c5:0e:58:39:3d:8e:5d:7b:4d:c6: 18:99:1e:b5:dc:f1:c8:3e:24:2b:bd:57:47:dc:48:1c:74:73: 27:7d:a7:f1:be:f8:71:7c:53:2e:f0:bc:ce:be:e5:aa:7b:9a: cf:43:21:5d:c6:0d:b4:18:bb:5c:c1:b2:98:ff:9e:74:cd:51: 16:b1:b6:28:a1:6b:42:08:5b:fd:34:23:d7:84:d3:43:85:85: 0c:2c:f5:23:b4:81:dc:00:de:03:fc:11:00:59:9d:25:b0:be: fb:d8:c5:43:1d:0e:6f:09:b8:5e:a6:79:bf:2f:23:cd:6c:cc: 70:7f:f8:8e:e5:fd:58:ff:cb:39:ae:a3:35:81:6c:01:fa:48: 4c:0d:89:1a:b0:39:7f:1a:26:84:18:bf:cd:6a:aa:e3:b1:4e: bb:11:f4:f8:e9:f2:fc:2f:47:f6:9c:6a:25:bf:1e:3b:01:98: 7b:59:83:62:f7:a2:78:4a:1a:7f:18:4a:de:db:79:af:d0:95: 67:89:ff:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8HsSUB37QmdZcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk MWEzMjVjOGMtODgzNC00YzMwLWJiNDAtNzYzZTAwODUzZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKiF7tjuOJYhuKkLsHfOnkaN8gpJLdPKKQCJ mGuAmlfiUoGU8n6px+aIvypWod8RenpQYwzc42gYIhmR4bP6fUp2/hbgxUzERmWA RPc0FZDWxQ5d2/M+LPbGVWTVPtam7XBiKmJ3Vogsm8bFbMztjfXGftqEnfSUxgHY V9Fw7kLtMGW1MvzxDkMBQWZo4LVjEBZfu57wA/7UhxXTLpAou+xK9BeijEB2PLkR Oe1rVHf4U/XdBCuWtbwxbFA2wAPiC7I6r4KyaFoLkk0mrO0Revv5zi38a3BqI0Uk /EnUY5UsG5DN8J1IWZtmQX66UP+li7gUpSuyQmFhm2Ubgm7GDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI81rPxK4+4OI9etCOvnOfWD0C8qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmM0YzU5YmQtZDQyYy0z NTBmLThmZDgtMTBjODAwODM5M2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGioWtEY/INOcC3ZmiciZexB1VnTBXtE5Ff3tzTaSSOoX8FI1e0VXJ1+ ycDB1v8N08SmJwEA0BqdMD99NSizxQ5YOT2OXXtNxhiZHrXc8cg+JCu9V0fcSBx0 cyd9p/G++HF8Uy7wvM6+5ap7ms9DIV3GDbQYu1zBspj/nnTNURaxtiiha0IIW/00 I9eE00OFhQws9SO0gdwA3gP8EQBZnSWwvvvYxUMdDm8JuF6meb8vI81szHB/+I7l /Vj/yzmuozWBbAH6SEwNiRqwOX8aJoQYv81qquOxTrsR9Pjp8vwvR/acaiW/HjsB mHtZg2L3onhKGn8YSt7bea/QlWeJ/x4= -----END CERTIFICATE-----Generated at Sat Jun 13 16:58:00 2026 by rpki-client