$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30458aaf-8bc5-3f53-9556-5078d9063a6f.roa File: 30458aaf-8bc5-3f53-9556-5078d9063a6f.roa (raw, json) Hash identifier: YB4r44FiGV2aaDY9meCrn6hARiasBKfa1oA+rZ7z/GY= Subject key identifier: C2:5F:F4:25:D9:7F:A4:B9:D9:EB:AE:CD:BB:07:F3:8D:AE:0C:46:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1E44704A1C78BE9D5F5CBB40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30458aaf-8bc5-3f53-9556-5078d9063a6f.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 396551 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:70:4a:1c:78:be:9d:5f:5c:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=1d394cc2-b905-473d-8985-0b60212d2ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0b:15:47:9d:8c:33:57:45:fe:3e:c7:95:fd: 4e:83:7e:8b:c2:3b:eb:59:68:6c:30:8a:5a:4e:dd: 0b:9e:5f:8e:db:6b:b5:26:88:3a:a3:28:c7:14:50: eb:14:63:64:99:7f:8f:05:46:af:b5:76:3a:7f:c4: 58:af:fe:f7:c0:32:fa:fd:25:fc:a4:ed:15:7a:6c: 61:15:47:c3:51:98:3a:b9:b4:9b:68:ab:8c:cb:d8: 7c:f4:77:fd:28:c6:8a:73:8a:4e:25:56:5c:fc:9c: 85:b5:83:74:e9:ca:8b:2f:39:95:79:2a:6d:cc:c4: 2b:43:16:4a:5f:43:cf:5b:b1:dc:d1:c3:d8:c8:1d: 2d:da:d3:f8:bc:e6:85:2e:96:b7:ac:f5:97:eb:ff: 1e:76:46:e3:08:13:8a:c9:ba:cd:8a:0c:22:46:8a: 4c:da:78:09:a1:57:24:72:5a:68:97:8a:de:c4:4c: c0:44:82:d8:9b:3c:f7:5c:d2:92:20:99:17:d9:c9: 85:22:4f:3a:8d:1f:80:d3:ee:08:99:2a:6d:9d:c4: f1:69:df:03:3d:e2:8f:9f:41:57:f8:6b:e0:66:b6: 2c:81:c2:4d:2c:82:65:ce:b4:d5:3e:79:77:2a:f8: 7e:08:1c:c1:46:51:1f:67:99:1a:d2:f8:67:4a:e2: 12:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5F:F4:25:D9:7F:A4:B9:D9:EB:AE:CD:BB:07:F3:8D:AE:0C:46:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30458aaf-8bc5-3f53-9556-5078d9063a6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:af:2f:0d:32:a9:9d:7e:ef:0b:0b:c0:9b:36:e1:69:33:5e: 7d:01:a9:c5:d9:ef:ad:3c:a1:70:1a:0f:da:11:48:99:61:9b: 57:38:ff:f3:0c:83:52:c5:01:7d:69:cc:db:e3:7d:76:10:94: 8f:d3:ce:d6:cf:35:4b:f0:b6:d0:5f:5d:45:a7:31:28:18:0d: df:35:e3:8a:e2:8b:a7:a3:ce:c4:ba:74:2f:0f:99:f2:1c:ad: 7e:93:8b:66:bf:f7:28:ec:05:7a:63:cf:55:9a:6e:ac:42:3d: 7a:62:ed:e5:72:ae:eb:7b:1f:4c:73:16:1d:36:e0:e5:bc:a1: 86:66:72:04:7f:d7:e0:ad:9e:82:73:de:33:8a:50:71:c5:ce: f3:3e:6a:9b:4a:be:54:a8:16:b2:cb:ec:31:b9:19:4b:5a:58: 9c:63:6d:c0:db:8b:a8:c8:a8:3e:01:42:84:4f:85:8b:ff:5f: 99:12:42:e1:4e:0a:79:ee:6d:58:42:db:58:ae:99:65:4c:2c: b1:1e:32:80:97:09:a3:ef:cb:64:56:e7:32:40:18:2b:11:4c: 2b:37:d3:b8:2f:9c:b6:77:4e:cc:a8:d9:3a:08:f7:90:6b:e5: 42:a3:77:bf:d6:6c:26:fe:bd:44:22:05:2e:59:3c:f7:42:3b: e4:7e:9b:6c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4eRHBKHHi+nV9cu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk MWQzOTRjYzItYjkwNS00NzNkLTg5ODUtMGI2MDIxMmQyYWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwsVR52MM1dF/j7Hlf1Og36LwjvrWWhsMIpa Tt0Lnl+O22u1Jog6oyjHFFDrFGNkmX+PBUavtXY6f8RYr/73wDL6/SX8pO0Vemxh FUfDUZg6ubSbaKuMy9h89Hf9KMaKc4pOJVZc/JyFtYN06cqLLzmVeSptzMQrQxZK X0PPW7Hc0cPYyB0t2tP4vOaFLpa3rPWX6/8edkbjCBOKybrNigwiRopM2ngJoVck clpol4rexEzARILYmzz3XNKSIJkX2cmFIk86jR+A0+4ImSptncTxad8DPeKPn0FX +GvgZrYsgcJNLIJlzrTVPnl3Kvh+CBzBRlEfZ5ka0vhnSuISawIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMJf9CXZf6S52euuzbsH842uDEY7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzA0NThhYWYtOGJjNS0z ZjUzLTk1NTYtNTA3OGQ5MDYzYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBVry8NMqmdfu8LC8CbNuFpM159AanF2e+tPKFwGg/aEUiZYZtXOP/z DINSxQF9aczb4312EJSP087WzzVL8LbQX11FpzEoGA3fNeOK4ouno87EunQvD5ny HK1+k4tmv/co7AV6Y89Vmm6sQj16Yu3lcq7rex9McxYdNuDlvKGGZnIEf9fgrZ6C c94zilBxxc7zPmqbSr5UqBayy+wxuRlLWlicY23A24uoyKg+AUKET4WL/1+ZEkLh Tgp57m1YQttYrpllTCyxHjKAlwmj78tkVucyQBgrEUwrN9O4L5y2d07MqNk6CPeQ a+VCo3e/1mwm/r1EIgUuWTz3Qjvkfpts -----END CERTIFICATE-----Generated at Sat Jun 13 16:46:54 2026 by rpki-client