$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/364987c1-50f3-3a07-b441-05a88a10725a.roa File: 364987c1-50f3-3a07-b441-05a88a10725a.roa (raw, json) Hash identifier: jIYIEL+FCJVG+HZVT6V0/pjQdUvhCSOhAtNcZq/KEQw= Subject key identifier: 3B:61:58:AA:C9:47:BB:29:88:D6:09:EC:B3:53:95:57:07:15:4A:20 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1E44727539099B11C8CEC540 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/364987c1-50f3-3a07-b441-05a88a10725a.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 396560 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:72:75:39:09:9b:11:c8:ce:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=7559f26a-dc83-4caa-be65-05e7d723b66c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:74:b8:0d:81:f7:ea:6d:a3:25:b8:ab:b0:0e: 2f:c4:75:89:e4:ce:65:50:a6:1a:47:9b:f1:e7:ad: f9:5a:3c:2c:14:62:fa:8d:c5:ad:25:03:d1:3d:41: 4c:8b:f8:c5:0e:45:a9:54:10:22:40:d0:6a:3d:09: be:ff:fe:63:04:e5:de:3c:a1:3f:f7:31:34:52:fc: 58:06:26:53:1e:e7:b1:8c:ac:38:56:0e:ab:9e:63: 2a:b7:7f:76:41:5b:59:c3:45:89:30:9d:fb:3d:c3: 6a:9b:2a:64:02:d9:37:c3:c0:b4:43:5f:2d:62:17: 94:6d:ef:73:21:f7:8d:6f:61:87:31:65:2a:9d:5b: e9:12:36:30:34:d7:72:74:89:03:b1:1a:46:ef:8a: e5:55:7a:c4:e0:e8:d1:9a:00:8b:00:db:fe:5a:79: 0e:40:82:a9:92:94:81:69:c6:b1:ce:58:c9:ec:77: 16:bf:13:a2:f4:9c:b8:8a:99:0b:54:17:2e:81:42: 5a:ba:2f:54:1d:f0:ad:c7:2b:90:07:64:06:bc:63: be:bb:5c:6e:c5:39:aa:32:1f:94:83:00:07:0f:3f: 3b:31:5c:77:5c:33:f5:d1:8e:f4:b3:5e:3e:4c:fd: cc:c4:8b:b2:a6:f3:13:92:19:4b:36:49:d0:0b:0a: b0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:61:58:AA:C9:47:BB:29:88:D6:09:EC:B3:53:95:57:07:15:4A:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/364987c1-50f3-3a07-b441-05a88a10725a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:86:f6:69:98:d6:33:dd:59:e9:47:e5:15:d6:bc:f5:2a:21: 76:d3:90:55:22:bc:ce:ed:ef:04:18:b6:a6:fd:2e:25:f7:d5: 70:a3:39:dc:2b:5a:89:e7:11:72:ff:52:f0:d3:35:a7:f9:68: 9a:58:f1:af:e5:9c:a5:b7:3a:84:0a:bd:1b:4b:01:27:c5:50: a9:b5:3c:e6:06:d5:09:f2:15:ea:0f:7b:a8:dc:9d:0d:7d:2b: b1:da:6f:e4:7a:a7:a5:1d:ff:81:d6:0c:eb:c4:50:9b:f2:8e: b4:fa:15:48:77:69:36:81:d2:1b:71:e7:38:cc:36:86:f4:0e: 78:cc:3d:15:09:87:35:fe:2f:33:8f:c8:c4:3c:87:a8:89:a9: 9a:bc:ad:78:0b:f8:f0:e5:82:67:9c:64:3d:5d:55:c2:7a:32: 63:bd:f3:08:cf:8d:b6:ea:fa:22:32:9a:d7:ce:9e:d5:94:24: a7:dd:0d:e5:05:fe:5a:76:fd:8c:98:76:f4:1e:ac:78:a9:76: 47:40:92:a0:b4:8c:d4:3a:7c:6c:d4:96:8f:f8:8f:ee:3b:a7: 71:52:0e:67:6a:44:f7:34:bc:a6:80:01:0e:f9:14:14:b7:34: a6:1f:07:aa:3d:3c:e6:8a:be:50:99:8d:9b:ae:42:a0:24:12: cc:df:33:13 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4eRHJ1OQmbEcjOxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk NzU1OWYyNmEtZGM4My00Y2FhLWJlNjUtMDVlN2Q3MjNiNjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nS4DYH36m2jJbirsA4vxHWJ5M5lUKYaR5vx 5635WjwsFGL6jcWtJQPRPUFMi/jFDkWpVBAiQNBqPQm+//5jBOXePKE/9zE0UvxY BiZTHuexjKw4Vg6rnmMqt392QVtZw0WJMJ37PcNqmypkAtk3w8C0Q18tYheUbe9z IfeNb2GHMWUqnVvpEjYwNNdydIkDsRpG74rlVXrE4OjRmgCLANv+WnkOQIKpkpSB acaxzljJ7HcWvxOi9Jy4ipkLVBcugUJaui9UHfCtxyuQB2QGvGO+u1xuxTmqMh+U gwAHDz87MVx3XDP10Y70s14+TP3MxIuypvMTkhlLNknQCwqw/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDthWKrJR7spiNYJ7LNTlVcHFUogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzY0OTg3YzEtNTBmMy0z YTA3LWI0NDEtMDVhODhhMTA3MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAfhvZpmNYz3VnpR+UV1rz1KiF205BVIrzO7e8EGLam/S4l99Vwoznc K1qJ5xFy/1Lw0zWn+WiaWPGv5ZyltzqECr0bSwEnxVCptTzmBtUJ8hXqD3uo3J0N fSux2m/keqelHf+B1gzrxFCb8o60+hVId2k2gdIbcec4zDaG9A54zD0VCYc1/i8z j8jEPIeoiamavK14C/jw5YJnnGQ9XVXCejJjvfMIz4226voiMprXzp7VlCSn3Q3l Bf5adv2MmHb0Hqx4qXZHQJKgtIzUOnxs1JaP+I/uO6dxUg5nakT3NLymgAEO+RQU tzSmHweqPTzmir5QmY2brkKgJBLM3zMT -----END CERTIFICATE-----Generated at Sat Jun 13 18:49:57 2026 by rpki-client