$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b17fe67-f014-318e-a766-667fa5056720.roa File: 3b17fe67-f014-318e-a766-667fa5056720.roa (raw, json) Hash identifier: BX4Iq1fOkApwtNCZVK9qvfUiHaqQMN/fRPi0TVVh1U8= Subject key identifier: FB:36:24:D7:3A:D0:BA:B6:24:2E:37:E1:C6:E7:8B:61:67:D8:06:E4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1E4470F08311607722D7CCB0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b17fe67-f014-318e-a766-667fa5056720.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 396611 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:70:f0:83:11:60:77:22:d7:cc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=2f375e1e-4603-46de-b459-1101c3ed9bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3b:4a:d7:24:2a:8b:c0:bf:fb:e8:95:ec:1c: 4c:76:e1:b8:0d:15:8c:2a:0f:87:15:45:f1:39:e7: bf:2c:fb:88:2a:ff:d5:3f:49:6f:a5:68:7c:ff:e4: 5f:b4:be:d6:44:a3:48:aa:22:d7:b1:e7:0a:31:bd: fa:5a:22:d6:50:27:dd:47:ec:e3:71:fd:e6:2e:bf: 50:ef:a0:53:0b:3b:27:9a:d8:f5:02:5f:5a:d0:1b: f0:27:c7:f2:56:d0:20:02:c5:93:46:ae:0a:81:4f: ed:a5:e5:cb:c2:06:e3:60:ea:f7:8f:f6:35:80:a1: 9f:f2:8b:33:b8:69:d0:a1:f3:14:c7:0f:fc:c9:99: 8c:34:94:87:72:c0:98:51:14:03:08:ab:c1:38:52: bc:43:bc:d6:4b:04:78:0b:b4:40:f1:10:11:96:bc: bc:cd:05:30:dc:b5:89:3a:f3:3a:29:cf:45:db:d5: 91:04:72:a4:f8:78:79:f0:1c:63:ed:36:29:4e:26: 31:18:b4:08:97:f8:00:d2:7f:9b:7a:af:6a:b4:5c: 0a:72:46:7d:04:8e:ac:cd:9f:35:6d:57:f5:25:92: 32:98:21:f5:6f:47:f2:06:cc:0b:e2:99:2a:0e:ca: 9e:11:5d:48:92:0e:9a:10:b9:cd:39:89:ad:e3:65: 9d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:36:24:D7:3A:D0:BA:B6:24:2E:37:E1:C6:E7:8B:61:67:D8:06:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b17fe67-f014-318e-a766-667fa5056720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c0:17:01:2a:09:53:99:85:02:b3:a6:0f:fc:91:11:d2:57: 7e:c7:55:31:d1:6d:fa:fd:eb:96:e8:42:7c:93:c7:ec:fc:d1: e1:f4:2a:31:1d:05:a4:48:9f:0d:1d:d0:49:2a:8a:96:b6:0e: 76:48:5b:73:bf:43:d8:a6:c7:ab:de:6d:cc:e1:59:cd:fe:bd: c5:1b:7c:79:90:8d:f0:75:78:df:13:da:1d:0c:3a:70:98:5d: 57:fe:07:af:7b:cf:e9:d3:e7:65:fd:38:05:8d:c2:de:2c:27: a4:a3:e4:7b:61:0d:7c:7f:4c:c3:60:29:54:00:ee:f6:5f:cb: c5:8c:4a:d3:fa:c2:75:46:00:32:8a:a8:96:6a:67:6b:5b:66: 95:f4:1f:e5:cc:eb:36:4e:a1:c3:7f:24:86:4e:ee:76:b2:47: 23:58:47:cf:bb:8b:9f:b9:4f:fb:eb:29:18:8a:1b:68:73:9a: 71:61:af:4c:69:26:29:80:74:46:45:1b:e6:4b:bd:8a:6a:09: 05:81:6f:5b:e6:e5:c4:bf:a3:cd:21:d8:39:77:35:05:5a:b3: e4:f2:cd:e4:40:fe:18:a5:7c:8d:ee:ea:66:01:51:30:0d:0c: fa:a6:f0:02:35:89:f0:a1:78:a5:94:39:22:c9:cd:54:a3:43: 1f:94:7d:15 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4eRHDwgxFgdyLXzLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk MmYzNzVlMWUtNDYwMy00NmRlLWI0NTktMTEwMWMzZWQ5YmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TtK1yQqi8C/++iV7BxMduG4DRWMKg+HFUXx Oee/LPuIKv/VP0lvpWh8/+RftL7WRKNIqiLXsecKMb36WiLWUCfdR+zjcf3mLr9Q 76BTCzsnmtj1Al9a0BvwJ8fyVtAgAsWTRq4KgU/tpeXLwgbjYOr3j/Y1gKGf8osz uGnQofMUxw/8yZmMNJSHcsCYURQDCKvBOFK8Q7zWSwR4C7RA8RARlry8zQUw3LWJ OvM6Kc9F29WRBHKk+Hh58Bxj7TYpTiYxGLQIl/gA0n+beq9qtFwKckZ9BI6szZ81 bVf1JZIymCH1b0fyBswL4pkqDsqeEV1Ikg6aELnNOYmt42WdzwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPs2JNc60Lq2JC434cbni2Fn2AbkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2IxN2ZlNjctZjAxNC0z MThlLWE3NjYtNjY3ZmE1MDU2NzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB7wBcBKglTmYUCs6YP/JER0ld+x1Ux0W36/euW6EJ8k8fs/NHh9Cox HQWkSJ8NHdBJKoqWtg52SFtzv0PYpser3m3M4VnN/r3FG3x5kI3wdXjfE9odDDpw mF1X/geve8/p0+dl/TgFjcLeLCeko+R7YQ18f0zDYClUAO72X8vFjErT+sJ1RgAy iqiWamdrW2aV9B/lzOs2TqHDfySGTu52skcjWEfPu4ufuU/76ykYihtoc5pxYa9M aSYpgHRGRRvmS72KagkFgW9b5uXEv6PNIdg5dzUFWrPk8s3kQP4YpXyN7upmAVEw DQz6pvACNYnwoXillDkiyc1Uo0MflH0V -----END CERTIFICATE-----Generated at Sat Jun 13 22:01:47 2026 by rpki-client