$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ecd9ebd-5aca-3470-b0e7-3d749e98d3de.roa File: 3ecd9ebd-5aca-3470-b0e7-3d749e98d3de.roa (raw, json) Hash identifier: QDn0dtnfYMsJYJK1sjrsu61A6e5iKaGxkHys6SnwskE= Subject key identifier: EB:17:A1:6D:F2:5E:99:14:9C:FD:12:FF:81:C3:55:79:37:44:89:E5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1E446E2C90D3374682009380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ecd9ebd-5aca-3470-b0e7-3d749e98d3de.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 396540 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:6e:2c:90:d3:37:46:82:00:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=97a4c193-3821-462f-8719-850c5ec102dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ae:4e:2a:60:c5:ea:08:2e:2c:a0:42:10:fb: 33:94:ae:8b:99:1a:87:a2:3f:9f:92:ad:7b:fc:f3: 31:2e:d3:0b:62:87:e8:d9:58:d5:32:6d:03:9b:97: c5:21:d9:cc:af:e4:68:2e:30:1c:b3:1d:ce:63:0d: a4:22:d6:40:8d:cd:21:ce:39:06:f6:eb:5b:0f:b2: 55:ee:4f:ed:3b:7b:c4:0b:13:88:68:cf:4a:e3:a4: d1:f7:f0:1b:db:8d:29:b6:43:1a:57:ce:bf:3a:62: 82:4f:ef:25:c3:65:5a:f8:e3:2e:ee:ba:c6:c1:31: b1:72:da:3d:a4:8a:c7:24:e0:f5:a6:fe:65:ec:96: bf:c4:35:68:9b:c1:fb:9c:6d:1d:4c:98:d0:c6:8e: 63:92:34:5a:e3:37:e9:8f:95:5c:48:cf:79:9a:ed: 60:bb:68:e9:54:6e:c8:fc:28:5e:de:ee:6e:6d:1e: c7:a8:6d:7f:8e:09:00:9b:e0:66:38:5a:d2:3c:02: 10:22:b6:2d:e0:b4:6e:d7:68:80:98:83:5e:fb:5c: cc:50:34:cf:f0:12:4f:89:d9:99:6b:eb:a5:1a:33: c1:72:66:41:a8:ca:96:89:d2:21:55:56:1d:a7:dd: af:af:4d:6c:30:c1:49:ef:b0:61:2e:db:0b:f5:4d: a1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:17:A1:6D:F2:5E:99:14:9C:FD:12:FF:81:C3:55:79:37:44:89:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ecd9ebd-5aca-3470-b0e7-3d749e98d3de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a8:f5:f8:25:d9:7d:2f:66:e7:87:69:cc:b0:10:27:40:0c: bb:13:fa:fb:3d:60:00:42:a7:44:53:54:2a:3d:49:28:63:b2: 77:2d:31:92:ab:04:0f:92:ee:e6:f7:ce:fd:bd:dd:19:b2:49: 06:94:90:16:cf:61:bf:bc:87:a8:a5:ba:d0:3d:8d:f6:de:12: 53:07:59:4c:6e:f7:65:01:3d:d4:b8:c8:02:ce:1f:d4:16:01: b8:86:4a:e7:c2:fa:0e:fb:df:95:55:c8:9b:4f:35:b5:bf:04: 67:66:bd:70:d2:f4:86:e4:0e:f7:fd:8a:1d:cf:f9:64:d7:84: 2d:48:2d:9d:8d:fa:be:44:89:ca:f6:93:46:56:2b:5d:9a:f7: 49:6c:6c:56:a0:bf:4a:dc:fa:18:7f:ef:a2:a6:88:3a:7f:93: 11:50:a0:fc:6c:e6:cd:0a:a8:4f:55:52:20:57:fc:34:e6:99: 1f:3f:76:50:a0:91:c8:8d:57:e8:9a:59:83:2e:28:61:81:b0: 97:3a:39:f5:68:a0:87:c2:56:8e:96:8b:14:2d:2d:8c:87:f7: 97:4d:15:d8:7b:6b:07:d5:80:30:7a:90:1e:0f:31:02:0f:32: 0f:bc:59:35:95:ea:08:29:46:8b:89:da:ce:95:19:dc:94:d8: df:95:f5:1d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4eRG4skNM3RoIAk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk OTdhNGMxOTMtMzgyMS00NjJmLTg3MTktODUwYzVlYzEwMmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK5OKmDF6gguLKBCEPszlK6LmRqHoj+fkq17 /PMxLtMLYofo2VjVMm0Dm5fFIdnMr+RoLjAcsx3OYw2kItZAjc0hzjkG9utbD7JV 7k/tO3vECxOIaM9K46TR9/Ab240ptkMaV86/OmKCT+8lw2Va+OMu7rrGwTGxcto9 pIrHJOD1pv5l7Ja/xDVom8H7nG0dTJjQxo5jkjRa4zfpj5VcSM95mu1gu2jpVG7I /Che3u5ubR7HqG1/jgkAm+BmOFrSPAIQIrYt4LRu12iAmINe+1zMUDTP8BJPidmZ a+ulGjPBcmZBqMqWidIhVVYdp92vr01sMMFJ77BhLtsL9U2h1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOsXoW3yXpkUnP0S/4HDVXk3RInlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2VjZDllYmQtNWFjYS0z NDcwLWIwZTctM2Q3NDllOThkM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjqPX4Jdl9L2bnh2nMsBAnQAy7E/r7PWAAQqdEU1QqPUkoY7J3LTGS qwQPku7m9879vd0ZskkGlJAWz2G/vIeopbrQPY323hJTB1lMbvdlAT3UuMgCzh/U FgG4hkrnwvoO+9+VVcibTzW1vwRnZr1w0vSG5A73/Yodz/lk14QtSC2djfq+RInK 9pNGVitdmvdJbGxWoL9K3PoYf++ipog6f5MRUKD8bObNCqhPVVIgV/w05pkfP3ZQ oJHIjVfomlmDLihhgbCXOjn1aKCHwlaOlosULS2Mh/eXTRXYe2sH1YAwepAeDzEC DzIPvFk1leoIKUaLidrOlRnclNjflfUd -----END CERTIFICATE-----Generated at Sat Jun 13 13:09:14 2026 by rpki-client