$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/633f8a6e-4a0c-3d43-a60e-09afc18e69c2.roa File: 633f8a6e-4a0c-3d43-a60e-09afc18e69c2.roa (raw, json) Hash identifier: OlOzp6Q4hBzxP6wxDSQcTXAJDmpaiU5kvhHw3b/q8yk= Subject key identifier: 6A:3D:15:60:72:C2:B7:7E:7A:2D:79:DB:10:2A:DE:CF:33:EF:71:EA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1E446FB95F918D70C8074000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/633f8a6e-4a0c-3d43-a60e-09afc18e69c2.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 32651 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:6f:b9:5f:91:8d:70:c8:07:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=449e9ae9-3325-4389-b47c-3bd0d47986e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:23:58:54:07:5c:14:dc:ca:76:ed:f4:3c:98: 4a:53:41:30:19:f3:e6:26:d5:ff:f0:b1:21:91:9d: 07:62:21:11:6b:e8:c1:77:8b:d3:08:97:ac:87:ed: e8:7d:d7:bb:94:03:52:32:ef:54:10:67:50:6f:be: 80:cf:33:cd:4f:fe:8a:a3:b3:9c:98:ff:3b:b8:fa: f5:34:62:9d:bd:76:dc:6a:08:43:92:53:cc:0d:77: 3c:83:fb:f7:cd:cd:c8:16:d2:38:08:ef:83:f9:96: a9:4c:17:44:02:ab:bd:af:03:6c:0d:e9:dc:c6:37: 6d:3f:ff:9b:7d:49:f8:3c:fb:06:58:d4:f5:4f:16: ca:02:33:ff:22:44:20:d1:4c:fc:ce:3f:8a:03:fe: a1:94:17:31:58:6d:a3:23:cd:e6:df:62:76:9e:9b: 2f:d0:84:ac:2c:e7:2a:05:2e:63:e8:33:7b:ce:ad: b4:26:71:68:6b:ae:ac:7e:3d:84:08:9a:76:21:ac: 6c:bf:7b:2b:88:e1:ca:61:99:32:1f:dc:8f:5b:2d: b2:8c:94:cb:4c:b4:d1:1e:4c:51:68:79:31:ba:4a: 21:91:7e:fe:4f:92:4e:aa:63:67:95:bb:26:ea:86: fa:12:72:74:42:4f:89:09:8a:1a:25:be:7b:c8:4d: 3e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3D:15:60:72:C2:B7:7E:7A:2D:79:DB:10:2A:DE:CF:33:EF:71:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/633f8a6e-4a0c-3d43-a60e-09afc18e69c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:37:3d:cb:86:c0:da:dd:4e:50:9c:21:71:9a:13:5f:59:82: 92:80:cf:65:d7:d0:43:9c:5e:4e:01:c7:b7:0b:78:08:20:b9: 57:44:a8:fe:9f:ed:51:09:6a:84:c5:da:6a:52:0f:ed:f1:9a: 37:fd:a4:51:19:66:6d:2f:e5:08:c7:4e:9e:be:e2:58:32:97: eb:91:61:1d:19:76:c2:de:ac:6a:8b:22:88:06:ae:e6:54:5a: 09:0d:8f:85:52:fb:e4:d5:12:94:11:f4:79:37:6c:28:72:dc: e9:b6:0f:d1:f5:4b:77:34:9b:0a:04:01:96:59:a2:d1:cb:c4: c3:3f:53:f9:f1:58:c4:d4:e5:b2:61:dd:d9:e1:7c:0a:c0:f8: c5:71:ba:cc:33:7f:45:2e:31:0e:10:dd:80:52:2b:bd:fd:17: 01:e8:dc:87:3b:ba:b0:0f:95:0e:4b:76:14:32:58:6e:22:9d: 0b:7e:ed:5d:16:39:5f:dd:07:2a:9b:0a:88:70:af:34:07:c1: 35:fd:d7:dd:de:c6:1b:26:d4:da:03:2d:69:6f:40:11:91:1f: 1c:d1:9e:3f:b9:94:1e:18:d0:36:79:d5:41:24:fe:01:02:ec: 4b:94:2f:07:a3:13:8d:d6:04:f9:2d:47:56:b6:16:5f:8f:af: 8f:87:da:6f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4eRG+5X5GNcMgHQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk NDQ5ZTlhZTktMzMyNS00Mzg5LWI0N2MtM2JkMGQ0Nzk4NmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSNYVAdcFNzKdu30PJhKU0EwGfPmJtX/8LEh kZ0HYiERa+jBd4vTCJesh+3ofde7lANSMu9UEGdQb76AzzPNT/6Ko7OcmP87uPr1 NGKdvXbcaghDklPMDXc8g/v3zc3IFtI4CO+D+ZapTBdEAqu9rwNsDencxjdtP/+b fUn4PPsGWNT1TxbKAjP/IkQg0Uz8zj+KA/6hlBcxWG2jI83m32J2npsv0ISsLOcq BS5j6DN7zq20JnFoa66sfj2ECJp2Iaxsv3sriOHKYZkyH9yPWy2yjJTLTLTRHkxR aHkxukohkX7+T5JOqmNnlbsm6ob6EnJ0Qk+JCYoaJb57yE0+DwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGo9FWBywrd+ei152xAq3s8z73HqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjMzZjhhNmUtNGEwYy0z ZDQzLWE2MGUtMDlhZmMxOGU2OWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBpNz3LhsDa3U5QnCFxmhNfWYKSgM9l19BDnF5OAce3C3gIILlXRKj+ n+1RCWqExdpqUg/t8Zo3/aRRGWZtL+UIx06evuJYMpfrkWEdGXbC3qxqiyKIBq7m VFoJDY+FUvvk1RKUEfR5N2woctzptg/R9Ut3NJsKBAGWWaLRy8TDP1P58VjE1OWy Yd3Z4XwKwPjFcbrMM39FLjEOEN2AUiu9/RcB6NyHO7qwD5UOS3YUMlhuIp0Lfu1d Fjlf3QcqmwqIcK80B8E1/dfd3sYbJtTaAy1pb0ARkR8c0Z4/uZQeGNA2edVBJP4B AuxLlC8HoxON1gT5LUdWthZfj6+Ph9pv -----END CERTIFICATE-----Generated at Sat Jun 13 13:33:01 2026 by rpki-client