$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/794ce2e0-ed66-3446-a9c7-96a05841af1c.roa File: 794ce2e0-ed66-3446-a9c7-96a05841af1c.roa (raw, json) Hash identifier: SQp5jMf+sZMQXwkYClVp16H5Iq726Olc2inSX2TFLhk= Subject key identifier: 17:6D:A8:46:06:C0:D6:00:09:A2:42:6D:E1:39:2E:65:F6:8F:C6:30 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DD8F07951FCF7F23429B26580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/794ce2e0-ed66-3446-a9c7-96a05841af1c.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 20362 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:79:51:fc:f7:f2:34:29:b2:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=8ac32126-66f9-415c-8126-aeaf8f85b2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:64:0f:47:3c:64:b6:49:db:11:7f:5d:7b: a5:32:e7:a1:ab:ac:8b:33:e5:f1:f9:cf:4a:c8:4a: 89:2f:94:41:31:64:54:1c:2c:5c:da:4c:bc:00:e2: 67:c1:ac:50:69:96:a6:8e:ed:8a:4d:a4:bb:fb:f2: cb:db:8e:46:b8:e8:ae:e5:4b:f1:21:ca:3c:de:37: 2b:18:3f:25:20:d4:32:c6:6c:1a:80:23:77:92:80: 11:e2:81:16:91:3e:a6:64:dd:a8:77:5a:89:35:b5: f3:c8:34:e2:02:12:46:6f:97:93:ef:a0:c3:12:65: f0:0d:c1:db:bf:d5:e2:4a:19:4e:95:6e:7d:54:f0: 02:42:82:ae:9f:b6:b3:0e:c9:60:a2:32:40:5b:7a: d5:e5:aa:1e:0e:30:0c:81:e9:cf:53:04:3b:47:ab: 09:66:26:50:d3:80:9d:69:21:ef:96:aa:54:10:9e: be:40:f0:53:8d:49:e0:55:63:fe:de:ee:b7:50:3d: 1a:a4:d3:e6:36:44:44:f8:f4:47:e3:c3:0c:a4:9f: be:79:7e:91:7e:33:4c:17:df:99:0d:62:5e:cd:af: 78:83:06:c3:06:69:38:df:34:ea:01:e0:0a:fd:7e: bf:e6:84:b1:8b:64:75:1c:50:50:0a:15:80:4f:d3: 0a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6D:A8:46:06:C0:D6:00:09:A2:42:6D:E1:39:2E:65:F6:8F:C6:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/794ce2e0-ed66-3446-a9c7-96a05841af1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:52:3e:e2:6b:ba:a3:d6:8d:30:df:64:f3:7a:c8:89:8b:10: ec:ab:86:91:41:3d:43:c8:1e:8f:b6:61:3e:df:f5:e0:f9:67: 88:ac:a5:5f:c9:13:95:fd:9b:08:21:54:e0:b3:25:60:72:a1: f5:3d:df:93:a1:ef:6e:b2:73:af:db:8f:67:ed:44:32:db:6d: fd:a4:6b:81:cd:3d:b9:1c:eb:4f:6b:98:15:ce:ca:62:0e:a0: 35:51:fb:a3:03:94:a0:96:5e:df:47:ce:25:92:67:9b:f3:78: ce:2b:18:44:59:03:a8:78:05:90:20:4e:53:bf:1c:79:e4:96: bd:93:b7:33:fa:8d:3d:82:a0:a9:7e:c0:36:50:4d:fa:6d:aa: 8f:d6:ee:d3:0c:75:8e:99:75:cc:9d:b4:a7:0a:49:0a:39:4b: f8:58:33:2f:2b:b3:c1:53:9c:58:cb:9d:cb:ca:22:b8:bd:c0: 2e:9f:dc:d0:a1:8f:37:00:f7:ce:d1:a1:85:a8:f9:f0:8e:4b: 8d:f2:41:52:cf:57:f9:68:eb:5b:42:69:4f:64:22:af:7e:ed: 6f:7e:3b:f9:6a:5f:ef:de:2e:d0:da:ff:e2:92:8d:3e:b7:10: 9b:d7:81:fb:23:3a:0e:9e:53:1e:f7:6b:42:bf:6f:4d:08:9c: 6d:70:53:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8HlR/PfyNCmyZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk OGFjMzIxMjYtNjZmOS00MTVjLTgxMjYtYWVhZjhmODViMmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwadkD0c8ZLZJ2xF/XXulMuehq6yLM+Xx+c9K yEqJL5RBMWRUHCxc2ky8AOJnwaxQaZamju2KTaS7+/LL245GuOiu5UvxIco83jcr GD8lINQyxmwagCN3koAR4oEWkT6mZN2od1qJNbXzyDTiAhJGb5eT76DDEmXwDcHb v9XiShlOlW59VPACQoKun7azDslgojJAW3rV5aoeDjAMgenPUwQ7R6sJZiZQ04Cd aSHvlqpUEJ6+QPBTjUngVWP+3u63UD0apNPmNkRE+PRH48MMpJ++eX6RfjNMF9+Z DWJeza94gwbDBmk43zTqAeAK/X6/5oSxi2R1HFBQChWAT9MKPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdtqEYGwNYACaJCbeE5LmX2j8YwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzk0Y2UyZTAtZWQ2Ni0z NDQ2LWE5YzctOTZhMDU4NDFhZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtSPuJruqPWjTDfZPN6yImLEOyrhpFBPUPIHo+2YT7f9eD5Z4ispV/J E5X9mwghVOCzJWByofU935Oh726yc6/bj2ftRDLbbf2ka4HNPbkc609rmBXOymIO oDVR+6MDlKCWXt9HziWSZ5vzeM4rGERZA6h4BZAgTlO/HHnklr2TtzP6jT2CoKl+ wDZQTfptqo/W7tMMdY6ZdcydtKcKSQo5S/hYMy8rs8FTnFjLncvKIri9wC6f3NCh jzcA987RoYWo+fCOS43yQVLPV/lo61tCaU9kIq9+7W9+O/lqX+/eLtDa/+KSjT63 EJvXgfsjOg6eUx73a0K/b00InG1wUxE= -----END CERTIFICATE-----Generated at Sat Jun 13 14:32:34 2026 by rpki-client