$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/83212d25-ef13-331c-ab6e-b9a5a0dfea2a.roa File: 83212d25-ef13-331c-ab6e-b9a5a0dfea2a.roa (raw, json) Hash identifier: XdJFA+wLFHfWs4TBXvnSDmx2r81w9crO9RrYpOfGO7Y= Subject key identifier: 11:82:D0:82:1D:2E:47:E4:6A:42:2B:5C:DC:B7:C5:35:C0:92:F2:6F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1E446DA84414155AF3A827C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/83212d25-ef13-331c-ab6e-b9a5a0dfea2a.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 396574 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:6d:a8:44:14:15:5a:f3:a8:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=7216a4d0-43d3-4125-8531-c2587e9ab930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dd:ef:16:86:a6:1b:c3:58:74:e5:7d:1c:40: 25:34:0c:6c:48:cb:e7:b2:c5:a3:9f:ac:5a:54:25: 12:8d:d7:cf:d9:75:15:fc:6b:bc:56:7e:92:82:4f: 85:71:88:ab:0e:2c:5f:ff:09:fd:85:83:cf:ee:4a: 5c:58:69:be:50:43:e4:48:cc:d6:9e:1f:8d:6c:6b: 7a:36:23:3c:1f:8a:8d:d4:bc:37:64:9f:ad:cf:5e: 57:15:58:ac:30:d6:6e:00:a6:56:e0:9e:21:73:f2: c3:ce:80:3a:1c:96:c9:45:9c:8d:a9:87:4e:f0:02: 05:3c:38:ba:c3:5d:14:9f:92:e2:05:e0:e6:06:f4: d7:ee:82:5b:bc:37:ad:11:93:9d:f0:d8:99:e5:6f: 48:32:bc:f7:af:ee:0d:a5:83:4d:c7:d1:64:da:52: 8a:87:a9:da:7d:6a:40:b5:52:41:6d:2b:72:a6:5d: e1:18:c1:b0:e4:45:40:40:7a:ef:32:53:c9:40:29: 84:62:d5:77:7f:bb:94:ce:07:db:fb:b1:8b:79:ab: 52:65:5c:7c:df:d5:87:a6:86:9f:6c:d5:58:32:29: 74:68:86:45:e0:26:ae:42:0b:5d:29:d6:90:d9:92: 8e:eb:52:13:10:1c:62:08:48:6c:59:eb:6f:16:26: 90:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:82:D0:82:1D:2E:47:E4:6A:42:2B:5C:DC:B7:C5:35:C0:92:F2:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/83212d25-ef13-331c-ab6e-b9a5a0dfea2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:5e:f8:ae:1c:5e:76:b4:72:64:1b:36:40:bc:c1:fc:ca:6c: fc:e9:ae:9a:34:46:80:f2:7f:0e:81:ae:ee:41:16:5c:d0:97: e7:9a:eb:62:57:f5:4e:21:e6:1a:b9:69:7d:ee:8f:67:47:a4: 43:0b:37:67:43:4e:07:79:d0:56:22:e8:da:4e:ba:b2:0c:6c: 27:64:2a:7e:67:a0:10:d5:88:bd:62:6c:f4:27:37:b7:22:4a: fa:d3:2f:32:b7:2b:6a:e6:6f:a3:71:2f:bb:4b:10:34:30:7e: 03:c0:1a:a8:46:57:a0:c1:aa:1a:1a:56:bd:4e:1f:0d:30:ad: 73:79:2d:d3:9d:d5:be:23:00:09:16:cb:4e:1a:96:81:ef:ac: b9:6c:03:03:be:d9:19:95:69:e6:66:5a:47:fa:ba:65:86:32: e6:fe:11:64:3b:c1:e8:35:43:b2:b9:ae:07:87:16:18:c8:09: a2:d5:ae:27:b5:1e:3d:1f:0c:2f:a3:e5:42:55:93:e7:19:ff: 88:57:4b:e3:c1:fd:7e:c0:41:8b:72:0d:1c:a4:3c:be:bf:3a: dd:bc:6f:8f:b4:62:bb:ed:86:0c:b0:27:30:ce:14:c9:7f:63: 77:84:31:93:22:46:4b:02:ed:60:08:04:98:d2:5f:8e:f0:9a: 2c:73:65:35 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4eRG2oRBQVWvOoJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk NzIxNmE0ZDAtNDNkMy00MTI1LTg1MzEtYzI1ODdlOWFiOTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN3vFoamG8NYdOV9HEAlNAxsSMvnssWjn6xa VCUSjdfP2XUV/Gu8Vn6Sgk+FcYirDixf/wn9hYPP7kpcWGm+UEPkSMzWnh+NbGt6 NiM8H4qN1Lw3ZJ+tz15XFVisMNZuAKZW4J4hc/LDzoA6HJbJRZyNqYdO8AIFPDi6 w10Un5LiBeDmBvTX7oJbvDetEZOd8NiZ5W9IMrz3r+4NpYNNx9Fk2lKKh6nafWpA tVJBbStypl3hGMGw5EVAQHrvMlPJQCmEYtV3f7uUzgfb+7GLeatSZVx839WHpoaf bNVYMil0aIZF4CauQgtdKdaQ2ZKO61ITEBxiCEhsWetvFiaQgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBGC0IIdLkfkakIrXNy3xTXAkvJvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODMyMTJkMjUtZWYxMy0z MzFjLWFiNmUtYjlhNWEwZGZlYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAxXviuHF52tHJkGzZAvMH8ymz86a6aNEaA8n8Oga7uQRZc0Jfnmuti V/VOIeYauWl97o9nR6RDCzdnQ04HedBWIujaTrqyDGwnZCp+Z6AQ1Yi9Ymz0Jze3 Ikr60y8ytytq5m+jcS+7SxA0MH4DwBqoRlegwaoaGla9Th8NMK1zeS3TndW+IwAJ FstOGpaB76y5bAMDvtkZlWnmZlpH+rplhjLm/hFkO8HoNUOyua4HhxYYyAmi1a4n tR49Hwwvo+VCVZPnGf+IV0vjwf1+wEGLcg0cpDy+vzrdvG+PtGK77YYMsCcwzhTJ f2N3hDGTIkZLAu1gCASY0l+O8Josc2U1 -----END CERTIFICATE-----Generated at Sat Jun 13 14:38:34 2026 by rpki-client