$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85e3fff7-d936-3bec-a1b3-96a990145437.roa File: 85e3fff7-d936-3bec-a1b3-96a990145437.roa (raw, json) Hash identifier: 1rW4ExKyfJ+KS2iMRqpB0iE2ICi0wSv+Z3nC2QqI6Nw= Subject key identifier: 42:35:3F:94:17:B8:CB:A2:38:D2:1D:F3:95:BD:06:F2:54:14:0D:DF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DD8F0781F2120D6634E63B570 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85e3fff7-d936-3bec-a1b3-96a990145437.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 396587 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:78:1f:21:20:d6:63:4e:63:b5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=3c8b770e-5a68-4775-805d-3fa20d976366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:08:fe:2f:ba:cd:f7:93:75:e2:3d:63:e4:c4: a3:55:2d:ea:a9:20:9d:ee:28:95:52:b3:5b:ed:9e: a1:59:0c:96:32:e7:03:5d:a9:73:b5:4a:e8:c0:bc: b4:24:97:62:fa:fd:c2:97:2f:92:59:c1:52:63:8e: 3d:66:2a:b4:67:6f:51:c7:8a:93:6a:42:47:4d:47: 0b:77:cc:41:02:1f:64:aa:fd:bb:8f:72:cb:cc:e0: 41:0f:a9:98:8a:59:a3:53:b4:cd:f2:a3:a6:f4:17: 80:75:b3:b4:bc:7e:15:9a:ff:54:97:f3:f4:21:07: 45:06:ba:2f:ce:aa:d5:5b:95:c4:8a:75:ed:51:61: df:d5:1c:cb:c9:73:13:29:21:9a:dc:10:48:8b:78: 08:2c:36:5c:8b:71:47:c7:3c:5b:b2:0e:e7:63:54: cd:ae:7f:09:6b:6d:01:8a:ce:1d:de:bc:41:16:d2: cd:ca:29:78:fe:8d:5a:53:81:13:e4:85:5d:0c:ff: 88:c6:72:7a:32:c4:0a:e0:5a:16:12:84:14:1d:a9: 2f:77:21:9a:bb:38:4a:00:61:0b:f5:b9:99:db:2a: c3:a2:a8:82:7b:f3:12:33:cc:34:d3:a6:81:78:3f: 3c:64:aa:c1:80:36:d0:92:0b:ef:e6:dd:62:59:e8: 1e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:35:3F:94:17:B8:CB:A2:38:D2:1D:F3:95:BD:06:F2:54:14:0D:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85e3fff7-d936-3bec-a1b3-96a990145437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b3:47:7e:f8:1e:8b:ff:b3:0f:31:48:ab:68:f8:c6:90:2c: 8e:76:14:d6:11:fd:41:fb:92:c7:42:f9:48:c2:e0:bb:a1:1f: ed:20:0c:e2:b2:e1:36:92:49:eb:9b:d7:3d:6e:ac:ae:79:73: 56:80:6e:aa:bd:be:81:95:bf:d3:b0:07:80:1c:1b:3d:6f:f5: 15:15:c1:38:39:c9:72:44:d5:96:7d:f8:fd:4d:df:c5:e5:63: d2:78:74:ef:bf:44:95:61:47:4e:96:46:d2:72:82:77:b0:05: c4:3d:81:f2:f3:f2:96:a2:f1:18:a9:67:9e:44:12:73:b9:f3: 3f:4a:c7:60:e0:d5:d1:f4:95:29:bd:23:ac:f0:76:de:3a:2f: 56:5a:f4:74:21:0e:b0:0f:95:35:2e:58:02:14:f1:2c:0c:07: 3f:b7:9b:61:e5:8e:ea:3e:44:ae:6e:8a:1c:55:56:9f:bf:f1: a5:cc:89:41:c2:a2:1f:05:15:ac:7d:6f:60:19:91:70:f3:af: 06:cb:95:aa:c8:17:c0:81:68:a2:0f:d9:8b:64:4c:8b:07:7e: 62:3e:85:17:c6:38:f6:ec:d0:d3:7a:3d:69:f3:c4:4c:3f:08: 64:82:00:13:c4:55:34:95:7e:ea:a3:d2:5b:eb:a9:1b:64:47: 3b:30:ea:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8HgfISDWY05jtXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk M2M4Yjc3MGUtNWE2OC00Nzc1LTgwNWQtM2ZhMjBkOTc2MzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgj+L7rN95N14j1j5MSjVS3qqSCd7iiVUrNb 7Z6hWQyWMucDXalztUrowLy0JJdi+v3Cly+SWcFSY449Ziq0Z29Rx4qTakJHTUcL d8xBAh9kqv27j3LLzOBBD6mYilmjU7TN8qOm9BeAdbO0vH4Vmv9Ul/P0IQdFBrov zqrVW5XEinXtUWHf1RzLyXMTKSGa3BBIi3gILDZci3FHxzxbsg7nY1TNrn8Ja20B is4d3rxBFtLNyil4/o1aU4ET5IVdDP+IxnJ6MsQK4FoWEoQUHakvdyGauzhKAGEL 9bmZ2yrDoqiCe/MSM8w006aBeD88ZKrBgDbQkgvv5t1iWegekwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEI1P5QXuMuiONId85W9BvJUFA3fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODVlM2ZmZjctZDkzNi0z YmVjLWExYjMtOTZhOTkwMTQ1NDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOzR374Hov/sw8xSKto+MaQLI52FNYR/UH7ksdC+UjC4LuhH+0gDOKy 4TaSSeub1z1urK55c1aAbqq9voGVv9OwB4AcGz1v9RUVwTg5yXJE1ZZ9+P1N38Xl Y9J4dO+/RJVhR06WRtJygnewBcQ9gfLz8pai8RipZ55EEnO58z9Kx2Dg1dH0lSm9 I6zwdt46L1Za9HQhDrAPlTUuWAIU8SwMBz+3m2Hljuo+RK5uihxVVp+/8aXMiUHC oh8FFax9b2AZkXDzrwbLlarIF8CBaKIP2YtkTIsHfmI+hRfGOPbs0NN6PWnzxEw/ CGSCABPEVTSVfuqj0lvrqRtkRzsw6gA= -----END CERTIFICATE-----Generated at Sat Jun 13 16:01:38 2026 by rpki-client