$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8601d6b0-277f-3107-bcc4-c8b1dee37989.roa File: 8601d6b0-277f-3107-bcc4-c8b1dee37989.roa (raw, json) Hash identifier: ogxH55a/p2+LEVsnQiMLSL8zcozBVMbza+v1bCC3bJU= Subject key identifier: D0:A1:6E:E3:64:EC:B6:8B:20:9D:E3:05:4C:C3:17:B0:79:7F:2D:65 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1E44756B1A871C20E08A5500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8601d6b0-277f-3107-bcc4-c8b1dee37989.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 396560 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:75:6b:1a:87:1c:20:e0:8a:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=e6cf37dd-ddc8-42d8-983a-1a9002821a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4a:d5:76:e6:3a:38:59:ad:df:72:93:c8:ea: 85:8f:54:0a:f8:0b:97:cc:2f:69:5b:7e:9f:0a:07: 31:d6:6e:7b:f1:53:d7:fc:d9:a0:f5:1b:3b:6c:7c: 34:1d:92:e4:e5:34:28:c9:dc:54:50:89:15:c5:d8: 7c:b4:f5:0f:d6:71:ac:1c:d1:b7:fe:2b:ca:d8:56: 87:de:17:0f:1f:e0:63:e6:d1:2b:f9:53:9a:32:7e: 14:9b:fc:59:04:47:af:b2:9c:e9:e7:7d:55:6e:c6: 40:28:3e:39:39:cd:b9:10:84:33:c6:a9:eb:7b:59: c8:c0:be:e6:40:b9:f3:d3:35:29:1a:77:85:a0:ed: be:80:80:cb:9e:1c:3b:99:b4:c3:ff:9f:7c:5e:9b: a5:ae:63:41:6d:f3:53:ca:e0:3e:f4:ab:73:16:ed: ab:6a:30:d9:44:36:04:a8:3f:e8:fa:65:47:45:92: be:5d:f0:79:7c:91:72:4e:6e:01:19:69:bd:26:fe: 21:f5:53:91:4d:05:26:9e:18:25:bd:07:fa:bb:49: ff:0a:5f:5d:e0:cd:56:ea:78:02:bb:7c:a0:c2:2b: 39:3c:27:1f:08:b1:01:85:a1:ed:ec:89:92:4a:57: 10:13:a1:ac:dc:44:12:f0:ee:0d:27:bb:91:9d:d1: 08:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A1:6E:E3:64:EC:B6:8B:20:9D:E3:05:4C:C3:17:B0:79:7F:2D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8601d6b0-277f-3107-bcc4-c8b1dee37989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:15:26:28:c5:79:ed:64:e5:4b:4b:60:58:a6:0b:78:62:1d: 18:00:73:5c:5c:54:72:11:e5:d1:1c:13:ab:26:da:83:b4:38: d4:1f:5f:3f:4c:44:6e:40:89:9f:dd:12:85:b3:54:99:ec:b4: 41:1d:02:70:a0:1d:c8:7f:ce:bb:38:55:b2:a6:20:18:05:3f: a7:71:9e:d9:91:51:c9:d9:9d:68:19:e9:f7:3f:c0:be:19:9b: eb:b1:fa:1b:5f:a3:3e:df:94:bf:33:1f:c9:67:a4:50:ab:9d: df:8a:73:9f:2a:3d:88:41:45:cf:57:76:52:5b:41:a4:53:e2: e1:66:f8:40:7e:f8:79:08:e3:d7:de:96:17:18:76:45:08:2a: b9:aa:c8:70:c1:85:d8:6a:91:bd:7a:b5:aa:db:69:36:19:78: e9:b3:7e:19:86:cb:a8:5a:ef:e5:9c:25:93:bf:03:fd:18:91: 57:77:ba:53:b7:0c:76:32:18:33:07:fa:d1:98:d7:f0:6b:35: ce:b6:73:dd:c7:f3:30:f8:ac:5e:ef:b4:78:ed:95:0d:ff:ee: c6:6a:83:86:e4:91:e7:37:2c:96:dc:f9:75:b6:c1:90:5f:7b: 4c:85:0d:26:b3:b2:fe:4b:f1:3d:6c:73:cf:cf:88:98:64:b4: d2:03:d3:39 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4eRHVrGoccIOCKVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk ZTZjZjM3ZGQtZGRjOC00MmQ4LTk4M2EtMWE5MDAyODIxYTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkrVduY6OFmt33KTyOqFj1QK+AuXzC9pW36f Cgcx1m578VPX/Nmg9Rs7bHw0HZLk5TQoydxUUIkVxdh8tPUP1nGsHNG3/ivK2FaH 3hcPH+Bj5tEr+VOaMn4Um/xZBEevspzp531VbsZAKD45Oc25EIQzxqnre1nIwL7m QLnz0zUpGneFoO2+gIDLnhw7mbTD/598XpulrmNBbfNTyuA+9KtzFu2rajDZRDYE qD/o+mVHRZK+XfB5fJFyTm4BGWm9Jv4h9VORTQUmnhglvQf6u0n/Cl9d4M1W6ngC u3ygwis5PCcfCLEBhaHt7ImSSlcQE6Gs3EQS8O4NJ7uRndEIuwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNChbuNk7LaLIJ3jBUzDF7B5fy1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODYwMWQ2YjAtMjc3Zi0z MTA3LWJjYzQtYzhiMWRlZTM3OTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA/FSYoxXntZOVLS2BYpgt4Yh0YAHNcXFRyEeXRHBOrJtqDtDjUH18/ TERuQImf3RKFs1SZ7LRBHQJwoB3If867OFWypiAYBT+ncZ7ZkVHJ2Z1oGen3P8C+ GZvrsfobX6M+35S/Mx/JZ6RQq53finOfKj2IQUXPV3ZSW0GkU+LhZvhAfvh5COPX 3pYXGHZFCCq5qshwwYXYapG9erWq22k2GXjps34ZhsuoWu/lnCWTvwP9GJFXd7pT twx2MhgzB/rRmNfwazXOtnPdx/Mw+Kxe77R47ZUN/+7GaoOG5JHnNyyW3Pl1tsGQ X3tMhQ0ms7L+S/E9bHPPz4iYZLTSA9M5 -----END CERTIFICATE-----Generated at Sat Jun 13 13:59:28 2026 by rpki-client