$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89dfc5b8-ee25-3f38-9835-da0ed0640577.roa File: 89dfc5b8-ee25-3f38-9835-da0ed0640577.roa (raw, json) Hash identifier: /Kng4F46plE0eIR0rrWFWqKiKLGOXoqpyfuuqCoV3NU= Subject key identifier: 2A:8E:EC:90:92:33:5F:C5:94:EF:37:4C:94:09:AA:64:D1:33:28:EA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DD8F0782B10046A8A14A10840 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89dfc5b8-ee25-3f38-9835-da0ed0640577.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 25485 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:78:2b:10:04:6a:8a:14:a1:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=6eefb6f0-5906-4c4c-ace2-26cf81e952e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e7:0c:1f:54:80:b4:3a:6d:78:0a:72:3c:3e: 2d:94:c0:a7:54:fd:d6:d5:5a:c1:8b:a1:42:1e:13: 7f:d2:91:ce:a9:99:53:9d:3f:78:6b:85:d0:ae:4f: 13:c7:a1:e1:fd:9c:98:b6:d3:48:d6:49:0c:6b:9d: 01:e3:fb:2f:54:be:16:a4:aa:75:52:15:0b:8f:a5: 7b:0a:02:d8:23:42:f4:63:53:79:e7:3a:54:db:c5: 0b:10:31:38:fb:0b:ff:03:f9:41:87:d5:85:6c:b9: 5c:3b:4f:d8:ca:c0:c2:16:70:25:6c:81:3c:41:16: bd:c0:f7:ac:59:4f:33:01:b4:30:f4:89:97:61:0b: f7:50:f3:e2:23:12:62:fb:3d:f8:2d:b9:58:03:15: b3:e4:ac:62:d5:4a:1d:6b:8c:60:2b:3b:43:01:38: a1:56:86:6d:5e:90:ef:55:0f:ba:8b:37:2e:a6:53: 6d:22:17:d9:cf:8e:ff:06:bc:f6:48:f8:db:b1:ae: 87:83:02:b1:02:25:5c:00:3e:df:49:a9:0c:13:90: fd:95:7d:f7:79:07:74:1b:af:60:ed:93:ce:bb:fc: 65:d7:3a:31:89:3d:90:ed:8a:9b:cc:76:e6:18:53: ac:a4:24:cf:fb:40:11:53:62:91:66:16:d8:4d:ee: c0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8E:EC:90:92:33:5F:C5:94:EF:37:4C:94:09:AA:64:D1:33:28:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89dfc5b8-ee25-3f38-9835-da0ed0640577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:34:f6:0f:f7:e1:a9:d5:3d:e4:83:d1:f6:a3:d3:f5:69:2e: 7f:56:9f:58:4b:20:34:06:53:24:b6:a2:92:b6:aa:56:92:cc: c1:ea:eb:b0:bd:ac:e0:f8:46:65:d4:b6:ec:4a:e1:9a:a8:64: 13:15:93:57:5b:b5:f7:f3:3a:fd:74:0a:4c:65:a0:14:1e:e7: 76:42:e4:e1:b7:83:62:6a:d1:48:25:e7:0c:06:bb:66:2d:cb: 94:26:09:02:0c:19:e0:38:88:55:25:57:bb:e8:2b:cb:20:8c: d3:a9:59:46:46:04:6f:6c:fa:db:29:1b:78:9f:f6:7e:fc:c0: 63:70:dc:87:28:ab:b8:32:73:44:87:2f:5d:75:51:7b:ca:48: fa:52:a4:61:04:37:03:01:a4:5b:83:2b:86:77:2b:5d:24:a6: 9f:0e:9d:32:42:eb:84:a8:60:97:03:37:0d:30:d4:77:78:43: d3:a2:16:7f:9f:27:32:80:c4:dd:5a:36:18:d5:0b:31:ac:a0: d2:e2:1f:31:e5:78:90:62:1a:2b:ff:85:d2:c8:32:3a:f4:fd: 43:ca:9f:fb:03:ae:60:72:e2:ed:66:db:f5:82:d0:d2:44:f7: 97:27:4c:87:19:87:6f:56:8e:51:c7:d7:ca:59:32:5d:e8:47: a1:19:10:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8HgrEARqihShCEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk NmVlZmI2ZjAtNTkwNi00YzRjLWFjZTItMjZjZjgxZTk1MmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuecMH1SAtDpteApyPD4tlMCnVP3W1VrBi6FC HhN/0pHOqZlTnT94a4XQrk8Tx6Hh/ZyYttNI1kkMa50B4/svVL4WpKp1UhULj6V7 CgLYI0L0Y1N55zpU28ULEDE4+wv/A/lBh9WFbLlcO0/YysDCFnAlbIE8QRa9wPes WU8zAbQw9ImXYQv3UPPiIxJi+z34LblYAxWz5Kxi1Uoda4xgKztDATihVoZtXpDv VQ+6izcuplNtIhfZz47/Brz2SPjbsa6HgwKxAiVcAD7fSakME5D9lX33eQd0G69g 7ZPOu/xl1zoxiT2Q7YqbzHbmGFOspCTP+0ARU2KRZhbYTe7APwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqO7JCSM1/FlO83TJQJqmTRMyjqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODlkZmM1YjgtZWUyNS0z ZjM4LTk4MzUtZGEwZWQwNjQwNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAk09g/34anVPeSD0faj0/VpLn9Wn1hLIDQGUyS2opK2qlaSzMHq67C9 rOD4RmXUtuxK4ZqoZBMVk1dbtffzOv10CkxloBQe53ZC5OG3g2Jq0Ugl5wwGu2Yt y5QmCQIMGeA4iFUlV7voK8sgjNOpWUZGBG9s+tspG3if9n78wGNw3Icoq7gyc0SH L111UXvKSPpSpGEENwMBpFuDK4Z3K10kpp8OnTJC64SoYJcDNw0w1Hd4Q9OiFn+f JzKAxN1aNhjVCzGsoNLiHzHleJBiGiv/hdLIMjr0/UPKn/sDrmBy4u1m2/WC0NJE 95cnTIcZh29WjlHH18pZMl3oR6EZENo= -----END CERTIFICATE-----Generated at Sat Jun 13 17:19:46 2026 by rpki-client