$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ba9c099-d3ec-354f-8dee-210da4453ea1.roa File: 8ba9c099-d3ec-354f-8dee-210da4453ea1.roa (raw, json) Hash identifier: 0HABlVP+4HlDSiMGaywtbkIQCNhF79pmv09FGy2thwE= Subject key identifier: B0:75:C4:3F:04:CE:FC:94:05:B6:76:84:C6:1E:C3:30:D4:A6:40:CC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1E447672059942880D12C700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ba9c099-d3ec-354f-8dee-210da4453ea1.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 397205 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:76:72:05:99:42:88:0d:12:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=ed10b831-97e7-43ce-b4bc-ac8d094ed789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3c:7c:0b:8a:e4:06:69:c2:65:99:90:06:f7: 8a:e8:b2:72:97:e5:07:3f:a5:0a:fc:7f:43:e1:21: 7b:cc:63:69:73:04:77:70:f3:d1:db:81:1b:0b:4f: f1:b2:d0:c4:7c:e4:41:69:b8:0c:ec:94:83:18:a2: cf:90:c7:66:28:c1:e4:34:bc:36:d7:f4:bd:b3:1f: 3e:11:c1:3e:bb:f6:91:cc:74:fa:1b:9a:07:98:f1: cc:88:a5:5f:bc:33:ae:8c:bd:df:9f:a9:a9:f1:69: 1a:5d:4f:52:ed:4b:91:74:cc:d6:12:58:7b:a4:7e: 29:9d:8a:08:db:56:94:ed:4b:aa:e8:a8:03:5b:87: 53:5d:cd:fa:18:f2:d4:af:ff:c6:8a:e0:f9:9e:78: 85:c6:be:77:bd:83:0a:b5:eb:f3:fb:77:af:06:24: e5:84:cc:3e:87:9b:ab:6e:af:0a:23:a7:df:1a:7b: 99:b5:50:5f:88:98:73:78:ff:f5:9d:11:f3:6c:e5: 38:b9:30:99:25:c0:ba:f0:46:f5:a8:f5:7c:d2:ce: 36:ea:36:9b:7b:4d:87:cc:60:b1:3c:64:61:3b:76: 0c:bb:fe:51:d2:e9:6e:99:74:8b:0e:d6:80:06:85: bf:e4:93:3e:72:f7:cf:d2:7f:2b:24:9b:ad:63:1c: 6b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:75:C4:3F:04:CE:FC:94:05:B6:76:84:C6:1E:C3:30:D4:A6:40:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ba9c099-d3ec-354f-8dee-210da4453ea1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:fc:ae:7d:80:44:57:e6:79:c8:d4:a1:11:ff:9a:1b:64:39: 64:10:0c:c1:ed:3f:15:e0:58:08:3b:1e:d3:96:fd:14:20:de: f2:c5:85:9e:09:d0:83:40:99:76:b8:9e:9d:d8:93:4d:2e:6f: 12:12:0c:84:ee:26:06:18:89:f4:c8:d1:21:16:02:eb:14:49: ac:25:df:47:4c:c2:e6:20:3c:7d:0b:a5:8a:34:0d:b7:54:53: a2:b5:9c:f2:ed:cd:08:29:6b:39:1f:10:1c:44:aa:1a:26:44: 15:2a:f5:80:6f:f0:8b:67:9c:bb:60:88:7f:60:c5:7e:f1:9d: d4:a6:e6:37:79:9c:72:4d:b6:5a:ab:e4:84:29:66:c8:f2:7f: 96:ad:a8:76:a4:d4:df:4f:56:93:97:65:9b:d5:3a:ff:6b:1c: dc:97:5d:9c:2b:23:74:d0:cf:b4:96:54:5d:42:f0:58:a7:2d: fa:49:ae:91:5a:c1:94:c3:cb:2f:93:65:1a:99:e9:c3:ee:58: bc:fd:4b:86:4f:8b:cc:5f:40:6d:1c:95:41:04:a1:f3:93:d5: 8b:59:42:1f:b9:44:96:eb:6c:41:5e:d1:e1:14:6d:9f:33:f6: d9:46:cc:ff:b2:85:d1:fc:50:4a:b1:13:95:97:bc:d5:98:18: 68:a4:a4:36 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4eRHZyBZlCiA0SxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk ZWQxMGI4MzEtOTdlNy00M2NlLWI0YmMtYWM4ZDA5NGVkNzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTx8C4rkBmnCZZmQBveK6LJyl+UHP6UK/H9D 4SF7zGNpcwR3cPPR24EbC0/xstDEfORBabgM7JSDGKLPkMdmKMHkNLw21/S9sx8+ EcE+u/aRzHT6G5oHmPHMiKVfvDOujL3fn6mp8WkaXU9S7UuRdMzWElh7pH4pnYoI 21aU7Uuq6KgDW4dTXc36GPLUr//GiuD5nniFxr53vYMKtevz+3evBiTlhMw+h5ur bq8KI6ffGnuZtVBfiJhzeP/1nRHzbOU4uTCZJcC68Eb1qPV80s426jabe02HzGCx PGRhO3YMu/5R0ulumXSLDtaABoW/5JM+cvfP0n8rJJutYxxrIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLB1xD8EzvyUBbZ2hMYewzDUpkDMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGJhOWMwOTktZDNlYy0z NTRmLThkZWUtMjEwZGE0NDUzZWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBV/K59gERX5nnI1KER/5obZDlkEAzB7T8V4FgIOx7Tlv0UIN7yxYWe CdCDQJl2uJ6d2JNNLm8SEgyE7iYGGIn0yNEhFgLrFEmsJd9HTMLmIDx9C6WKNA23 VFOitZzy7c0IKWs5HxAcRKoaJkQVKvWAb/CLZ5y7YIh/YMV+8Z3UpuY3eZxyTbZa q+SEKWbI8n+Wrah2pNTfT1aTl2Wb1Tr/axzcl12cKyN00M+0llRdQvBYpy36Sa6R WsGUw8svk2UamenD7li8/UuGT4vMX0BtHJVBBKHzk9WLWUIfuUSW62xBXtHhFG2f M/bZRsz/soXR/FBKsROVl7zVmBhopKQ2 -----END CERTIFICATE-----Generated at Sat Jun 13 14:28:01 2026 by rpki-client