$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531e496-8f60-365a-9f71-97f429bea4f3.roa File: a531e496-8f60-365a-9f71-97f429bea4f3.roa (raw, json) Hash identifier: iXCtuEUp/zEbnaBjyS6utB4TFiugSd2VCuPrfxqbO0M= Subject key identifier: 12:E7:E7:CB:AC:04:0E:53:79:21:7D:49:F8:54:74:D6:9F:E1:95:52 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1E44703F47835C0F3ED4EE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531e496-8f60-365a-9f71-97f429bea4f3.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 40717 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:70:3f:47:83:5c:0f:3e:d4:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=349dc006-043b-40cf-901b-be1e4b1a60fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f5:ed:60:e4:9c:95:3d:48:06:bf:e2:01:8f: 88:0f:a2:3c:08:34:14:a3:72:a5:d0:6b:0a:1b:b1: ae:2e:1b:09:4a:30:02:48:66:ed:ca:a4:ea:12:e7: 37:bc:de:2c:c7:db:7a:5e:67:62:fa:70:f6:19:b3: e3:58:28:3f:d3:58:40:41:59:3b:e7:77:e8:58:f3: f2:c9:84:10:c8:47:5a:4c:96:1d:96:a8:9d:61:a3: cc:7d:5f:c6:6f:50:a5:a8:11:61:25:44:b4:34:89: 71:66:d4:1d:19:52:ea:b0:03:ef:b5:5d:30:86:b5: a9:5b:7b:97:bb:ef:2c:0c:84:97:57:d1:6d:f0:a7: dc:3c:a0:e2:9f:73:ec:f0:8b:9e:c6:43:7d:51:12: c9:3b:1d:e9:53:19:b1:7c:2b:b2:3b:d3:c0:b1:47: 82:52:c8:6f:bc:df:6f:25:2a:fa:6f:de:29:76:85: fd:17:b7:dd:72:c8:65:39:67:e6:6a:f9:75:79:4b: 2d:e5:44:55:6c:ab:62:80:e7:fd:af:f1:9e:11:34: c2:12:86:9c:b0:49:16:5e:57:d8:33:e3:66:11:a4: d6:58:5e:47:44:d0:9b:91:a9:23:f1:0f:37:89:bb: b6:ed:d6:0f:aa:d8:19:de:0e:8e:fc:cf:57:3f:ca: ac:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E7:E7:CB:AC:04:0E:53:79:21:7D:49:F8:54:74:D6:9F:E1:95:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531e496-8f60-365a-9f71-97f429bea4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:85:f2:33:1d:2a:b6:4d:1a:d9:cb:c7:ce:f8:ef:d8:a8:19: 50:5b:40:04:da:91:56:b0:7f:87:a1:37:29:56:35:ba:2f:c1: 95:27:51:8c:01:b7:eb:89:1f:45:f2:30:83:7a:11:c6:49:88: 5d:a0:13:7b:dc:77:81:79:d7:2d:4b:04:27:0e:a0:d3:bd:fc: 7d:7a:6b:6d:fe:ce:a8:ce:b3:b4:fd:47:bc:47:a8:0c:0f:3e: 2e:77:ed:75:07:d0:4e:d7:4d:d0:50:67:b2:66:e4:d4:92:77: 0f:76:9b:fe:4c:52:71:8f:fb:19:72:7e:52:14:5d:3a:32:08: 69:85:03:f5:e8:d0:b3:b7:2e:da:28:94:0d:88:df:38:f9:21: 0e:a5:2d:04:8d:72:8d:6e:2b:4e:80:ba:fc:ab:d3:1a:87:9e: 01:4a:be:70:15:62:04:6a:90:1d:96:e9:31:3b:4b:fc:7f:05: 4a:a7:da:23:3f:5e:70:66:f4:45:c5:c5:c5:e2:07:c8:86:55: 13:7f:9c:e6:8a:9c:39:e1:b3:72:47:e9:26:bb:5f:42:ef:ab: 03:d1:6d:35:35:91:80:cb:e1:a1:8f:e4:ea:ac:2d:1e:d3:d2: c2:01:2a:ec:c4:74:d6:ea:f2:6e:2e:7a:3d:43:9a:87:8a:46: b7:53:af:74 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4eRHA/R4NcDz7U7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk MzQ5ZGMwMDYtMDQzYi00MGNmLTkwMWItYmUxZTRiMWE2MGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/XtYOSclT1IBr/iAY+ID6I8CDQUo3Kl0GsK G7GuLhsJSjACSGbtyqTqEuc3vN4sx9t6Xmdi+nD2GbPjWCg/01hAQVk753foWPPy yYQQyEdaTJYdlqidYaPMfV/Gb1ClqBFhJUS0NIlxZtQdGVLqsAPvtV0whrWpW3uX u+8sDISXV9Ft8KfcPKDin3Ps8IuexkN9URLJOx3pUxmxfCuyO9PAsUeCUshvvN9v JSr6b94pdoX9F7fdcshlOWfmavl1eUst5URVbKtigOf9r/GeETTCEoacsEkWXlfY M+NmEaTWWF5HRNCbkakj8Q83ibu27dYPqtgZ3g6O/M9XP8qsqwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBLn58usBA5TeSF9SfhUdNaf4ZVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTUzMWU0OTYtOGY2MC0z NjVhLTlmNzEtOTdmNDI5YmVhNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBShfIzHSq2TRrZy8fO+O/YqBlQW0AE2pFWsH+HoTcpVjW6L8GVJ1GM AbfriR9F8jCDehHGSYhdoBN73HeBedctSwQnDqDTvfx9emtt/s6ozrO0/Ue8R6gM Dz4ud+11B9BO103QUGeyZuTUkncPdpv+TFJxj/sZcn5SFF06MghphQP16NCzty7a KJQNiN84+SEOpS0EjXKNbitOgLr8q9Mah54BSr5wFWIEapAdlukxO0v8fwVKp9oj P15wZvRFxcXF4gfIhlUTf5zmipw54bNyR+kmu19C76sD0W01NZGAy+Ghj+TqrC0e 09LCASrsxHTW6vJuLno9Q5qHika3U690 -----END CERTIFICATE-----Generated at Sat Jun 13 14:38:57 2026 by rpki-client