$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa5da138-9d26-3e7e-94b6-ab99c4387134.roa File: aa5da138-9d26-3e7e-94b6-ab99c4387134.roa (raw, json) Hash identifier: ywf5ofXpq+F9b6rXFzwuM2rRRwJEl+JNnRRS2K/CsWE= Subject key identifier: CA:D5:2D:78:75:E9:8B:F6:90:B1:C6:D9:9D:1F:EC:F7:3F:FC:0B:A8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1E4471DA2F587D1B4047EB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa5da138-9d26-3e7e-94b6-ab99c4387134.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 396542 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:71:da:2f:58:7d:1b:40:47:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=bf386222-1bba-4abe-b9b3-680a1eaf0a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3d:d8:e9:22:3f:75:dc:57:77:ce:68:33:b3: b3:1a:92:57:30:65:db:00:3b:93:a5:91:09:0d:8c: 4b:9a:5b:69:91:27:e5:4d:d9:2b:d6:1f:79:b2:bb: 8b:3a:61:23:4f:d3:b2:f0:2c:d1:ea:06:06:e6:04: a2:37:e9:85:2b:df:c7:46:fd:9a:bc:99:09:ca:2a: c6:4f:6f:c3:c3:b6:d8:ec:2e:19:64:ad:9b:eb:59: da:49:8f:b0:b8:a9:cd:9e:b7:b7:88:2f:12:12:6e: ae:b5:0f:f0:91:96:e4:b4:f8:31:1b:86:05:92:82: d5:92:3a:0e:bb:a3:86:cf:36:d9:1d:4b:06:fa:56: a1:b7:37:c2:ac:9d:a8:08:c8:09:00:8e:2b:3a:9c: 04:05:c8:29:34:09:bd:ca:fe:d5:b7:44:28:dd:59: 5b:b5:e2:86:b6:bd:5d:e0:76:fd:e9:42:24:49:ff: df:1e:6d:99:60:13:18:cf:cf:68:ce:da:04:7e:4a: 64:46:0f:fd:82:5b:f0:5f:14:5e:25:23:42:6d:7d: 65:a7:12:c8:c8:8d:dd:d1:62:2f:62:6c:2c:93:90: be:f7:d3:88:c0:1d:77:6d:f4:71:3e:ec:aa:36:dd: d2:31:f7:92:85:eb:94:f7:98:fb:d8:34:9f:7f:05: f2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D5:2D:78:75:E9:8B:F6:90:B1:C6:D9:9D:1F:EC:F7:3F:FC:0B:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa5da138-9d26-3e7e-94b6-ab99c4387134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:50:1e:12:25:69:d1:da:58:33:5a:9b:1a:34:39:c1:f4:ef: 99:84:a9:79:e0:e6:f4:65:e3:69:91:3f:43:ca:73:de:13:64: 33:62:1c:fa:2a:37:2e:63:1c:35:88:32:73:23:f0:d9:01:4c: af:ef:39:c0:1c:c7:67:6e:42:db:0b:a6:9b:10:51:3a:1b:83: 54:85:0a:e4:e7:aa:37:4a:45:46:db:b5:e4:bd:e7:6d:9e:b1: 71:08:8e:04:06:5d:af:fb:b7:d9:bd:d5:f0:02:b8:48:c6:29: 32:54:48:d1:a3:40:5e:e4:f3:65:f9:cb:87:38:c2:6b:d1:c4: f8:fa:f5:1e:c3:10:d5:3c:ef:ec:8f:e5:48:5b:b0:ac:cf:a1: cf:9f:c7:36:a3:37:b6:ab:13:2e:44:f2:80:03:68:d2:b1:33: 0f:a0:6b:ac:f2:72:0a:48:f3:58:10:94:a5:25:7c:ec:6c:e0: b5:ec:84:97:a6:30:b5:c2:53:02:bf:16:35:29:15:00:2b:cd: ca:0a:23:3e:ac:60:27:2a:fa:2d:39:b8:ee:a6:31:9b:29:6c: 56:7b:c9:ff:d4:da:d6:b5:d0:35:66:72:72:27:09:af:00:db: 0b:ac:e9:bc:be:a5:2c:95:f6:d3:f0:61:a0:0a:98:49:d1:26: 45:9f:87:a3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4eRHHaL1h9G0BH64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk YmYzODYyMjItMWJiYS00YWJlLWI5YjMtNjgwYTFlYWYwYTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij3Y6SI/ddxXd85oM7OzGpJXMGXbADuTpZEJ DYxLmltpkSflTdkr1h95sruLOmEjT9Oy8CzR6gYG5gSiN+mFK9/HRv2avJkJyirG T2/Dw7bY7C4ZZK2b61naSY+wuKnNnre3iC8SEm6utQ/wkZbktPgxG4YFkoLVkjoO u6OGzzbZHUsG+lahtzfCrJ2oCMgJAI4rOpwEBcgpNAm9yv7Vt0Qo3VlbteKGtr1d 4Hb96UIkSf/fHm2ZYBMYz89oztoEfkpkRg/9glvwXxReJSNCbX1lpxLIyI3d0WIv Ymwsk5C+99OIwB13bfRxPuyqNt3SMfeSheuU95j72DSffwXyqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMrVLXh16Yv2kLHG2Z0f7Pc//AuoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWE1ZGExMzgtOWQyNi0z ZTdlLTk0YjYtYWI5OWM0Mzg3MTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAIUB4SJWnR2lgzWpsaNDnB9O+ZhKl54Ob0ZeNpkT9DynPeE2QzYhz6 KjcuYxw1iDJzI/DZAUyv7znAHMdnbkLbC6abEFE6G4NUhQrk56o3SkVG27Xkvedt nrFxCI4EBl2v+7fZvdXwArhIxikyVEjRo0Be5PNl+cuHOMJr0cT4+vUewxDVPO/s j+VIW7Csz6HPn8c2oze2qxMuRPKAA2jSsTMPoGus8nIKSPNYEJSlJXzsbOC17ISX pjC1wlMCvxY1KRUAK83KCiM+rGAnKvotObjupjGbKWxWe8n/1NrWtdA1ZnJyJwmv ANsLrOm8vqUslfbT8GGgCphJ0SZFn4ej -----END CERTIFICATE-----Generated at Sat Jun 13 14:04:38 2026 by rpki-client