$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac8b9d2f-71c6-3041-b802-43e34e7a8e49.roa File: ac8b9d2f-71c6-3041-b802-43e34e7a8e49.roa (raw, json) Hash identifier: xVcjCLozmqsBpoj0NJtyzg4ALT+CRw9Olzxx/DmJGZQ= Subject key identifier: A6:14:0D:0D:54:CF:3B:07:13:F1:E8:97:A7:CA:65:4E:AA:D4:F6:06 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DD8F07CADBF4A8C795199FD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac8b9d2f-71c6-3041-b802-43e34e7a8e49.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 397209 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:7c:ad:bf:4a:8c:79:51:99:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=f4abaaa1-c59b-481b-8061-3538f74f1c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:38:73:3b:22:5f:28:23:00:07:64:1a:12:97: b4:dd:0d:ef:7e:84:6a:4f:ac:f3:67:d1:81:1d:0e: 4a:bb:1d:ef:4f:5d:8f:c7:7c:5f:fc:df:8f:14:c7: ae:09:6e:87:26:c3:96:58:dc:a9:5d:95:60:a3:30: 92:03:b0:21:6f:f5:b5:a4:bc:33:e3:c6:ac:f9:65: 19:2d:0e:99:75:e2:67:0a:4a:19:5b:1a:78:2d:a8: 5f:27:27:75:76:f5:6c:15:10:af:24:d3:17:ef:4f: 7b:5a:57:e1:a0:cd:d4:ff:ad:d8:e3:1c:eb:a2:2a: fd:79:bf:6f:ab:10:58:04:68:47:39:12:f0:48:ce: 59:78:28:61:d6:81:1e:bc:6d:2f:75:e1:88:fe:6a: ca:55:08:ed:c7:0c:bf:1f:95:e2:dc:3e:81:34:31: 17:9b:a6:33:e2:4b:fc:6a:b4:e6:34:b3:c8:d3:98: 81:be:70:c0:73:74:2f:0f:f0:c8:8f:45:c8:84:a4: 33:b8:83:73:e6:08:7e:d1:e1:ce:f0:22:ef:e8:91: 34:52:38:8d:ef:ba:ab:0e:73:70:c4:df:5f:fe:b0: e9:f4:9d:05:7b:c0:24:35:82:a1:7b:d9:84:d6:58: e8:14:e4:00:dd:0e:f8:cb:5c:c6:d3:4a:4f:dd:c3: 00:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:14:0D:0D:54:CF:3B:07:13:F1:E8:97:A7:CA:65:4E:AA:D4:F6:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac8b9d2f-71c6-3041-b802-43e34e7a8e49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:17:ff:47:55:f0:0f:89:6a:1e:2b:05:41:cf:9c:6a:ee:9c: b6:05:f0:02:26:ed:32:2d:e9:be:e2:c8:49:01:c7:7c:c3:ef: 56:c8:8c:c8:0d:b1:4e:d5:59:e2:05:c0:62:92:9f:7e:61:77: 28:55:d4:18:3f:d9:0e:e6:15:aa:28:b6:a9:28:4c:3c:94:43: 50:4d:4b:b9:8f:71:23:a8:ce:7f:13:33:73:56:47:a3:af:93: a3:af:3f:c3:33:f0:59:09:f4:b8:7d:18:10:dc:5b:d6:b9:31: c1:b1:ff:d5:2e:e7:a1:af:cb:f7:2e:bf:41:21:8c:da:51:54: 92:2e:6b:a7:be:c4:a2:42:79:21:3c:20:c7:e1:7f:a6:0b:c3: 42:f7:f6:01:35:36:ae:c1:99:71:0c:6b:d9:8c:c2:17:bf:fb: bd:f0:35:b8:e6:f5:6d:2f:dd:b9:a0:7f:1e:9e:ad:c8:0c:0d: 0d:d1:60:4b:15:e3:4c:c8:ef:e6:af:ac:8c:99:fd:df:de:f1: 36:55:da:b5:97:8b:92:d7:fe:eb:6a:36:63:0b:0c:21:55:bf: 75:d5:ba:cc:1d:89:05:19:64:75:d8:10:68:36:b6:49:f1:cd: a7:4c:04:c2:61:27:53:56:e6:79:19:91:a4:9d:14:05:87:10: 0a:21:96:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8Hytv0qMeVGZ/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk ZjRhYmFhYTEtYzU5Yi00ODFiLTgwNjEtMzUzOGY3NGYxYzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsThzOyJfKCMAB2QaEpe03Q3vfoRqT6zzZ9GB HQ5Kux3vT12Px3xf/N+PFMeuCW6HJsOWWNypXZVgozCSA7Ahb/W1pLwz48as+WUZ LQ6ZdeJnCkoZWxp4LahfJyd1dvVsFRCvJNMX7097WlfhoM3U/63Y4xzroir9eb9v qxBYBGhHORLwSM5ZeChh1oEevG0vdeGI/mrKVQjtxwy/H5Xi3D6BNDEXm6Yz4kv8 arTmNLPI05iBvnDAc3QvD/DIj0XIhKQzuINz5gh+0eHO8CLv6JE0UjiN77qrDnNw xN9f/rDp9J0Fe8AkNYKhe9mE1ljoFOQA3Q74y1zG00pP3cMA2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYUDQ1UzzsHE/Hol6fKZU6q1PYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWM4YjlkMmYtNzFjNi0z MDQxLWI4MDItNDNlMzRlN2E4ZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYX/0dV8A+Jah4rBUHPnGrunLYF8AIm7TIt6b7iyEkBx3zD71bIjMgN sU7VWeIFwGKSn35hdyhV1Bg/2Q7mFaootqkoTDyUQ1BNS7mPcSOozn8TM3NWR6Ov k6OvP8Mz8FkJ9Lh9GBDcW9a5McGx/9Uu56Gvy/cuv0EhjNpRVJIua6e+xKJCeSE8 IMfhf6YLw0L39gE1Nq7BmXEMa9mMwhe/+73wNbjm9W0v3bmgfx6ercgMDQ3RYEsV 40zI7+avrIyZ/d/e8TZV2rWXi5LX/utqNmMLDCFVv3XVuswdiQUZZHXYEGg2tknx zadMBMJhJ1NW5nkZkaSdFAWHEAohlkc= -----END CERTIFICATE-----Generated at Sat Jun 13 15:47:56 2026 by rpki-client