$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1bc8b20-7f23-3d1e-a758-dee058aa7e80.roa File: b1bc8b20-7f23-3d1e-a758-dee058aa7e80.roa (raw, json) Hash identifier: 9JD3iHotRwrH19/0Y0qDwP6uhRRaRO4IvNxr0J0t61w= Subject key identifier: 53:C6:FB:B6:64:F8:49:C6:00:0A:D2:AF:96:42:B2:08:CB:00:65:63 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1E44767CD669D9711F2E4B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1bc8b20-7f23-3d1e-a758-dee058aa7e80.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 397208 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:76:7c:d6:69:d9:71:1f:2e:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=a1cc088b-4a34-40cd-b845-a2317e615fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:96:6a:3d:95:a4:41:55:9f:ca:33:f1:8f:bd: 75:92:8f:2f:1d:16:96:9d:a5:74:8f:d8:cf:19:27: 13:a9:44:a8:5d:55:cf:66:ca:cf:2a:e9:a2:c6:8a: 10:49:8c:ee:a9:1a:b1:4f:f1:76:93:2c:4a:d6:b4: 10:b0:81:3b:bf:ed:a5:1b:47:ca:af:65:31:a7:be: 40:a9:f0:bb:19:ed:f2:b2:85:f4:51:cf:86:7b:4a: 80:45:d2:54:3d:3d:f3:27:6a:36:81:68:c5:b5:64: 48:33:e7:6e:db:6f:c4:31:a1:c4:ae:b0:52:b1:ff: 1d:11:2e:42:0a:10:92:69:da:32:dd:31:3f:c8:9f: 94:99:ad:ff:93:2d:2a:66:a3:77:19:c6:4f:e2:c8: 01:91:de:25:c8:cc:16:ca:99:9e:05:cf:8e:b7:9b: 72:82:28:30:5f:1c:9b:fe:db:c8:e6:f8:e7:a6:1c: 1b:d3:b8:97:95:cb:c9:05:e3:fd:8a:2c:d0:89:eb: 42:01:90:48:5d:e3:a6:95:01:9b:3c:d7:25:18:db: f2:d8:d4:93:8a:65:ab:be:31:a2:40:85:ba:28:ce: e7:4b:0b:95:b9:3c:2e:12:da:bb:be:59:95:33:94: 91:9f:0f:07:8a:3c:d5:11:af:06:4a:95:39:ae:7c: cc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C6:FB:B6:64:F8:49:C6:00:0A:D2:AF:96:42:B2:08:CB:00:65:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1bc8b20-7f23-3d1e-a758-dee058aa7e80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:28:6d:1d:37:2b:e9:5d:18:d0:2b:d1:e9:bb:e6:dd:f3:de: 7f:2f:c3:7e:95:38:7a:1c:c1:1e:fd:ec:ad:47:77:e3:df:9b: 47:52:80:38:aa:d4:9a:2a:d7:b2:96:d1:c7:88:70:f6:32:91: ef:90:a7:6c:0d:4d:9c:12:35:41:88:33:38:1b:b1:3d:cf:86: d3:62:f3:9d:77:d7:68:00:48:2b:a6:a7:0e:56:60:fc:59:a2: ba:2e:e7:c5:c3:ed:18:ed:6c:9a:5e:45:58:39:2a:14:de:a5: b4:fe:d5:e0:7c:a5:50:39:b4:09:4c:8f:5f:58:31:30:4b:90: a0:ef:1a:39:57:f6:1a:f6:80:82:01:51:8d:59:56:81:3f:bb: fa:ae:80:a2:12:f1:43:d0:40:a9:74:a5:84:d7:d1:9b:a7:89: bf:4b:64:ee:31:95:c5:da:d6:50:f0:25:c9:f8:4b:c3:c8:26: 08:f7:f5:2a:b9:f7:3a:8e:8f:34:c1:c4:00:f5:2e:0d:c1:95: 0e:bf:9e:4b:b6:18:46:bf:cd:64:77:90:8a:4e:cb:f9:bd:b8: a9:a3:a5:39:70:b1:9c:e6:3c:ab:b0:e0:2f:4b:74:96:e6:4f: 76:8b:e6:4e:e7:b6:a8:66:75:c3:5f:02:ef:b8:b3:2d:26:b1: 49:25:ea:71 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4eRHZ81mnZcR8uSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk YTFjYzA4OGItNGEzNC00MGNkLWI4NDUtYTIzMTdlNjE1ZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5ZqPZWkQVWfyjPxj711ko8vHRaWnaV0j9jP GScTqUSoXVXPZsrPKumixooQSYzuqRqxT/F2kyxK1rQQsIE7v+2lG0fKr2Uxp75A qfC7Ge3ysoX0Uc+Ge0qARdJUPT3zJ2o2gWjFtWRIM+du22/EMaHErrBSsf8dES5C ChCSadoy3TE/yJ+Uma3/ky0qZqN3GcZP4sgBkd4lyMwWypmeBc+Ot5tygigwXxyb /tvI5vjnphwb07iXlcvJBeP9iizQietCAZBIXeOmlQGbPNclGNvy2NSTimWrvjGi QIW6KM7nSwuVuTwuEtq7vlmVM5SRnw8HijzVEa8GSpU5rnzMPwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFPG+7Zk+EnGAArSr5ZCsgjLAGVjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjFiYzhiMjAtN2YyMy0z ZDFlLWE3NTgtZGVlMDU4YWE3ZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBdKG0dNyvpXRjQK9Hpu+bd895/L8N+lTh6HMEe/eytR3fj35tHUoA4 qtSaKteyltHHiHD2MpHvkKdsDU2cEjVBiDM4G7E9z4bTYvOdd9doAEgrpqcOVmD8 WaK6LufFw+0Y7WyaXkVYOSoU3qW0/tXgfKVQObQJTI9fWDEwS5Cg7xo5V/Ya9oCC AVGNWVaBP7v6roCiEvFD0ECpdKWE19Gbp4m/S2TuMZXF2tZQ8CXJ+EvDyCYI9/Uq ufc6jo80wcQA9S4NwZUOv55LthhGv81kd5CKTsv5vbipo6U5cLGc5jyrsOAvS3SW 5k92i+ZO57aoZnXDXwLvuLMtJrFJJepx -----END CERTIFICATE-----Generated at Sat Jun 13 14:26:17 2026 by rpki-client