$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba5fa9b1-1046-3dd2-b8a0-b01994be841b.roa File: ba5fa9b1-1046-3dd2-b8a0-b01994be841b.roa (raw, json) Hash identifier: E8PovgT56cX+vcBlD88uTyAHXzRfES/TgdutK1n7R8w= Subject key identifier: 0E:D7:08:DB:C0:23:EE:87:21:AB:22:9C:9A:87:DD:B3:86:7E:06:21 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DD8F079A4E5FAB04B3DB2B058 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba5fa9b1-1046-3dd2-b8a0-b01994be841b.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 396599 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:79:a4:e5:fa:b0:4b:3d:b2:b0:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=cafb809a-c557-47f1-b035-b7acdb1715e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5a:3f:9c:83:83:62:c3:5a:07:9d:63:8d:b6: 66:90:da:df:98:85:fb:cc:cc:3d:d0:c7:bc:6b:95: ad:25:bd:76:d6:5e:ba:36:d9:fe:8a:5e:af:97:18: 0b:1f:01:c6:e8:2c:9e:98:4d:1f:7a:27:8c:96:54: f9:58:55:1d:a2:80:3f:e7:fe:e4:1c:06:e3:8e:a4: c1:a4:60:6b:e9:b8:7c:c0:39:0d:7c:2d:b6:97:85: 06:0f:1f:3c:56:82:d9:6c:ee:fc:76:eb:74:5e:ac: 13:fe:0b:dc:56:1d:bd:7c:65:ad:13:ee:a4:c9:77: 89:67:51:a2:00:3a:d3:79:88:60:fa:63:e5:06:ea: 17:1e:a0:7f:49:c0:e3:69:15:c1:0c:74:d9:8e:59: 6d:eb:a0:34:9c:f5:d8:9d:a0:66:2a:35:f1:33:ce: 29:db:a7:38:1e:4a:f0:45:5a:a8:a4:45:c4:82:49: 91:d7:95:5d:7e:ac:78:4c:ab:e6:bc:3b:1a:1a:c0: 60:1c:ea:77:0b:c6:a0:99:b1:85:37:ec:9c:f8:a3: dd:c6:48:e3:dc:6c:46:6d:40:a4:ec:ca:32:9b:76: 5e:17:5d:0e:fb:9f:cd:84:60:49:f5:7d:e1:7c:01: ab:dd:0f:8a:ec:a7:ff:b9:29:e5:1f:86:c3:55:1b: 65:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D7:08:DB:C0:23:EE:87:21:AB:22:9C:9A:87:DD:B3:86:7E:06:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba5fa9b1-1046-3dd2-b8a0-b01994be841b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a8:d1:9b:f6:1e:cd:f6:ef:78:64:78:ae:02:02:27:2f:fa: 90:e0:ce:d6:33:a4:d6:fd:06:25:c6:ce:ab:98:fe:48:0b:70: 2b:d9:23:3b:b1:a0:30:df:e7:1b:55:47:b3:e9:01:d1:3b:2f: ab:aa:50:da:9a:78:4c:8f:fc:05:e6:c4:aa:d3:2e:3f:a0:44: 2a:38:a2:bb:da:0d:91:5d:8f:e6:22:74:0d:30:37:d4:b4:9b: ab:86:a6:77:b7:1f:12:a9:ce:06:c8:ec:06:20:70:0a:46:2a: 6b:76:ae:9b:44:44:bc:4f:b0:c4:2f:28:06:c4:51:e5:43:07: 46:e2:b6:ec:ea:cc:c3:b2:25:7a:35:45:5c:ab:74:62:1c:98: 70:74:ed:9e:33:7d:0a:68:6f:c0:e5:be:32:0b:cc:83:0e:96: 95:3c:ac:76:e2:40:a8:9a:51:3f:2a:10:f7:8a:5d:f5:24:8a: ae:bd:8b:bb:7c:69:84:62:24:db:4e:7a:36:ac:b9:54:36:e4: 9c:24:80:48:e1:ef:71:8b:3f:b5:c4:89:bc:cb:b5:e5:37:18: 34:85:9b:4e:6d:92:54:6b:03:cd:9d:fb:0c:29:99:ff:2e:0b: dc:a8:be:fa:08:f7:f0:78:cb:47:b4:4c:78:75:df:9b:01:41: 87:3a:0a:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8Hmk5fqwSz2ysFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk Y2FmYjgwOWEtYzU1Ny00N2YxLWIwMzUtYjdhY2RiMTcxNWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlo/nIODYsNaB51jjbZmkNrfmIX7zMw90Me8 a5WtJb121l66Ntn+il6vlxgLHwHG6CyemE0feieMllT5WFUdooA/5/7kHAbjjqTB pGBr6bh8wDkNfC22l4UGDx88VoLZbO78dut0XqwT/gvcVh29fGWtE+6kyXeJZ1Gi ADrTeYhg+mPlBuoXHqB/ScDjaRXBDHTZjllt66A0nPXYnaBmKjXxM84p26c4Hkrw RVqopEXEgkmR15Vdfqx4TKvmvDsaGsBgHOp3C8agmbGFN+yc+KPdxkjj3GxGbUCk 7Moym3ZeF10O+5/NhGBJ9X3hfAGr3Q+K7Kf/uSnlH4bDVRtlDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7XCNvAI+6HIasinJqH3bOGfgYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmE1ZmE5YjEtMTA0Ni0z ZGQyLWI4YTAtYjAxOTk0YmU4NDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACao0Zv2Hs3273hkeK4CAicv+pDgztYzpNb9BiXGzquY/kgLcCvZIzux oDDf5xtVR7PpAdE7L6uqUNqaeEyP/AXmxKrTLj+gRCo4orvaDZFdj+YidA0wN9S0 m6uGpne3HxKpzgbI7AYgcApGKmt2rptERLxPsMQvKAbEUeVDB0bituzqzMOyJXo1 RVyrdGIcmHB07Z4zfQpob8DlvjILzIMOlpU8rHbiQKiaUT8qEPeKXfUkiq69i7t8 aYRiJNtOejasuVQ25JwkgEjh73GLP7XEibzLteU3GDSFm05tklRrA82d+wwpmf8u C9yovvoI9/B4y0e0THh135sBQYc6Cto= -----END CERTIFICATE-----Generated at Sat Jun 13 13:22:25 2026 by rpki-client