$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd685d4d-d212-3bc2-aefe-31b572ea5b56.roa File: bd685d4d-d212-3bc2-aefe-31b572ea5b56.roa (raw, json) Hash identifier: lqjZMOLu2Y2DiJ1S2mPFtDb+VssCwLwp3th12LiYlmg= Subject key identifier: BD:12:53:9E:80:6A:E6:AA:B4:22:8B:5E:EF:AA:FB:BA:B4:09:4A:CA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DD8F07C4E5ABC362AA9D30300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd685d4d-d212-3bc2-aefe-31b572ea5b56.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 396590 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:7c:4e:5a:bc:36:2a:a9:d3:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=5933a003-13f8-44e2-8fe4-f35ee4121498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:db:5a:6f:5f:89:a3:5a:54:3a:fb:d1:76:fc: 88:66:b3:52:b1:d4:8f:2b:e6:c8:61:75:17:b9:a3: ef:d7:d8:86:73:37:de:74:29:43:7b:c1:38:5f:a3: 2a:ee:55:00:2a:42:92:b4:6b:a0:a4:ec:85:23:28: 50:18:45:4f:bf:b6:33:2c:10:d3:a9:d7:13:db:55: 6d:5b:01:50:0a:70:37:dc:24:ec:34:9b:ca:11:3b: 07:5e:1b:a5:1b:f0:16:65:3c:90:f8:9a:d2:28:c6: 6c:21:6c:4e:9c:c0:e3:81:1d:f7:66:53:5a:9b:be: ed:3e:27:f5:6a:d5:4c:cd:87:db:c6:b4:7d:76:5d: aa:a6:53:15:59:ee:d1:75:a0:1d:60:8f:53:f4:be: 6b:b9:d2:64:b0:c9:bc:af:2b:8e:a3:fa:00:7e:cb: 6b:d5:41:59:18:5b:72:b9:34:a4:af:5c:fd:1c:f4: 4c:e3:89:66:4f:80:6e:08:fe:c4:d7:60:92:ff:60: c4:4e:5e:1a:60:25:f6:2b:f2:55:ac:38:35:a1:1d: bb:44:df:f4:83:b6:54:00:15:80:b3:e0:83:3a:64: 83:01:00:62:8b:4c:df:c0:fe:23:84:1c:43:ea:a1: 16:f1:5b:8c:91:85:b7:8b:33:33:41:5a:e3:98:a2: a0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:12:53:9E:80:6A:E6:AA:B4:22:8B:5E:EF:AA:FB:BA:B4:09:4A:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd685d4d-d212-3bc2-aefe-31b572ea5b56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:4e:c6:36:7f:6d:f0:73:0d:db:b9:96:ce:08:b4:71:4a:3a: 5c:52:78:08:15:91:2b:13:30:f0:65:6c:2e:41:66:da:c8:c2: 0f:ce:41:f6:fd:36:31:43:c9:1c:33:18:73:24:31:c8:bb:3c: 11:5e:61:d3:59:27:86:d9:f0:78:32:b0:30:12:9e:84:25:70: af:77:f4:d3:00:ea:56:72:27:87:ff:02:99:4a:d4:95:c7:8e: 01:00:a1:fa:7f:cd:f6:ee:a3:71:d1:11:1b:6f:a9:3f:df:9d: 25:8e:23:57:a6:f5:f5:7d:cb:2d:38:ff:6f:b1:ac:52:94:ef: 14:cf:5e:74:30:b7:da:0d:5f:a6:f0:69:42:14:80:4e:20:ba: 63:73:e7:8e:74:d9:6d:31:6a:da:23:d8:d1:56:7d:df:bd:51: 0a:78:7c:32:f3:f5:4e:25:70:99:62:74:11:88:2f:63:eb:01: f4:89:db:cc:1f:4d:1f:e8:05:47:60:fa:4a:eb:e4:d5:b3:a8: b6:1c:08:31:1c:ed:18:d8:bb:0d:36:16:88:75:61:87:61:fd: 88:99:48:63:53:27:c6:3b:52:70:7d:1a:23:24:15:fe:19:6c: bf:22:f1:1e:eb:e4:1d:15:9a:ec:fc:0a:c3:a2:5e:32:8d:74: 07:39:8a:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8HxOWrw2KqnTAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk NTkzM2EwMDMtMTNmOC00NGUyLThmZTQtZjM1ZWU0MTIxNDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNtab1+Jo1pUOvvRdvyIZrNSsdSPK+bIYXUX uaPv19iGczfedClDe8E4X6Mq7lUAKkKStGugpOyFIyhQGEVPv7YzLBDTqdcT21Vt WwFQCnA33CTsNJvKETsHXhulG/AWZTyQ+JrSKMZsIWxOnMDjgR33ZlNam77tPif1 atVMzYfbxrR9dl2qplMVWe7RdaAdYI9T9L5rudJksMm8ryuOo/oAfstr1UFZGFty uTSkr1z9HPRM44lmT4BuCP7E12CS/2DETl4aYCX2K/JVrDg1oR27RN/0g7ZUABWA s+CDOmSDAQBii0zfwP4jhBxD6qEW8VuMkYW3izMzQVrjmKKgywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0SU56AauaqtCKLXu+q+7q0CUrKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmQ2ODVkNGQtZDIxMi0z YmMyLWFlZmUtMzFiNTcyZWE1YjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACROxjZ/bfBzDdu5ls4ItHFKOlxSeAgVkSsTMPBlbC5BZtrIwg/OQfb9 NjFDyRwzGHMkMci7PBFeYdNZJ4bZ8HgysDASnoQlcK939NMA6lZyJ4f/AplK1JXH jgEAofp/zfbuo3HRERtvqT/fnSWOI1em9fV9yy04/2+xrFKU7xTPXnQwt9oNX6bw aUIUgE4gumNz54502W0xatoj2NFWfd+9UQp4fDLz9U4lcJlidBGIL2PrAfSJ28wf TR/oBUdg+krr5NWzqLYcCDEc7RjYuw02Foh1YYdh/YiZSGNTJ8Y7UnB9GiMkFf4Z bL8i8R7r5B0Vmuz8CsOiXjKNdAc5inA= -----END CERTIFICATE-----Generated at Sat Jun 13 13:32:28 2026 by rpki-client