$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1d425b2-21c5-3f27-8372-98a3a5444b51.roa File: c1d425b2-21c5-3f27-8372-98a3a5444b51.roa (raw, json) Hash identifier: 611yGAqpVo6LhYeyHwKGqprcF9V7Pi8dcFfpbGQrSkA= Subject key identifier: 8D:9C:8B:43:AF:ED:15:9D:AD:B6:39:75:BB:31:BB:AD:04:1B:53:76 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DD8F07C967726A84FA4559280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1d425b2-21c5-3f27-8372-98a3a5444b51.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 36622 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:7c:96:77:26:a8:4f:a4:55:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=170ba93a-b099-4a05-94a2-660cb0eb584f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cf:d7:d5:08:c4:22:5e:73:78:e0:cf:b1:97: 36:3a:bd:f0:1c:10:9c:c7:ac:8d:c9:40:3d:24:0d: 0f:21:75:0f:a1:74:82:5e:20:44:8a:bb:b8:97:69: 15:86:2f:d3:bd:d2:0f:f0:b0:4e:fe:1a:76:ff:90: 6e:56:d5:35:ff:83:da:d8:2f:46:83:a1:97:69:74: b3:13:22:7c:0e:a7:51:a5:6c:81:22:e9:f4:91:67: 7f:d4:f9:cd:6b:41:5b:c9:ec:a9:3a:1f:80:22:62: 8a:40:23:05:de:75:0a:0a:47:ad:8a:c2:45:55:22: e3:e6:6c:e1:62:51:9a:10:12:1d:8d:fe:b8:fc:8f: e4:6b:7e:d9:64:50:a1:1c:ec:85:0e:f8:14:12:90: 39:c2:ea:a9:a8:f1:cb:35:be:d1:7e:93:4a:6b:6f: 17:27:b7:6a:f0:fd:90:7e:a2:01:f3:c3:9a:ac:30: 98:68:99:ba:5f:9c:7c:e2:d5:cf:f6:73:ae:33:a7: 9a:3f:ad:9c:69:db:0e:8d:ec:ec:0d:d9:a0:f3:95: 28:65:99:68:16:6d:49:03:c3:8c:af:83:d2:fd:9b: e6:fc:f5:0f:db:52:02:f2:b5:cb:92:f8:4a:7d:37: 73:f9:bf:eb:e4:7b:70:e4:1d:13:52:4b:d9:b7:c4: 40:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9C:8B:43:AF:ED:15:9D:AD:B6:39:75:BB:31:BB:AD:04:1B:53:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1d425b2-21c5-3f27-8372-98a3a5444b51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:4c:f5:6a:41:8a:15:53:bd:6a:d6:92:55:58:95:1f:95:e4: 08:ec:e8:9c:45:99:c6:d2:a1:5b:3d:9d:a7:dd:ec:d3:54:00: 6d:9e:4c:bb:d4:1b:41:0c:15:d4:7a:6d:dd:09:f2:91:51:90: bd:79:ad:5b:2e:0c:d2:c1:34:21:a9:9d:3e:24:f7:90:ea:9b: fe:aa:e9:a6:b0:19:bd:c9:2f:fc:2f:66:4c:74:6d:9d:d0:63: ab:29:d4:cd:69:c9:39:07:35:8c:c8:a6:6b:b7:af:fa:ef:56: e8:23:db:bd:07:95:b0:5b:29:c6:af:f0:8b:fc:bc:9d:1d:4f: 35:ee:8f:d2:d6:24:ac:b0:ab:b0:23:54:35:17:8a:f4:8f:65: 4c:57:c2:fe:44:6b:2e:aa:20:cb:2d:d0:66:ab:08:ad:68:bd: 0d:76:d5:41:37:e8:c1:60:07:d3:c6:d2:e0:be:2d:a4:41:54: 34:37:63:52:46:9e:c6:a3:4e:ee:41:54:ea:73:a3:69:7a:8d: ea:ef:72:e1:c8:e5:e5:6a:f1:2b:b9:03:4a:ad:e5:11:5d:a9: 9d:f2:95:cf:8e:1f:58:94:26:60:cd:1f:7c:cf:dc:fd:13:c1: 0c:a1:90:a6:e8:fd:10:e4:22:ed:c2:d0:13:2f:52:bc:c1:66: 54:de:34:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8HyWdyaoT6RVkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk MTcwYmE5M2EtYjA5OS00YTA1LTk0YTItNjYwY2IwZWI1ODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls/X1QjEIl5zeODPsZc2Or3wHBCcx6yNyUA9 JA0PIXUPoXSCXiBEiru4l2kVhi/TvdIP8LBO/hp2/5BuVtU1/4Pa2C9Gg6GXaXSz EyJ8DqdRpWyBIun0kWd/1PnNa0FbyeypOh+AImKKQCMF3nUKCketisJFVSLj5mzh YlGaEBIdjf64/I/ka37ZZFChHOyFDvgUEpA5wuqpqPHLNb7RfpNKa28XJ7dq8P2Q fqIB88OarDCYaJm6X5x84tXP9nOuM6eaP62cadsOjezsDdmg85UoZZloFm1JA8OM r4PS/Zvm/PUP21IC8rXLkvhKfTdz+b/r5Htw5B0TUkvZt8RAjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2ci0Ov7RWdrbY5dbsxu60EG1N2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzFkNDI1YjItMjFjNS0z ZjI3LTgzNzItOThhM2E1NDQ0YjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZM9WpBihVTvWrWklVYlR+V5Ajs6JxFmcbSoVs9nafd7NNUAG2eTLvU G0EMFdR6bd0J8pFRkL15rVsuDNLBNCGpnT4k95Dqm/6q6aawGb3JL/wvZkx0bZ3Q Y6sp1M1pyTkHNYzIpmu3r/rvVugj270HlbBbKcav8Iv8vJ0dTzXuj9LWJKywq7Aj VDUXivSPZUxXwv5Eay6qIMst0GarCK1ovQ121UE36MFgB9PG0uC+LaRBVDQ3Y1JG nsajTu5BVOpzo2l6jervcuHI5eVq8Su5A0qt5RFdqZ3ylc+OH1iUJmDNH3zP3P0T wQyhkKbo/RDkIu3C0BMvUrzBZlTeNDw= -----END CERTIFICATE-----Generated at Sat Jun 13 15:13:45 2026 by rpki-client