$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb84e975-80b0-3e5a-8460-ff34f30a5150.roa File: cb84e975-80b0-3e5a-8460-ff34f30a5150.roa (raw, json) Hash identifier: 08mpc+yCt8mLRDQOUK5sD5653Lsx11r01+BFadzCvl4= Subject key identifier: 62:55:46:1E:40:27:9E:27:8F:B1:CA:43:C6:A3:8B:F6:65:97:1A:0D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DD8F077B9C3D60C773C850500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb84e975-80b0-3e5a-8460-ff34f30a5150.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 396602 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:77:b9:c3:d6:0c:77:3c:85:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=8fefb28f-d703-408e-95f7-28db48dd1891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b4:70:c4:b5:92:62:bf:0d:d7:27:48:1d:75: 06:fc:2f:fe:6d:7c:7c:e8:2d:d4:58:7c:db:7f:3a: 13:5e:c2:4b:4e:e4:0d:39:69:eb:d9:ab:bf:23:9a: ae:54:bf:16:9d:73:58:d0:86:a9:eb:ec:17:f8:5f: 83:bd:b0:e7:ed:62:d8:2a:0d:30:c6:90:59:8e:17: de:9a:dd:6f:79:f3:d1:54:cd:22:17:56:82:6d:2c: 24:36:13:54:5a:29:15:68:8c:ee:14:35:a6:49:05: 5f:58:b2:eb:91:bf:6d:f7:c8:4b:ee:52:04:0b:32: 10:d0:42:b1:43:b9:4f:93:a2:93:63:a0:33:7b:d4: c8:79:da:e9:68:d7:8c:54:6f:b9:a3:36:9a:ad:d5: 32:1e:6a:14:01:42:5b:94:3d:a5:df:45:bc:bf:cc: 1b:09:94:4b:21:05:23:c8:58:88:a5:54:ea:cc:c1: be:08:de:b0:13:16:9a:70:0f:bd:b0:76:f8:66:44: 26:c8:06:4e:dc:e2:7c:56:6c:6c:cd:4a:5f:50:6e: 11:09:23:ef:25:3d:28:ac:86:9d:2e:1c:b8:18:97: 77:b1:11:df:bf:6d:0e:8c:d7:d9:c0:e3:62:19:89: 41:47:e0:0c:c5:54:e0:65:d5:91:ba:9f:1f:20:45: 93:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:55:46:1E:40:27:9E:27:8F:B1:CA:43:C6:A3:8B:F6:65:97:1A:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb84e975-80b0-3e5a-8460-ff34f30a5150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:21:c3:b6:19:75:ed:00:d1:ad:79:6f:21:0a:40:89:4c:37: 19:3b:f5:48:17:50:3b:4a:39:ea:18:c5:43:56:28:c3:46:f5: f5:f3:28:e9:e5:32:82:a8:e5:1a:33:87:98:93:87:9d:cd:0f: 85:bf:8a:e6:4f:97:4a:02:bc:dd:8f:cb:71:ad:4b:14:e2:fa: 00:f5:5b:da:bc:b9:0c:59:f6:f7:e0:b8:bb:e4:65:c9:4d:3f: d1:c6:db:c4:67:6e:3c:62:cb:f7:62:91:37:b0:4e:95:51:9f: f9:20:e0:9a:ab:a3:b6:fe:bd:13:18:d2:90:19:e2:a4:96:72: 54:17:1b:d9:01:8c:cf:6d:20:d3:9e:7f:75:8d:5a:1e:02:ce: a4:f4:11:f9:b1:99:5a:a1:cc:3d:8c:5a:2a:0d:ae:83:23:93: d1:18:f5:4d:b2:7a:ae:10:f0:65:d3:95:1a:2d:ce:bb:5d:9e: 1b:9b:bc:0d:30:ae:f0:68:07:b2:53:d7:eb:07:2c:b2:d1:a0: 3c:2b:80:70:29:04:e5:43:b3:4c:c8:8f:72:b5:cd:82:7c:c8: e1:b2:f6:71:92:da:1a:45:9a:b5:3d:1c:63:1d:d8:a5:1f:06: 4b:33:49:e8:01:cb:c8:b5:ae:1d:98:8e:0a:d5:74:ef:aa:92: 22:84:d8:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8He5w9YMdzyFBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk OGZlZmIyOGYtZDcwMy00MDhlLTk1ZjctMjhkYjQ4ZGQxODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LRwxLWSYr8N1ydIHXUG/C/+bXx86C3UWHzb fzoTXsJLTuQNOWnr2au/I5quVL8WnXNY0Iap6+wX+F+DvbDn7WLYKg0wxpBZjhfe mt1vefPRVM0iF1aCbSwkNhNUWikVaIzuFDWmSQVfWLLrkb9t98hL7lIECzIQ0EKx Q7lPk6KTY6Aze9TIedrpaNeMVG+5ozaardUyHmoUAUJblD2l30W8v8wbCZRLIQUj yFiIpVTqzMG+CN6wExaacA+9sHb4ZkQmyAZO3OJ8VmxszUpfUG4RCSPvJT0orIad Lhy4GJd3sRHfv20OjNfZwONiGYlBR+AMxVTgZdWRup8fIEWTxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJVRh5AJ54nj7HKQ8aji/ZllxoNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2I4NGU5NzUtODBiMC0z ZTVhLTg0NjAtZmYzNGYzMGE1MTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMhw7YZde0A0a15byEKQIlMNxk79UgXUDtKOeoYxUNWKMNG9fXzKOnl MoKo5Rozh5iTh53ND4W/iuZPl0oCvN2Py3GtSxTi+gD1W9q8uQxZ9vfguLvkZclN P9HG28Rnbjxiy/dikTewTpVRn/kg4Jqro7b+vRMY0pAZ4qSWclQXG9kBjM9tINOe f3WNWh4CzqT0EfmxmVqhzD2MWioNroMjk9EY9U2yeq4Q8GXTlRotzrtdnhubvA0w rvBoB7JT1+sHLLLRoDwrgHApBOVDs0zIj3K1zYJ8yOGy9nGS2hpFmrU9HGMd2KUf BkszSegBy8i1rh2YjgrVdO+qkiKE2Fk= -----END CERTIFICATE-----Generated at Sat Jun 13 14:35:15 2026 by rpki-client