$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa File: cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa (raw, json) Hash identifier: HPvHv+QB2lpcQKgwOGs6NUjWR0VTyhVbv6DfRbF9hJs= Subject key identifier: 0B:35:A8:01:12:78:53:C3:8E:DC:92:1E:DF:4D:85:8A:5B:1D:17:A1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1E446DBDEFCB019E74A6EA38 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 397200 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:6d:bd:ef:cb:01:9e:74:a6:ea:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=f375cddd-9a5b-459a-9605-e2f916d7695f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:93:cb:8b:37:76:60:1d:de:63:cc:0e:c6:11: d6:a3:4b:6a:62:be:4d:8d:b3:3f:ad:7f:89:f2:ab: 10:1b:34:26:e8:c2:91:cc:de:4a:58:9f:11:7d:33: 07:b1:61:d3:e2:19:33:b2:b3:56:2d:a1:17:80:43: 5e:af:ee:ab:30:d4:70:16:12:96:0f:27:9a:0d:5f: b9:b0:1d:04:0c:30:e6:78:36:f1:da:bb:f8:98:ea: 09:4d:77:b0:90:4e:ac:68:be:0c:ea:a3:fd:a5:1f: 9f:e1:39:a3:fd:8a:db:6e:19:65:c4:47:4b:fe:b5: 84:24:6d:30:9e:d6:02:f3:ab:26:d0:de:c0:41:bd: a7:1f:20:20:da:55:ac:ec:25:3c:22:9c:07:4a:39: 60:16:ee:35:59:bf:96:d1:33:78:5a:ba:df:84:24: 22:7b:de:36:78:96:0a:fa:5d:8f:71:d0:dc:51:8c: a7:36:97:03:b5:94:4f:ec:27:ff:12:fa:b5:2c:5d: 57:f5:93:ee:2d:63:86:70:dc:ed:21:58:f5:29:3c: 97:e4:af:50:a5:8e:43:8c:51:0c:38:2f:a8:00:c9: b8:cc:d7:ad:29:0e:1e:61:05:f6:e5:9d:e3:06:dd: 05:28:24:c4:88:74:8d:b1:3c:b1:1f:76:01:23:b4: e2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:35:A8:01:12:78:53:C3:8E:DC:92:1E:DF:4D:85:8A:5B:1D:17:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:59:69:7d:02:c2:db:52:fd:9a:0f:2b:a9:1b:95:46:76:0e: e8:8f:6e:c0:d2:98:d7:cd:fd:80:f9:f0:d7:23:c2:a0:d3:ff: df:c3:d9:f8:7b:0e:fb:d6:4c:99:01:88:74:eb:cc:f8:99:b4: fd:08:a7:79:98:a1:3a:e3:86:8f:58:be:ad:c6:25:4f:33:6a: b6:cf:7a:81:4e:ed:c7:45:b6:a0:52:e1:1f:31:39:6e:ac:1f: fc:0d:92:9c:2a:02:f5:51:23:8c:bf:6c:05:77:52:a5:73:51: cb:11:0c:e5:84:9e:d1:a4:40:fb:6b:bb:98:82:41:82:f8:75: c1:ae:ef:3b:69:e3:8e:b5:94:bb:d2:0b:b5:89:09:0a:78:e9: aa:df:b0:07:da:51:fe:46:10:fb:f4:82:9b:6d:8a:02:9d:e5: c4:49:0d:8f:c0:59:69:11:72:f1:64:14:38:c7:31:f9:5a:c2: f4:bf:63:1c:bb:47:c3:88:70:87:16:d9:fc:09:e0:e8:70:3f: 40:8a:09:3f:2d:68:c0:c5:34:db:10:3c:bb:73:e6:95:b7:0c: 59:a0:23:8e:48:77:9e:ab:42:0b:85:f8:5c:df:73:99:03:62: 59:42:c0:20:e2:46:66:30:b0:6d:29:2a:e4:b6:26:69:44:69: 90:b6:b8:db -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4eRG2978sBnnSm6jgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk ZjM3NWNkZGQtOWE1Yi00NTlhLTk2MDUtZTJmOTE2ZDc2OTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJPLizd2YB3eY8wOxhHWo0tqYr5NjbM/rX+J 8qsQGzQm6MKRzN5KWJ8RfTMHsWHT4hkzsrNWLaEXgENer+6rMNRwFhKWDyeaDV+5 sB0EDDDmeDbx2rv4mOoJTXewkE6saL4M6qP9pR+f4Tmj/YrbbhllxEdL/rWEJG0w ntYC86sm0N7AQb2nHyAg2lWs7CU8IpwHSjlgFu41Wb+W0TN4WrrfhCQie942eJYK +l2PcdDcUYynNpcDtZRP7Cf/Evq1LF1X9ZPuLWOGcNztIVj1KTyX5K9QpY5DjFEM OC+oAMm4zNetKQ4eYQX25Z3jBt0FKCTEiHSNsTyxH3YBI7Ti5QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAs1qAESeFPDjtySHt9NhYpbHRehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2I4ZTc0ZjgtN2EyZi0z ZDg1LTk0NWEtZDNlMTU5MGJiYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAtWWl9AsLbUv2aDyupG5VGdg7oj27A0pjXzf2A+fDXI8Kg0//fw9n4 ew771kyZAYh068z4mbT9CKd5mKE644aPWL6txiVPM2q2z3qBTu3HRbagUuEfMTlu rB/8DZKcKgL1USOMv2wFd1Klc1HLEQzlhJ7RpED7a7uYgkGC+HXBru87aeOOtZS7 0gu1iQkKeOmq37AH2lH+RhD79IKbbYoCneXESQ2PwFlpEXLxZBQ4xzH5WsL0v2Mc u0fDiHCHFtn8CeDocD9Aigk/LWjAxTTbEDy7c+aVtwxZoCOOSHeeq0ILhfhc33OZ A2JZQsAg4kZmMLBtKSrktiZpRGmQtrjb -----END CERTIFICATE-----Generated at Sat Jun 13 13:22:08 2026 by rpki-client