$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d020b984-10d1-399a-87b5-943c430128fe.roa File: d020b984-10d1-399a-87b5-943c430128fe.roa (raw, json) Hash identifier: qaoYiqXqcV8aRpbse9p949U+ieb1w9nwRQO+JU4q8Xc= Subject key identifier: 79:5E:37:DA:A4:5C:A1:B1:A8:19:4F:3F:5F:40:5B:67:04:5B:08:37 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1E447054EC9801CF50B3310C Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d020b984-10d1-399a-87b5-943c430128fe.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 396552 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:70:54:ec:98:01:cf:50:b3:31:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=20cb0e58-2f73-4ec5-a36c-6392b73a9cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4e:9c:be:e6:6d:8e:94:e3:68:24:22:78:a4: b8:92:13:2d:13:96:13:3e:4f:83:2a:94:7a:72:4d: 46:c2:84:43:0a:7e:af:49:33:63:8e:ce:73:72:70: c2:55:dc:37:90:49:97:ba:0e:c5:a3:3e:03:c0:58: 12:cf:9f:3e:d6:44:8d:c4:2a:dc:ca:ad:9f:eb:6f: d0:c1:fe:c9:8a:6c:a4:01:0b:d3:10:1b:df:ca:19: 23:c0:0d:45:b3:22:5b:cc:ff:fc:dd:5f:fb:2a:b9: 6e:c0:0c:86:41:a6:16:d2:84:b0:ad:5b:ee:80:8b: ca:2a:9d:4c:0a:91:42:96:cc:14:68:0e:55:31:85: 3e:d8:12:08:56:c5:fc:26:37:88:a7:4e:6b:02:99: a9:23:1f:5f:46:f2:3c:56:74:18:8a:c2:59:bf:60: 38:ac:66:4a:87:31:da:09:c3:b9:68:97:1e:91:e0: 71:9e:37:4b:13:be:b1:56:6d:1b:7a:a4:18:df:51: 5c:e4:4d:33:1c:e2:c9:21:bb:19:51:ef:43:eb:6f: 7a:58:0f:2d:3b:e0:06:a6:cc:26:4e:c5:8d:50:bd: be:11:38:db:7b:2e:22:72:f4:7b:1f:bd:84:23:af: da:11:7c:ee:16:90:c2:ca:22:ba:77:bc:c0:8a:1e: f7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5E:37:DA:A4:5C:A1:B1:A8:19:4F:3F:5F:40:5B:67:04:5B:08:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d020b984-10d1-399a-87b5-943c430128fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:19:d1:45:08:94:aa:9f:f5:7f:dd:94:e4:f5:54:3f:00:05: f7:31:16:35:73:26:8d:e0:76:29:b1:13:9d:0d:41:55:d0:9b: 23:4e:d6:e1:56:29:55:32:66:a0:46:5f:f2:de:50:e8:f7:8e: 78:39:61:48:f2:33:09:46:06:fc:01:da:eb:17:56:d1:32:7d: 1d:7f:5f:87:ab:85:71:5d:e9:5e:44:c1:e2:a6:0f:2a:12:d5: bc:12:76:6f:2f:ac:7f:a9:f2:50:69:7f:bf:ba:ba:50:94:f8: ac:91:be:c8:8a:c4:20:8b:fb:ca:19:86:7a:1f:cf:82:04:6c: 82:c9:d7:31:eb:78:71:b8:f5:82:32:51:42:37:f3:08:8b:87: d5:54:a0:f7:93:1a:59:ad:69:04:0c:99:d6:a6:74:68:a1:19: 3f:ab:8b:00:f6:df:5c:e9:a0:0f:2e:f2:36:29:e8:1d:e9:83: 06:4e:65:73:78:01:c7:e7:b8:d1:4c:ef:40:18:a5:10:42:91: 26:95:04:dd:11:14:01:59:ce:18:b6:5b:34:51:72:ac:54:a1: fb:03:3d:1f:4b:30:71:0b:e4:ef:88:67:65:85:25:fd:d3:d2: b8:a4:df:89:15:bc:67:35:04:0e:33:9a:ee:b4:29:71:71:05: fb:65:8d:d3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4eRHBU7JgBz1CzMQwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk MjBjYjBlNTgtMmY3My00ZWM1LWEzNmMtNjM5MmI3M2E5Y2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk6cvuZtjpTjaCQieKS4khMtE5YTPk+DKpR6 ck1GwoRDCn6vSTNjjs5zcnDCVdw3kEmXug7Foz4DwFgSz58+1kSNxCrcyq2f62/Q wf7JimykAQvTEBvfyhkjwA1FsyJbzP/83V/7KrluwAyGQaYW0oSwrVvugIvKKp1M CpFClswUaA5VMYU+2BIIVsX8JjeIp05rApmpIx9fRvI8VnQYisJZv2A4rGZKhzHa CcO5aJcekeBxnjdLE76xVm0beqQY31Fc5E0zHOLJIbsZUe9D6296WA8tO+AGpswm TsWNUL2+ETjbey4icvR7H72EI6/aEXzuFpDCyiK6d7zAih73gQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHleN9qkXKGxqBlPP19AW2cEWwg3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDAyMGI5ODQtMTBkMS0z OTlhLTg3YjUtOTQzYzQzMDEyOGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA9GdFFCJSqn/V/3ZTk9VQ/AAX3MRY1cyaN4HYpsROdDUFV0JsjTtbh VilVMmagRl/y3lDo9454OWFI8jMJRgb8AdrrF1bRMn0df1+Hq4VxXeleRMHipg8q EtW8EnZvL6x/qfJQaX+/urpQlPiskb7IisQgi/vKGYZ6H8+CBGyCydcx63hxuPWC MlFCN/MIi4fVVKD3kxpZrWkEDJnWpnRooRk/q4sA9t9c6aAPLvI2Kegd6YMGTmVz eAHH57jRTO9AGKUQQpEmlQTdERQBWc4Ytls0UXKsVKH7Az0fSzBxC+TviGdlhSX9 09K4pN+JFbxnNQQOM5rutClxcQX7ZY3T -----END CERTIFICATE-----Generated at Sat Jun 13 18:37:34 2026 by rpki-client