$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ddb928dd-83a5-3dd8-8cb7-a67c03eaf490.roa File: ddb928dd-83a5-3dd8-8cb7-a67c03eaf490.roa (raw, json) Hash identifier: cECErGaoa2riNqaaEIfGjER17cOcfpoFDrDYyas2fTQ= Subject key identifier: 71:A4:FA:07:A4:6D:6C:A5:3A:CE:94:19:69:4E:84:3B:40:B1:C2:69 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DD8F07789841608EB4FC434E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ddb928dd-83a5-3dd8-8cb7-a67c03eaf490.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 36624 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:77:89:84:16:08:eb:4f:c4:34:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=ae3d25c3-79f2-4a05-9b21-a846e0fe360a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2d:6d:66:fb:6b:27:dc:67:e7:d0:ce:63:03: 8b:f7:34:8d:e9:41:11:66:e8:47:c5:d7:85:e7:d0: bb:55:0a:a3:6e:17:36:53:37:77:8b:13:aa:26:5e: 1c:ba:43:32:18:b7:01:47:c0:03:e9:6a:e9:ad:c4: a7:bd:d9:3e:70:04:4f:d2:48:25:c0:dd:06:ef:e1: 5f:2d:e5:ae:76:7b:12:13:cd:51:a7:d6:66:87:0d: 71:ac:94:0b:88:fa:58:a9:f5:7d:e5:7c:80:00:0a: 1e:f5:91:7c:61:f7:f4:a3:57:bf:42:5d:e2:8d:2d: 7f:30:af:89:07:39:ad:0b:03:ad:61:0a:b9:40:81: d4:87:78:2c:59:bc:2b:f9:34:9e:85:c4:0c:16:57: 19:4d:91:55:40:fa:7a:05:10:aa:50:25:ff:3c:16: 0f:0b:43:b8:38:eb:49:13:b9:cd:fe:58:ff:c5:5e: 19:73:8b:c5:4b:70:32:da:9f:36:f8:f6:af:e7:f6: 8b:4d:30:8a:af:18:15:1f:62:5e:5e:ce:d0:a2:f8: e1:3d:8d:f8:47:18:4b:1c:83:f9:47:2b:a2:37:73: 8f:14:4b:38:3d:d1:26:13:e0:a4:64:9c:5d:a2:99: 05:15:e9:21:4c:bd:2c:b5:6f:ce:91:a4:9d:11:9b: c2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A4:FA:07:A4:6D:6C:A5:3A:CE:94:19:69:4E:84:3B:40:B1:C2:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ddb928dd-83a5-3dd8-8cb7-a67c03eaf490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:89:83:22:83:89:34:8a:40:3a:27:63:c3:8c:18:9f:93:6d: e0:a2:84:ab:f3:21:64:55:35:9f:91:02:e5:d1:8b:31:ef:98: a1:21:bb:a7:a7:fd:1f:11:f7:ec:df:45:31:61:08:74:70:c6: fd:1b:7a:8f:a4:83:f7:a7:b8:01:0f:ab:fa:db:dc:ae:6e:9c: a2:89:8a:57:59:71:1b:ac:76:53:45:6c:bb:ce:7c:eb:e4:27: 89:c0:64:83:37:81:01:1c:d4:a3:53:a8:a4:8d:3e:e0:03:43: 54:8c:aa:51:a4:6e:c0:c8:15:d7:b7:38:76:03:1c:d8:12:d8: 19:72:0b:77:a7:59:dd:0e:38:67:f4:f3:4a:12:06:e6:b5:ea: d4:ab:9e:c7:a7:ee:5b:04:12:cc:a7:ec:0c:9f:3f:98:ff:5c: 11:3b:cb:03:38:64:dc:a1:6f:24:74:c2:f2:d8:43:97:fc:b5: 0c:cf:e7:66:60:f8:5c:2b:57:91:c5:bb:5a:a8:fe:f3:9b:03: 27:44:b0:d6:90:0e:fe:0c:e2:4f:3c:ac:1f:ee:77:d0:e2:79: 8a:d2:b6:ce:07:05:4b:d2:2c:2a:97:76:42:98:3f:b1:a1:51: 40:5a:d7:44:fa:40:d9:21:73:d4:6d:0c:2f:e3:e0:f1:7e:1f: 5c:94:ed:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8HeJhBYI60/ENOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk YWUzZDI1YzMtNzlmMi00YTA1LTliMjEtYTg0NmUwZmUzNjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS1tZvtrJ9xn59DOYwOL9zSN6UERZuhHxdeF 59C7VQqjbhc2Uzd3ixOqJl4cukMyGLcBR8AD6WrprcSnvdk+cARP0kglwN0G7+Ff LeWudnsSE81Rp9Zmhw1xrJQLiPpYqfV95XyAAAoe9ZF8Yff0o1e/Ql3ijS1/MK+J BzmtCwOtYQq5QIHUh3gsWbwr+TSehcQMFlcZTZFVQPp6BRCqUCX/PBYPC0O4OOtJ E7nN/lj/xV4Zc4vFS3Ay2p82+Pav5/aLTTCKrxgVH2JeXs7QovjhPY34RxhLHIP5 RyuiN3OPFEs4PdEmE+CkZJxdopkFFekhTL0stW/OkaSdEZvCPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGk+gekbWylOs6UGWlOhDtAscJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGRiOTI4ZGQtODNhNS0z ZGQ4LThjYjctYTY3YzAzZWFmNDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+JgyKDiTSKQDonY8OMGJ+TbeCihKvzIWRVNZ+RAuXRizHvmKEhu6en /R8R9+zfRTFhCHRwxv0beo+kg/enuAEPq/rb3K5unKKJildZcRusdlNFbLvOfOvk J4nAZIM3gQEc1KNTqKSNPuADQ1SMqlGkbsDIFde3OHYDHNgS2BlyC3enWd0OOGf0 80oSBua16tSrnsen7lsEEsyn7AyfP5j/XBE7ywM4ZNyhbyR0wvLYQ5f8tQzP52Zg +FwrV5HFu1qo/vObAydEsNaQDv4M4k88rB/ud9DieYrSts4HBUvSLCqXdkKYP7Gh UUBa10T6QNkhc9RtDC/j4PF+H1yU7e8= -----END CERTIFICATE-----Generated at Sat Jun 13 13:20:13 2026 by rpki-client