$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df69f49d-da73-3fac-81df-78a8bc3c1b5a.roa File: df69f49d-da73-3fac-81df-78a8bc3c1b5a.roa (raw, json) Hash identifier: HTBfQV9oQnlFeK+ln8bqTIPfMkfinoSTuLTozoJiTe0= Subject key identifier: 9C:4B:5F:8B:08:87:20:C3:42:19:00:A0:E2:4F:98:7D:89:11:88:9E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1E44745C0D73701541169E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df69f49d-da73-3fac-81df-78a8bc3c1b5a.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 396593 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:74:5c:0d:73:70:15:41:16:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=b9af1487-21a7-49dd-bd6f-0fa2d933a15c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ef:46:ae:15:48:a9:f5:90:76:d2:24:1f:0c: 1a:88:ae:8f:18:25:62:7f:7e:54:50:bd:9f:d8:e6: b5:60:04:f4:1e:da:b1:ce:f0:76:14:dc:00:91:61: 79:a3:45:53:1f:16:8e:dd:45:3f:f0:db:c6:85:f1: a4:6b:85:cc:9e:c5:91:69:72:86:02:a3:43:48:b9: 69:dd:00:64:a3:59:84:b7:41:c6:12:3c:d5:98:8e: 0c:b2:43:d7:bb:42:c7:0f:b7:f4:c4:be:9a:3d:2a: 99:66:b9:2c:e0:25:6d:c5:12:34:63:01:f0:05:5d: 97:04:6c:9d:36:c2:b6:ce:a9:07:02:10:a2:34:cf: 94:09:94:ea:f5:12:5e:8b:17:66:25:f4:59:87:af: 3b:0f:f4:17:23:02:38:1f:1a:51:62:fc:57:3d:1a: a3:48:e0:ce:0e:01:80:c1:58:f4:42:3f:2f:80:8e: b0:69:75:71:80:15:e5:4d:7c:78:f4:4b:f3:17:be: 43:aa:22:d8:94:8c:cd:07:75:d1:b3:af:e0:8c:4f: 70:88:c6:ef:94:66:f5:bd:0f:35:bf:32:ef:09:f2: f2:73:bc:26:24:2b:81:d8:34:cb:78:bb:95:3b:9f: 6c:b6:ab:04:b2:dc:f4:60:59:a0:e9:81:97:38:43: c9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4B:5F:8B:08:87:20:C3:42:19:00:A0:E2:4F:98:7D:89:11:88:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df69f49d-da73-3fac-81df-78a8bc3c1b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:c0:2e:09:9c:b6:43:39:c6:25:e9:6d:48:f5:d4:28:e8:95: 66:9f:bd:8d:d1:ea:91:c4:bc:a4:c0:27:a2:0e:37:c9:2c:67: 6a:9b:64:55:c1:ca:ba:51:29:16:9f:7f:83:fd:f6:d9:a3:4b: a8:c5:25:32:a2:0f:5e:6e:55:56:83:82:11:ee:5d:e8:49:a9: 1f:9f:8c:c0:e9:2b:7a:20:0d:cc:ca:50:08:a4:d2:fb:fe:7a: c6:0d:8a:aa:8b:75:32:d8:8c:78:92:48:8b:77:ac:3e:49:80: 5e:24:24:ff:a5:2a:67:bf:f7:88:61:c1:86:b6:6d:00:82:6b: 83:90:74:fe:38:dd:c5:c6:86:a1:63:65:76:d9:59:1c:0a:cb: d9:fa:d9:07:f0:0b:2b:2f:f1:3d:93:b1:d5:53:9b:2b:3a:5b: d1:0e:a7:55:55:48:3d:6d:7d:9d:74:16:32:8f:dc:24:aa:6e: 98:4f:ad:23:20:c1:e3:cb:35:5c:22:c9:80:a4:bf:1b:08:08: 28:6b:cf:dd:4a:74:4a:4f:3e:50:4f:f1:a0:df:92:75:ca:78: df:47:45:2b:a4:6a:c6:56:fd:0a:ab:33:96:4d:72:94:71:b8: ab:56:07:6e:73:7a:e0:42:09:22:27:7d:46:4c:15:e5:da:45: 8d:55:eb:b7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4eRHRcDXNwFUEWnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk YjlhZjE0ODctMjFhNy00OWRkLWJkNmYtMGZhMmQ5MzNhMTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO9GrhVIqfWQdtIkHwwaiK6PGCVif35UUL2f 2Oa1YAT0HtqxzvB2FNwAkWF5o0VTHxaO3UU/8NvGhfGka4XMnsWRaXKGAqNDSLlp 3QBko1mEt0HGEjzVmI4MskPXu0LHD7f0xL6aPSqZZrks4CVtxRI0YwHwBV2XBGyd NsK2zqkHAhCiNM+UCZTq9RJeixdmJfRZh687D/QXIwI4HxpRYvxXPRqjSODODgGA wVj0Qj8vgI6waXVxgBXlTXx49EvzF75DqiLYlIzNB3XRs6/gjE9wiMbvlGb1vQ81 vzLvCfLyc7wmJCuB2DTLeLuVO59stqsEstz0YFmg6YGXOEPJDwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJxLX4sIhyDDQhkAoOJPmH2JEYieMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGY2OWY0OWQtZGE3My0z ZmFjLTgxZGYtNzhhOGJjM2MxYjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAWwC4JnLZDOcYl6W1I9dQo6JVmn72N0eqRxLykwCeiDjfJLGdqm2RV wcq6USkWn3+D/fbZo0uoxSUyog9eblVWg4IR7l3oSakfn4zA6St6IA3MylAIpNL7 /nrGDYqqi3Uy2Ix4kkiLd6w+SYBeJCT/pSpnv/eIYcGGtm0AgmuDkHT+ON3Fxoah Y2V22VkcCsvZ+tkH8AsrL/E9k7HVU5srOlvRDqdVVUg9bX2ddBYyj9wkqm6YT60j IMHjyzVcIsmApL8bCAgoa8/dSnRKTz5QT/Gg35J1ynjfR0UrpGrGVv0KqzOWTXKU cbirVgduc3rgQgkiJ31GTBXl2kWNVeu3 -----END CERTIFICATE-----Generated at Sat Jun 13 13:15:48 2026 by rpki-client