$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e3689023-3ce9-3c35-be7a-80f054d80922.roa File: e3689023-3ce9-3c35-be7a-80f054d80922.roa (raw, json) Hash identifier: gUbQjrzfJ+E5Yz7VCfxME3ASdzK8y/gmE5AIC3QBCM4= Subject key identifier: A3:64:1F:53:67:0D:53:1F:40:11:EA:F9:D0:35:7B:C0:8D:1A:60:D5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1E4470A05431A3CD8009DD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e3689023-3ce9-3c35-be7a-80f054d80922.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 396566 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:70:a0:54:31:a3:cd:80:09:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=d8d45844-f5f0-4255-85b8-142b16fc4ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c4:1a:c3:1a:1c:b6:05:0c:51:b6:09:77:e5: c1:90:5b:5d:5a:8d:33:e9:58:5b:1e:4d:6d:e5:b8: 31:b4:4e:c9:37:15:f0:43:2d:de:c5:70:c4:b8:a1: 50:46:31:64:d1:2e:61:9f:b7:f3:c1:fa:86:af:15: 85:15:89:e2:0d:a9:59:96:df:19:1f:18:d5:b8:cd: 73:e0:79:d2:24:b3:17:36:49:0b:00:86:fe:4f:c7: 98:fd:f7:6f:ff:ca:f6:4c:8a:9d:03:0b:4a:37:6f: 58:85:1e:84:20:26:db:5f:b5:be:98:b1:60:d9:aa: 00:3c:a7:32:a1:66:f1:70:33:db:9c:de:f1:a0:6e: 47:9f:db:86:da:b4:e9:d8:77:c0:23:9c:d0:98:b5: 67:49:87:1f:82:56:05:84:d0:36:5b:2b:fc:c6:1b: 52:10:80:d0:c2:79:e7:10:d7:c0:6c:46:46:d8:20: f1:9a:3e:4e:46:92:f7:50:81:bc:56:0b:a8:6e:d0: ad:88:73:ce:d2:bb:64:cd:51:8e:38:f6:8a:24:6c: ed:af:f9:90:3f:28:44:c4:f3:14:e8:77:b0:78:be: 03:12:29:b7:cc:5f:c7:7a:de:57:0f:98:8e:0a:6b: 45:5c:ed:6c:25:1d:58:1e:b0:f7:bc:a7:bf:2c:92: 85:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:64:1F:53:67:0D:53:1F:40:11:EA:F9:D0:35:7B:C0:8D:1A:60:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e3689023-3ce9-3c35-be7a-80f054d80922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:bc:82:7c:13:d7:04:5a:7f:b6:38:fd:35:f3:fa:c5:fc:53: 1b:49:b0:79:91:8f:b8:83:cc:83:1d:97:30:fd:f1:31:7f:26: 3d:9a:82:e0:2b:3c:7f:d4:7d:27:89:2f:28:3f:4a:f4:71:90: f2:ab:9c:0a:29:bf:43:50:07:66:95:3a:4a:c0:fb:c2:53:6f: 67:33:a0:1e:b9:5e:09:ec:d1:32:b1:51:83:e9:7f:48:a2:bc: e1:51:da:61:9f:d7:8a:ba:79:a4:f4:2f:30:4a:a5:95:18:8b: 43:af:45:24:e8:17:1e:eb:cf:b4:89:cf:dd:30:8e:89:1c:ff: 0b:ce:25:42:41:41:f9:e1:8e:01:1e:c8:7e:bb:05:75:06:0a: 0b:be:28:a6:5e:de:e4:47:99:60:84:49:27:65:38:fa:42:e9: ca:d4:b6:24:24:38:e1:c2:d8:dc:1b:1a:74:d8:36:4c:5e:63: 0d:36:d9:9d:f2:d0:69:c3:56:59:79:33:fe:0e:cd:d4:28:76: 54:3d:a2:a9:6e:e5:6f:52:ed:aa:02:bd:5e:b5:a1:e2:a1:b4: 2d:31:5a:3c:c3:56:26:50:33:7d:22:ca:15:69:d1:75:d3:48: b2:d9:e5:63:21:5c:12:5b:15:71:33:ab:21:f5:82:bc:a1:0f: b9:43:28:81 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4eRHCgVDGjzYAJ3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk ZDhkNDU4NDQtZjVmMC00MjU1LTg1YjgtMTQyYjE2ZmM0ZWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsQawxoctgUMUbYJd+XBkFtdWo0z6VhbHk1t 5bgxtE7JNxXwQy3exXDEuKFQRjFk0S5hn7fzwfqGrxWFFYniDalZlt8ZHxjVuM1z 4HnSJLMXNkkLAIb+T8eY/fdv/8r2TIqdAwtKN29YhR6EICbbX7W+mLFg2aoAPKcy oWbxcDPbnN7xoG5Hn9uG2rTp2HfAI5zQmLVnSYcfglYFhNA2Wyv8xhtSEIDQwnnn ENfAbEZG2CDxmj5ORpL3UIG8VguobtCtiHPO0rtkzVGOOPaKJGztr/mQPyhExPMU 6HeweL4DEim3zF/Het5XD5iOCmtFXO1sJR1YHrD3vKe/LJKFdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKNkH1NnDVMfQBHq+dA1e8CNGmDVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTM2ODkwMjMtM2NlOS0z YzM1LWJlN2EtODBmMDU0ZDgwOTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAEvIJ8E9cEWn+2OP018/rF/FMbSbB5kY+4g8yDHZcw/fExfyY9moLg Kzx/1H0niS8oP0r0cZDyq5wKKb9DUAdmlTpKwPvCU29nM6AeuV4J7NEysVGD6X9I orzhUdphn9eKunmk9C8wSqWVGItDr0Uk6Bce68+0ic/dMI6JHP8LziVCQUH54Y4B Hsh+uwV1BgoLviimXt7kR5lghEknZTj6QunK1LYkJDjhwtjcGxp02DZMXmMNNtmd 8tBpw1ZZeTP+Ds3UKHZUPaKpbuVvUu2qAr1etaHiobQtMVo8w1YmUDN9IsoVadF1 00iy2eVjIVwSWxVxM6sh9YK8oQ+5QyiB -----END CERTIFICATE-----Generated at Sat Jun 13 16:58:08 2026 by rpki-client