$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef598240-4523-3115-b8df-c7e60a532a58.roa File: ef598240-4523-3115-b8df-c7e60a532a58.roa (raw, json) Hash identifier: XzpTBpo1JpQZlJSytx6QqnNZgTd5nG2IMgY/7dJCzMg= Subject key identifier: 25:8F:EB:F1:0B:21:B3:4C:2F:F3:32:CF:70:2E:27:13:F3:5F:DA:40 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1E447196FADA026CD5CA4A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef598240-4523-3115-b8df-c7e60a532a58.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 396561 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:71:96:fa:da:02:6c:d5:ca:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=aafdaf20-fe0a-4ea5-a242-a77a783eeb6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:37:ef:7e:4d:90:67:06:6f:89:4a:1e:e3:ce: 1c:8b:d3:9f:a1:49:76:a8:ef:aa:25:fd:96:bd:3b: 98:57:e1:b7:6e:49:7c:f4:31:ee:a9:6c:1d:7a:4b: 68:47:8e:d9:de:f8:0e:1b:c8:b7:57:15:d7:a5:a7: 96:bd:00:3f:8d:23:92:dd:5a:42:9b:9f:d8:1d:39: c0:e3:3f:b3:05:a3:09:c9:eb:74:92:9b:c6:77:b4: 4b:e0:59:83:87:74:f0:00:f3:27:a3:fe:40:11:b9: 46:16:1b:8b:a9:aa:2d:fe:5e:13:e1:46:79:04:59: 01:e7:ca:0e:4f:45:d2:b8:96:68:87:dc:5a:05:c0: 18:64:bd:c1:b9:40:a9:a6:58:fb:6c:cb:83:48:7d: 12:95:a2:c9:80:53:99:37:69:77:06:5b:40:1f:91: b2:3a:6c:2f:76:3f:de:be:d7:69:5c:7b:4f:73:48: e2:04:d1:67:e0:48:40:5d:60:4e:57:36:aa:83:4b: 64:d7:0f:91:ec:88:5c:6b:bf:91:6f:ed:1a:94:cf: 28:f1:4b:20:20:a9:fc:d9:d9:d0:00:84:fa:31:97: 09:38:6c:e6:dc:cb:74:25:61:38:30:11:3e:3d:80: 83:14:15:1a:d1:38:11:cd:18:6f:78:b3:27:ab:ac: 16:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8F:EB:F1:0B:21:B3:4C:2F:F3:32:CF:70:2E:27:13:F3:5F:DA:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef598240-4523-3115-b8df-c7e60a532a58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a5:b8:7b:8d:4b:97:15:e1:f3:ea:4b:a1:df:b6:4d:81:e7: c1:e4:6f:85:ae:ce:59:08:cb:2a:81:e6:88:6f:3c:68:4b:f7: ec:aa:2a:75:d9:25:8a:1a:f0:3a:a6:10:aa:6d:74:78:a2:bc: 9a:6a:6e:d5:1b:20:30:d0:77:30:1c:39:40:2d:b1:9d:41:29: 5e:ea:b2:0c:ae:c1:d9:76:0a:06:9b:09:4c:11:e6:c0:3e:d3: 5a:8e:d4:23:bf:30:0d:86:0c:4d:69:36:54:12:ba:a6:75:fe: b8:86:e6:5e:cb:80:71:ae:26:74:78:0d:1b:2f:98:b7:37:54: c4:99:a6:31:51:c6:46:3d:73:47:8f:d5:49:67:d0:53:b2:2c: 40:9a:d0:03:b6:01:88:fe:27:da:4c:60:60:a8:f7:be:bd:bf: 17:bb:21:31:b9:e2:65:9f:37:15:d0:5a:7a:13:96:8e:9d:ec: 8d:0f:e9:df:ce:45:14:45:53:d8:5f:18:5a:e4:b1:cb:e4:90: 26:9b:1e:b3:a9:dd:de:a2:6b:62:2f:4f:59:5f:5e:af:eb:6a: 97:a5:f2:75:1c:77:9c:09:24:72:39:65:95:4b:e4:5e:57:ee: c0:7a:20:b1:f8:08:f7:80:24:e6:72:bb:51:ee:5b:da:b9:da: 80:74:23:60 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4eRHGW+toCbNXKSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk YWFmZGFmMjAtZmUwYS00ZWE1LWEyNDItYTc3YTc4M2VlYjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTfvfk2QZwZviUoe484ci9OfoUl2qO+qJf2W vTuYV+G3bkl89DHuqWwdektoR47Z3vgOG8i3VxXXpaeWvQA/jSOS3VpCm5/YHTnA 4z+zBaMJyet0kpvGd7RL4FmDh3TwAPMno/5AEblGFhuLqaot/l4T4UZ5BFkB58oO T0XSuJZoh9xaBcAYZL3BuUCpplj7bMuDSH0SlaLJgFOZN2l3BltAH5GyOmwvdj/e vtdpXHtPc0jiBNFn4EhAXWBOVzaqg0tk1w+R7Ihca7+Rb+0alM8o8UsgIKn82dnQ AIT6MZcJOGzm3Mt0JWE4MBE+PYCDFBUa0TgRzRhveLMnq6wWdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCWP6/ELIbNML/Myz3AuJxPzX9pAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY1OTgyNDAtNDUyMy0z MTE1LWI4ZGYtYzdlNjBhNTMyYTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAvpbh7jUuXFeHz6kuh37ZNgefB5G+Frs5ZCMsqgeaIbzxoS/fsqip1 2SWKGvA6phCqbXR4oryaam7VGyAw0HcwHDlALbGdQSle6rIMrsHZdgoGmwlMEebA PtNajtQjvzANhgxNaTZUErqmdf64huZey4BxriZ0eA0bL5i3N1TEmaYxUcZGPXNH j9VJZ9BTsixAmtADtgGI/ifaTGBgqPe+vb8XuyExueJlnzcV0Fp6E5aOneyND+nf zkUURVPYXxha5LHL5JAmmx6zqd3eomtiL09ZX16v62qXpfJ1HHecCSRyOWWVS+Re V+7AeiCx+Aj3gCTmcrtR7lvaudqAdCNg -----END CERTIFICATE-----Generated at Sat Jun 13 14:54:10 2026 by rpki-client