$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef653022-c567-35f5-b846-8c4d43059dd0.roa File: ef653022-c567-35f5-b846-8c4d43059dd0.roa (raw, json) Hash identifier: TNhumqDg9SQGIAa3ZC2xSHIPxigvq2vTq1H8/oAMIZ0= Subject key identifier: F9:E4:B0:D2:91:69:D8:8D:4B:95:08:55:0F:45:E2:2A:20:D2:06:48 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1E446EEB6223A6922D32B700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef653022-c567-35f5-b846-8c4d43059dd0.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 396562 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:6e:eb:62:23:a6:92:2d:32:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=fb0a8c6f-6835-48d0-8115-adeab00d220a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:79:fc:a2:e7:fc:e9:8a:bf:27:ba:52:98:fb: 79:09:bc:98:b7:a9:f9:94:85:d7:4f:29:84:f7:47: a8:ab:49:a5:6e:20:6c:03:43:13:ee:99:5b:a8:1a: e1:4e:95:a3:e2:a6:9b:0a:36:76:6f:33:16:1f:ad: 82:9b:1b:c3:d2:8a:92:78:74:1e:15:e6:c3:bf:9f: 80:dc:0f:79:5e:ec:b1:b4:43:df:31:f7:dc:ec:4c: c6:cd:73:08:43:29:e5:d3:12:aa:13:73:08:67:be: 6f:58:c8:cd:82:56:86:aa:e1:b2:f0:ce:cd:91:a0: 86:c9:3e:33:e9:a2:fb:6e:88:b3:74:0c:c2:89:f3: 07:e7:4f:45:62:11:ea:1e:76:7e:ea:a9:ca:7b:bd: fc:c3:55:b5:ac:73:90:49:61:af:be:69:cd:f5:11: d9:7b:8e:c3:64:a8:a8:17:5d:d6:f3:e1:a9:41:fa: 7d:87:df:90:83:46:53:37:75:6c:bb:6d:e0:89:98: 2e:aa:6d:6e:86:3e:e3:1c:4f:7c:f6:5d:11:7f:6c: 6a:8f:be:a4:07:ab:48:0e:45:4e:d3:c9:d4:05:80: 74:db:5d:84:e9:d4:42:79:d9:48:b3:71:33:07:b0: 0d:25:f2:38:86:65:cc:bf:02:64:c5:13:91:5a:da: ad:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E4:B0:D2:91:69:D8:8D:4B:95:08:55:0F:45:E2:2A:20:D2:06:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef653022-c567-35f5-b846-8c4d43059dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:03:c7:83:50:95:2c:8a:bc:a3:f4:31:34:96:76:1e:51:61: 32:66:48:23:06:0c:69:01:41:9c:32:33:30:6a:1a:78:18:86: 7e:a7:b9:65:bd:40:65:ee:39:18:25:a0:af:23:69:e6:6a:65: 29:d0:4a:07:8a:15:30:33:84:ee:8c:71:5d:13:91:e4:a3:5f: 8f:87:8e:54:f9:08:5a:ee:cc:1d:80:16:2e:e5:fa:6f:7b:7a: 71:d5:57:bf:02:3e:cb:29:66:9e:9c:87:1d:52:32:e9:c2:22: ec:ed:92:d2:50:ef:75:bc:b7:65:56:7b:67:ca:ee:5a:e6:4f: 89:4f:2d:85:1a:a6:16:c4:45:3c:55:1a:6b:74:a8:28:e0:f9: d3:6a:a5:67:8d:cb:22:8b:2b:04:53:b4:53:83:64:85:9a:b3: d8:58:3d:f9:e7:4f:2b:7d:e0:ce:db:6a:db:ce:7a:97:d6:23: 7f:83:06:e6:86:04:54:0b:75:ba:a5:ba:5e:e9:59:7b:96:8b: 52:16:bd:ca:93:e4:e1:e5:a4:bd:51:9e:e7:3b:ae:73:fe:d6: e6:85:f5:20:39:b5:71:ed:48:e3:4a:2b:d7:9d:68:03:f0:60: 11:1e:61:93:fb:56:c9:04:cd:f6:a3:84:2a:ca:22:0b:d7:89: 82:60:50:96 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4eRG7rYiOmki0ytwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk ZmIwYThjNmYtNjgzNS00OGQwLTgxMTUtYWRlYWIwMGQyMjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHn8ouf86Yq/J7pSmPt5CbyYt6n5lIXXTymE 90eoq0mlbiBsA0MT7plbqBrhTpWj4qabCjZ2bzMWH62CmxvD0oqSeHQeFebDv5+A 3A95XuyxtEPfMffc7EzGzXMIQynl0xKqE3MIZ75vWMjNglaGquGy8M7NkaCGyT4z 6aL7boizdAzCifMH509FYhHqHnZ+6qnKe738w1W1rHOQSWGvvmnN9RHZe47DZKio F13W8+GpQfp9h9+Qg0ZTN3Vsu23giZguqm1uhj7jHE989l0Rf2xqj76kB6tIDkVO 08nUBYB0212E6dRCedlIs3EzB7ANJfI4hmXMvwJkxRORWtqt2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPnksNKRadiNS5UIVQ9F4iog0gZIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY2NTMwMjItYzU2Ny0z NWY1LWI4NDYtOGM0ZDQzMDU5ZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2A8eDUJUsiryj9DE0lnYeUWEyZkgjBgxpAUGcMjMwahp4GIZ+p7ll vUBl7jkYJaCvI2nmamUp0EoHihUwM4TujHFdE5Hko1+Ph45U+Qha7swdgBYu5fpv e3px1Ve/Aj7LKWaenIcdUjLpwiLs7ZLSUO91vLdlVntnyu5a5k+JTy2FGqYWxEU8 VRprdKgo4PnTaqVnjcsiiysEU7RTg2SFmrPYWD35508rfeDO22rbznqX1iN/gwbm hgRUC3W6pbpe6Vl7lotSFr3Kk+Th5aS9UZ7nO65z/tbmhfUgObVx7UjjSivXnWgD 8GARHmGT+1bJBM32o4QqyiIL14mCYFCW -----END CERTIFICATE-----Generated at Sat Jun 13 14:58:27 2026 by rpki-client