$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8dfa8ec-1f57-3431-962a-33787eea5e55.roa File: f8dfa8ec-1f57-3431-962a-33787eea5e55.roa (raw, json) Hash identifier: ovO6e95uSpK3yATesU3BWAuZyT+jbiA6obmgJ8k7LRM= Subject key identifier: 28:6B:97:9D:FE:C1:E6:34:85:3E:74:E9:33:A7:29:C5:EF:77:29:AB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E1E446FA2A01FA8A074785D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8dfa8ec-1f57-3431-962a-33787eea5e55.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 396543 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:6f:a2:a0:1f:a8:a0:74:78:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=f9a27afa-3359-4792-ac0a-cdc12e5eacf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:71:a5:75:3a:36:8d:75:17:17:8c:2d:f2:13: c1:cc:23:00:1b:18:b3:22:2a:90:6a:32:bf:2e:8e: 36:51:d4:f0:be:f9:c8:a0:b7:f2:f1:c3:a7:1e:16: 84:e0:0b:68:39:3b:9e:e8:c6:e9:72:8c:39:74:74: 42:00:6b:9e:8a:94:54:c9:bf:61:cc:33:64:ac:b8: 14:f5:d5:37:b4:a3:df:02:57:5c:9f:9a:d6:18:35: f2:cc:38:5d:dc:9b:8d:66:70:ec:78:4f:01:8e:34: 13:bd:04:ab:63:3a:e2:d5:bc:78:6f:a1:90:80:fb: ac:e9:69:fc:ac:b9:8b:68:e9:81:19:e0:05:2e:76: d1:78:40:93:53:3b:91:e8:4b:22:ec:2f:a1:0c:a8: db:1a:39:8c:cc:8a:1d:63:d6:63:a7:7d:eb:7d:9a: aa:41:ff:89:ad:df:b2:87:70:1d:41:6b:c2:f9:17: ce:37:3c:43:ee:de:78:84:51:d5:89:a3:6d:4e:bf: 7c:50:b6:42:86:17:6e:a3:ee:ec:ab:83:c1:d6:b0: a6:93:24:f8:4b:06:08:72:24:27:b5:93:5d:0c:d4: a8:0c:4b:e3:2f:4b:7b:04:32:9a:9f:df:26:ef:8f: 42:21:3e:a0:df:54:8f:cc:e3:c5:23:83:9e:2b:b1: 7a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6B:97:9D:FE:C1:E6:34:85:3E:74:E9:33:A7:29:C5:EF:77:29:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8dfa8ec-1f57-3431-962a-33787eea5e55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:1c:03:57:84:f5:c5:3b:f5:c1:16:e9:00:91:14:90:cc:9d: 02:35:f6:86:b0:31:7b:3a:bc:9c:ed:1c:99:35:82:0b:9e:c7: 13:fd:3a:26:e0:52:b4:81:60:ba:13:c5:af:d8:e8:76:d5:07: fe:a5:d7:e3:c2:ab:d4:3d:e5:d2:81:89:58:ed:51:48:44:d7: dc:a7:f6:ff:3e:7c:77:27:3f:b5:b4:c2:df:f7:01:a9:06:b1: 4e:fa:ea:11:04:af:9c:44:c2:2f:0c:2e:d5:4c:db:cd:df:79: dc:26:d6:f2:4b:c3:4b:d2:95:bc:3d:0e:12:02:ba:f8:43:f4: 70:22:fc:c6:80:e6:60:d2:86:cf:98:0a:17:6c:dc:9a:17:4f: ab:cf:f9:c1:60:53:3b:a4:f2:ee:3b:60:6b:83:c9:4d:77:de: d6:82:57:b9:f9:eb:f6:90:ce:8f:25:75:77:cd:51:ef:ef:32: 4e:5c:ba:93:7c:13:d9:52:b8:96:b5:80:f0:89:3e:de:8f:d2: 30:6f:4e:90:eb:1d:4b:fe:78:35:a2:53:85:17:49:e8:cc:56: 95:cc:4a:3f:7e:5c:6f:52:29:47:a3:b1:64:f8:28:ed:33:50: 97:52:c7:a9:50:e0:c7:39:0e:cd:a8:09:a4:e8:b6:b4:1c:8c: e4:56:2b:ca -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4eRG+ioB+ooHR4XQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk ZjlhMjdhZmEtMzM1OS00NzkyLWFjMGEtY2RjMTJlNWVhY2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHGldTo2jXUXF4wt8hPBzCMAGxizIiqQajK/ Lo42UdTwvvnIoLfy8cOnHhaE4AtoOTue6Mbpcow5dHRCAGueipRUyb9hzDNkrLgU 9dU3tKPfAldcn5rWGDXyzDhd3JuNZnDseE8BjjQTvQSrYzri1bx4b6GQgPus6Wn8 rLmLaOmBGeAFLnbReECTUzuR6Esi7C+hDKjbGjmMzIodY9Zjp33rfZqqQf+Jrd+y h3AdQWvC+RfONzxD7t54hFHViaNtTr98ULZChhduo+7sq4PB1rCmkyT4SwYIciQn tZNdDNSoDEvjL0t7BDKan98m749CIT6g31SPzOPFI4OeK7F6CQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFChrl53+weY0hT506TOnKcXvdymrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjhkZmE4ZWMtMWY1Ny0z NDMxLTk2MmEtMzM3ODdlZWE1ZTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA1HANXhPXFO/XBFukAkRSQzJ0CNfaGsDF7Oryc7RyZNYILnscT/Tom 4FK0gWC6E8Wv2Oh21Qf+pdfjwqvUPeXSgYlY7VFIRNfcp/b/Pnx3Jz+1tMLf9wGp BrFO+uoRBK+cRMIvDC7VTNvN33ncJtbyS8NL0pW8PQ4SArr4Q/RwIvzGgOZg0obP mAoXbNyaF0+rz/nBYFM7pPLuO2Brg8lNd97Wgle5+ev2kM6PJXV3zVHv7zJOXLqT fBPZUriWtYDwiT7ej9Iwb06Q6x1L/ng1olOFF0nozFaVzEo/flxvUilHo7Fk+Cjt M1CXUsepUODHOQ7NqAmk6La0HIzkVivK -----END CERTIFICATE-----Generated at Sat Jun 13 14:30:06 2026 by rpki-client