$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fe6b1a73-4c0e-39f9-a172-3e35daf445e9.roa File: fe6b1a73-4c0e-39f9-a172-3e35daf445e9.roa (raw, json) Hash identifier: lw2jJ5bhlePDhTfc9XefxbmCFAVGOrGT9fBhggTtM6c= Subject key identifier: 27:B9:32:1E:A1:41:8E:D0:D1:A0:95:29:BC:7A:93:12:B6:6D:10:75 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DD8F07B2A235A9020EEAEA780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fe6b1a73-4c0e-39f9-a172-3e35daf445e9.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 396615 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:7b:2a:23:5a:90:20:ee:ae:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=d28fccfe-46a1-49dd-89af-1f3c2c3b8f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e0:f5:5c:a6:26:c8:55:87:70:84:bb:ce:f3: 7a:4d:66:ae:cd:c8:32:d4:ad:cf:18:e9:79:ac:e3: 27:e4:32:c3:58:07:6c:8a:e2:41:84:89:0f:b8:d7: 55:e3:2d:70:92:1a:0f:54:c9:69:aa:e6:91:0d:74: b3:db:da:9e:7d:1b:99:9d:6e:3f:03:39:1d:4c:93: f6:27:b0:a5:06:4e:9d:ca:d7:b6:ff:37:d6:34:e1: 04:58:a2:6a:15:15:0c:21:fc:90:dc:cb:dc:44:f9: d4:d1:b7:3b:f3:5f:ac:0d:bb:c9:82:95:90:11:5c: 6e:77:12:fd:3e:64:17:e9:48:88:83:e0:b6:d9:76: 0c:55:c0:67:17:69:bd:35:62:f5:f7:fc:e9:1e:5e: c8:6d:5e:08:88:c9:25:ad:5d:3f:07:bd:fe:66:00: 16:25:cf:e4:3c:98:dd:28:b8:c9:0f:54:7e:15:97: 3a:b7:00:28:14:ed:b3:e3:fb:cd:f8:7a:ec:fa:37: ec:34:5c:02:76:1e:3b:70:df:c2:3d:96:8e:b8:bd: fc:49:58:2e:ae:02:7e:16:45:d7:45:95:57:6a:23: 32:c0:37:bf:ea:a7:0d:79:35:1f:fd:be:87:b4:af: 90:86:9f:da:83:87:0c:12:c0:85:c5:28:ef:01:e8: b3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B9:32:1E:A1:41:8E:D0:D1:A0:95:29:BC:7A:93:12:B6:6D:10:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fe6b1a73-4c0e-39f9-a172-3e35daf445e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:45:ad:50:42:f1:e2:15:87:75:eb:4c:1f:bd:1d:6f:0d:a7: 0e:fa:60:fc:e9:3c:f5:b3:ce:ea:32:bc:9a:ff:52:e4:a9:3c: 97:99:15:49:bd:a2:b4:1a:f5:24:f7:bc:0a:e7:f6:43:f4:d4: ce:39:68:da:22:27:18:63:0b:03:a0:07:af:28:9f:19:56:cf: 6f:38:83:de:27:f9:0c:6b:d8:5c:17:72:d7:b7:38:60:28:1b: 21:3d:b8:92:fd:dc:5e:71:62:f4:9e:62:91:a6:13:27:21:fa: cb:93:a6:f5:2e:5f:47:4d:69:93:00:5f:c7:3d:ca:d4:0a:04: 3f:e0:06:05:79:c9:97:5a:cd:1e:0e:75:ae:b2:c5:7c:e8:24: 2b:f6:d8:46:58:45:c2:69:4b:22:09:6d:10:c5:41:93:8e:08: 8e:0b:a2:a7:9e:bb:7c:17:34:38:e5:d0:92:e2:9f:81:0a:be: 96:a4:92:88:bb:6c:26:5d:09:01:69:4e:79:3b:d7:35:5b:98: 92:ac:5d:ef:49:40:5b:b9:da:48:0a:7b:65:2f:e5:53:c8:86: 63:2d:76:bd:95:84:4b:72:ef:59:24:de:13:c3:83:b3:42:90: 92:97:5e:84:0d:4b:41:72:9c:6a:1d:40:91:5f:33:75:0c:d5: d9:a5:6b:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8HsqI1qQIO6up4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk ZDI4ZmNjZmUtNDZhMS00OWRkLTg5YWYtMWYzYzJjM2I4ZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOD1XKYmyFWHcIS7zvN6TWauzcgy1K3PGOl5 rOMn5DLDWAdsiuJBhIkPuNdV4y1wkhoPVMlpquaRDXSz29qefRuZnW4/AzkdTJP2 J7ClBk6dyte2/zfWNOEEWKJqFRUMIfyQ3MvcRPnU0bc781+sDbvJgpWQEVxudxL9 PmQX6UiIg+C22XYMVcBnF2m9NWL19/zpHl7IbV4IiMklrV0/B73+ZgAWJc/kPJjd KLjJD1R+FZc6twAoFO2z4/vN+Hrs+jfsNFwCdh47cN/CPZaOuL38SVgurgJ+FkXX RZVXaiMywDe/6qcNeTUf/b6HtK+Qhp/ag4cMEsCFxSjvAeizXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCe5Mh6hQY7Q0aCVKbx6kxK2bRB1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmU2YjFhNzMtNGMwZS0z OWY5LWExNzItM2UzNWRhZjQ0NWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpFrVBC8eIVh3XrTB+9HW8Npw76YPzpPPWzzuoyvJr/UuSpPJeZFUm9 orQa9ST3vArn9kP01M45aNoiJxhjCwOgB68onxlWz284g94n+Qxr2FwXcte3OGAo GyE9uJL93F5xYvSeYpGmEych+suTpvUuX0dNaZMAX8c9ytQKBD/gBgV5yZdazR4O da6yxXzoJCv22EZYRcJpSyIJbRDFQZOOCI4Loqeeu3wXNDjl0JLin4EKvpakkoi7 bCZdCQFpTnk71zVbmJKsXe9JQFu52kgKe2Uv5VPIhmMtdr2VhEty71kk3hPDg7NC kJKXXoQNS0FynGodQJFfM3UM1dmla40= -----END CERTIFICATE-----Generated at Sat Jun 13 13:47:31 2026 by rpki-client