$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/8cd9bb4a-ed14-375c-aa14-4200b366035f.roa File: 8cd9bb4a-ed14-375c-aa14-4200b366035f.roa (raw, json) Hash identifier: m1GLtcsRPfUbtz/+J7WZ2+wk4UXpQJlJ2aEXmkFe6Dw= Subject key identifier: AA:5D:53:30:2E:41:F6:38:10:FC:7E:3D:59:7C:5B:A4:F7:3D:55:E5 Certificate issuer: /CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Certificate serial: 010D0C9F4328584DBFD05702F88AC801F41FD300 Authority key identifier: 31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/8cd9bb4a-ed14-375c-aa14-4200b366035f.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 14618 IP address blocks: 209.127.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:57:02:f8:8a:c8:01:f4:1f:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=ec8d708e-485a-451f-8890-d708f18a63ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7e:d6:78:33:e0:82:9e:90:8c:4d:38:cd:85: da:f6:50:c2:fb:88:35:e6:df:05:e9:7a:b4:fa:15: 04:e4:e5:a3:94:81:d2:43:7a:19:bc:21:5f:f9:68: 3a:42:11:4a:a5:0a:27:05:74:d4:d7:ad:0f:ea:fa: b2:68:ca:12:17:d7:3f:e3:06:e4:14:a2:76:2e:40: b1:dc:fc:9a:16:e6:e5:2f:5b:80:2e:46:da:78:fe: 60:59:ad:4e:1a:8e:9d:d2:e0:0c:5c:5e:27:cd:e8: 95:46:8b:7d:57:c9:c5:b9:26:bf:2d:c7:02:af:e1: 8f:cb:8a:5d:ff:de:27:b7:43:16:46:e4:2d:ff:4a: 2a:2e:da:41:1d:12:e8:e1:69:a2:65:67:c5:47:b2: 53:b3:0a:2a:d0:41:88:ac:8e:51:30:44:65:a3:1b: a2:cc:f1:14:69:81:d3:66:54:ce:32:6f:cb:41:2f: a8:64:c3:d0:50:59:da:9f:e4:7f:2a:58:88:a1:71: a4:4e:9a:9b:10:e8:ae:a8:a0:b5:94:bc:35:a6:fa: a1:fb:33:4e:c2:4b:39:8f:2c:50:8e:df:1b:b3:bb: 6c:b4:aa:6c:8b:8e:f1:bf:81:04:5d:cf:46:75:da: 1b:7d:a1:4d:a2:43:92:57:e6:37:c3:09:f5:d6:09: 4e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5D:53:30:2E:41:F6:38:10:FC:7E:3D:59:7C:5B:A4:F7:3D:55:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/8cd9bb4a-ed14-375c-aa14-4200b366035f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl X509v3 Authority Key Identifier: keyid:31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer sbgp-ipAddrBlock: critical IPv4: 209.127.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:de:e4:ad:90:60:c4:c5:7c:d9:5e:78:24:a7:25:a9:12:72: aa:1c:3f:a4:0a:8c:88:0a:d5:2b:25:4e:8e:36:82:a2:6e:6f: 8e:5d:60:26:85:f8:f8:46:cd:ba:2c:4e:10:97:07:84:95:46: 7b:de:c3:29:21:7d:6d:83:e2:4c:fd:c8:44:4a:03:85:4f:8e: b4:ea:2a:bc:be:92:9b:91:2f:f3:24:3f:51:54:39:dc:ff:80: ce:80:c3:ed:30:52:c5:70:30:a6:91:7b:b1:e0:78:0d:3c:a3: 00:b3:a3:ec:bd:fe:5a:8e:15:e7:fc:04:07:56:ba:1f:31:d0: 3a:b4:4a:7f:ab:1f:09:bb:40:e0:18:07:2c:df:0d:f7:5f:62: 5e:83:96:60:98:98:e0:33:52:d8:84:ee:e6:5a:53:af:95:41: 6c:3e:7b:68:0c:3a:72:df:98:b8:91:7d:99:9c:a5:18:50:7c: 74:6e:74:d6:6d:76:fb:34:a2:c4:4f:ba:ed:2e:f3:59:b4:44: c0:b4:a8:07:71:40:35:c5:a9:65:19:82:2b:1f:51:85:92:7d: 5f:4c:58:d3:70:1a:0e:8c:9b:e2:68:d0:ab:d9:14:42:fb:e9: a5:89:97:94:89:50:06:ca:6d:95:04:9e:b4:7c:b1:03:87:8b: 1c:92:74:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0FcC+IrIAfQf0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY4ZWMyNWQtOTMyYS00ZGQ0LThmODMtZjFkYTA0OTA2 OGVjMB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk ZWM4ZDcwOGUtNDg1YS00NTFmLTg4OTAtZDcwOGYxOGE2M2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH7WeDPggp6QjE04zYXa9lDC+4g15t8F6Xq0 +hUE5OWjlIHSQ3oZvCFf+Wg6QhFKpQonBXTU160P6vqyaMoSF9c/4wbkFKJ2LkCx 3PyaFublL1uALkbaeP5gWa1OGo6d0uAMXF4nzeiVRot9V8nFuSa/LccCr+GPy4pd /94nt0MWRuQt/0oqLtpBHRLo4WmiZWfFR7JTswoq0EGIrI5RMERloxuizPEUaYHT ZlTOMm/LQS+oZMPQUFnan+R/KliIoXGkTpqbEOiuqKC1lLw1pvqh+zNOwks5jyxQ jt8bs7tstKpsi47xv4EEXc9GddobfaFNokOSV+Y3wwn11glOlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpdUzAuQfY4EPx+PVl8W6T3PVXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80Zjhl YzI1ZC05MzJhLTRkZDQtOGY4My1mMWRhMDQ5MDY4ZWMvOGNkOWJiNGEtZWQxNC0z NzVjLWFhMTQtNDIwMGIzNjYwMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGY4ZWMyNWQtOTMyYS00ZGQ0LThm ODMtZjFkYTA0OTA2OGVjLzRmOGVjMjVkLTkzMmEtNGRkNC04ZjgzLWYxZGEwNDkw NjhlYy5jcmwwHwYDVR0jBBgwFoAUMcXgnadCF+8nR36OpSmNPzPy5U0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjhlYzI1ZC05MzJhLTRkZDQtOGY4My1mMWRh MDQ5MDY4ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAze5K2QYMTFfNleeCSnJakScqocP6QKjIgK1SslTo42gqJub45dYCaF +PhGzbosThCXB4SVRnvewykhfW2D4kz9yERKA4VPjrTqKry+kpuRL/MkP1FUOdz/ gM6Aw+0wUsVwMKaRe7HgeA08owCzo+y9/lqOFef8BAdWuh8x0Dq0Sn+rHwm7QOAY ByzfDfdfYl6DlmCYmOAzUtiE7uZaU6+VQWw+e2gMOnLfmLiRfZmcpRhQfHRudNZt dvs0osRPuu0u81m0RMC0qAdxQDXFqWUZgisfUYWSfV9MWNNwGg6Mm+Jo0KvZFEL7 6aWJl5SJUAbKbZUEnrR8sQOHixySdNA= -----END CERTIFICATE-----Generated at Wed May 13 15:29:19 2026 by rpki-client