$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa File: 9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa (raw, json) Hash identifier: cwim7p/w6S9rsbwCCj0GAtGmM7iMzRG59tvxD6gbA38= Subject key identifier: 20:7E:F8:25:92:75:BF:66:08:E8:E7:7D:B5:DA:F5:5B:8D:F4:9C:A8 Certificate issuer: /CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Certificate serial: 010D0C9F4328584DBFD056F67D4E9460A1E08740 Authority key identifier: 31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 16509 IP address blocks: 209.127.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:56:f6:7d:4e:94:60:a1:e0:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=36fb9577-dba8-474a-9c26-e78c9683e557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8b:05:c2:60:1a:21:58:aa:2d:d8:3e:b9:53: 03:52:4c:8c:81:dd:ec:83:90:8c:d5:e5:8f:e1:48: 2c:9a:a1:36:e1:1b:19:80:e5:d0:5c:d5:70:93:a9: a8:84:d1:8b:bc:d8:6b:60:97:38:15:7b:5c:d8:d1: d2:8d:56:2f:66:46:28:0b:25:66:d3:f7:7e:5c:f4: 49:4f:ba:8c:e4:34:43:7f:51:07:0f:4d:64:e1:6c: 50:17:a0:94:94:67:84:3f:19:94:07:af:f0:af:07: ed:c1:9f:aa:bb:01:2e:c9:45:96:f0:3c:7a:a5:31: 73:22:84:61:da:98:4d:f9:bf:db:86:ad:e8:2e:39: 02:94:40:8d:11:fb:51:b3:cd:f8:44:ae:33:75:b9: d6:89:8c:d2:a5:ef:f1:76:05:0d:66:4c:10:a6:e9: 48:3d:e4:e0:b3:46:2c:e7:d9:c9:d4:7c:3f:2b:f8: eb:0d:46:83:57:14:4b:6e:83:d4:f8:ea:02:8f:ee: 75:d6:2c:d5:cf:13:e4:2d:76:9d:20:8a:22:2a:af: ef:0b:fd:b4:dd:83:aa:ee:5d:11:ec:a4:83:2c:c8: a3:13:7e:68:9c:c6:eb:0a:5e:15:ea:72:43:7c:56: e6:1e:bb:d0:20:dc:50:81:c2:08:66:dc:7d:0d:43: a4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7E:F8:25:92:75:BF:66:08:E8:E7:7D:B5:DA:F5:5B:8D:F4:9C:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl X509v3 Authority Key Identifier: keyid:31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer sbgp-ipAddrBlock: critical IPv4: 209.127.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:cc:78:1c:a2:bf:a6:d5:f3:29:21:4f:12:bc:1f:9c:0c:da: 96:de:4b:78:86:5c:d9:ba:24:9d:d6:fb:0e:2f:e2:20:cb:3f: f2:4c:e8:eb:92:5b:33:45:8b:80:80:ff:f5:1a:a8:aa:03:7b: 98:d7:0b:54:fe:fa:4e:e1:c7:2b:e3:66:4e:ef:b9:2e:ca:1e: 2f:2c:97:40:e7:98:8e:98:2d:63:a1:4a:47:7c:21:4a:c1:ac: fc:bf:4c:12:9e:5f:36:89:dd:32:ba:8c:6b:55:96:6c:ae:9f: 15:6e:2c:dc:30:43:00:36:92:5c:41:2b:69:84:8f:a7:f7:81: 37:01:bb:3c:99:35:bd:af:ff:05:51:3c:ab:4c:56:0a:d3:11: 3f:a9:0f:fe:16:6d:18:b5:6e:c6:b3:38:68:c4:84:23:b2:a7: e2:0a:35:67:b3:e5:89:06:69:8f:65:e0:b2:3f:92:08:e1:68: 56:d8:a0:2e:c5:07:0d:6a:18:78:ea:c9:ba:bc:be:64:4f:7e: de:99:84:df:c0:31:41:4b:c8:b3:ea:df:3d:a7:b5:d6:3e:ea: ba:a3:e7:9f:47:2a:25:61:25:18:cf:64:0b:84:f7:04:6e:64: c1:3b:be:ac:7e:de:c4:87:59:a6:0a:83:50:89:03:f8:9b:d8: f4:fc:cc:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0Fb2fU6UYKHgh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY4ZWMyNWQtOTMyYS00ZGQ0LThmODMtZjFkYTA0OTA2 OGVjMB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk MzZmYjk1NzctZGJhOC00NzRhLTljMjYtZTc4Yzk2ODNlNTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3osFwmAaIViqLdg+uVMDUkyMgd3sg5CM1eWP 4UgsmqE24RsZgOXQXNVwk6mohNGLvNhrYJc4FXtc2NHSjVYvZkYoCyVm0/d+XPRJ T7qM5DRDf1EHD01k4WxQF6CUlGeEPxmUB6/wrwftwZ+quwEuyUWW8Dx6pTFzIoRh 2phN+b/bhq3oLjkClECNEftRs834RK4zdbnWiYzSpe/xdgUNZkwQpulIPeTgs0Ys 59nJ1Hw/K/jrDUaDVxRLboPU+OoCj+511izVzxPkLXadIIoiKq/vC/203YOq7l0R 7KSDLMijE35onMbrCl4V6nJDfFbmHrvQINxQgcIIZtx9DUOkHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCB++CWSdb9mCOjnfbXa9VuN9JyoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80Zjhl YzI1ZC05MzJhLTRkZDQtOGY4My1mMWRhMDQ5MDY4ZWMvOWMxYWNkNmEtMDdjMC0z NzZlLTg3ZTItYjFhMjk5MmUyYzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGY4ZWMyNWQtOTMyYS00ZGQ0LThm ODMtZjFkYTA0OTA2OGVjLzRmOGVjMjVkLTkzMmEtNGRkNC04ZjgzLWYxZGEwNDkw NjhlYy5jcmwwHwYDVR0jBBgwFoAUMcXgnadCF+8nR36OpSmNPzPy5U0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjhlYzI1ZC05MzJhLTRkZDQtOGY4My1mMWRh MDQ5MDY4ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfMeByiv6bV8ykhTxK8H5wM2pbeS3iGXNm6JJ3W+w4v4iDLP/JM6OuS WzNFi4CA//UaqKoDe5jXC1T++k7hxyvjZk7vuS7KHi8sl0DnmI6YLWOhSkd8IUrB rPy/TBKeXzaJ3TK6jGtVlmyunxVuLNwwQwA2klxBK2mEj6f3gTcBuzyZNb2v/wVR PKtMVgrTET+pD/4WbRi1bsazOGjEhCOyp+IKNWez5YkGaY9l4LI/kgjhaFbYoC7F Bw1qGHjqybq8vmRPft6ZhN/AMUFLyLPq3z2ntdY+6rqj559HKiVhJRjPZAuE9wRu ZME7vqx+3sSHWaYKg1CJA/ib2PT8zA4= -----END CERTIFICATE-----Generated at Wed May 13 18:59:08 2026 by rpki-client