$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bac9e77-be29-3b62-ae04-4c0c5aae4f78.roa File: 4bac9e77-be29-3b62-ae04-4c0c5aae4f78.roa (raw, json) Hash identifier: U+qDXjL26DjFk+lMSYV/XoYnNz858oqoV3wwurZcS3w= Subject key identifier: EB:7D:62:56:43:CF:8E:A3:52:9E:80:3F:7C:5F:91:FB:E9:75:A0:F2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DADAADFBA84A8FF11F0EE0180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bac9e77-be29-3b62-ae04-4c0c5aae4f78.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 0 IP address blocks: 209.112.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:df:ba:84:a8:ff:11:f0:ee:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=84d4ad3a-dbd5-4798-a6cb-8e65ec48713a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0a:d0:18:4c:15:8e:1d:55:7c:3e:dc:fe:5e: db:cd:8b:6a:7a:ab:e5:42:52:ed:f8:2f:d9:9e:39: 6b:1e:10:0f:00:db:59:b6:5f:2a:1a:da:96:ff:29: f3:f2:06:86:88:5b:ee:7c:7a:db:92:91:b1:18:49: a0:73:b1:5e:8c:c4:60:8b:47:e7:c3:86:2e:8f:b2: 8d:76:4d:c5:09:00:62:52:11:94:1e:5b:df:35:e2: aa:c7:9c:51:c7:18:ee:35:c0:39:db:ee:a9:32:98: 3d:33:d5:bc:55:ba:b9:2d:da:77:fa:2f:b4:e7:6d: 69:21:a6:6d:49:1f:cb:61:7d:aa:18:ed:8d:1a:69: 56:7e:67:97:57:d6:b9:0f:53:37:53:35:fd:34:f0: 2e:0b:bc:a0:a4:c0:39:65:1d:6e:c8:e5:b9:e4:d1: b4:37:4a:52:35:66:7f:7c:31:65:9d:42:83:b3:53: 07:21:84:9a:f4:9e:ea:99:72:04:a4:67:bc:70:d8: f5:4a:b2:f4:82:0e:ac:ad:22:9b:40:46:e3:1a:46: bc:27:4c:d9:be:d4:9c:0e:b1:17:69:3e:3c:df:b9: f8:f0:01:e1:51:90:90:9b:e0:d1:e7:a3:33:d5:59: 5e:3a:d0:92:ba:6e:a1:b1:be:f5:bf:0c:5b:c0:99: ef:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7D:62:56:43:CF:8E:A3:52:9E:80:3F:7C:5F:91:FB:E9:75:A0:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bac9e77-be29-3b62-ae04-4c0c5aae4f78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:9e:79:3f:db:e3:3f:1d:78:30:2a:b4:57:67:41:78:ba:a9: b2:d7:5d:3a:17:a6:2c:82:1f:29:e5:0b:1c:ae:1f:e8:44:b8: f7:70:18:53:26:f5:e1:8b:eb:b6:34:fb:a2:ac:11:8d:b0:49: 95:27:4f:8d:9a:e8:84:95:16:cd:5b:82:26:10:b2:c5:ef:e0: f3:27:a6:02:a1:bc:f3:54:76:95:fd:11:09:81:bf:fc:78:a4: ba:17:8e:db:22:83:1d:5d:0e:9f:44:90:66:d0:78:d0:eb:88: d1:7d:f0:bc:da:75:3a:fd:31:d8:a6:ac:77:3a:e9:1d:82:0a: 62:ef:df:5b:b2:6c:11:ff:e4:1e:5e:a4:86:73:47:93:76:8e: e0:ce:b1:9e:59:4c:31:19:bc:63:a6:bd:7e:d7:99:a8:e8:67: a4:78:ed:89:6b:a1:97:cc:0b:f0:22:c5:5a:6c:15:0e:bb:9a: a1:f4:51:aa:ea:bc:f2:6b:1b:39:1e:4b:87:03:b1:d5:b6:71: da:54:2f:7d:c6:4c:9f:50:31:b8:12:01:a4:d5:6b:d8:c9:47: fe:5c:33:49:e4:2b:ca:88:1c:53:42:99:21:28:16:4f:69:5d: 5b:d0:4c:99:82:0b:06:60:97:f1:0c:39:16:84:cd:74:a5:11: 8a:dd:a9:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqt+6hKj/EfDuAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk ODRkNGFkM2EtZGJkNS00Nzk4LWE2Y2ItOGU2NWVjNDg3MTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQrQGEwVjh1VfD7c/l7bzYtqeqvlQlLt+C/Z njlrHhAPANtZtl8qGtqW/ynz8gaGiFvufHrbkpGxGEmgc7FejMRgi0fnw4Yuj7KN dk3FCQBiUhGUHlvfNeKqx5xRxxjuNcA52+6pMpg9M9W8Vbq5Ldp3+i+0521pIaZt SR/LYX2qGO2NGmlWfmeXV9a5D1M3UzX9NPAuC7ygpMA5ZR1uyOW55NG0N0pSNWZ/ fDFlnUKDs1MHIYSa9J7qmXIEpGe8cNj1SrL0gg6srSKbQEbjGka8J0zZvtScDrEX aT4837n48AHhUZCQm+DR56Mz1VleOtCSum6hsb71vwxbwJnv5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOt9YlZDz46jUp6AP3xfkfvpdaDyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGJhYzllNzctYmUyOS0z YjYyLWFlMDQtNGMwYzVhYWU0Zjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XByMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADieeT/b4z8deDAqtFdnQXi6qbLXXToXpiyCHynlCxyuH+hEuPdwGFMm 9eGL67Y0+6KsEY2wSZUnT42a6ISVFs1bgiYQssXv4PMnpgKhvPNUdpX9EQmBv/x4 pLoXjtsigx1dDp9EkGbQeNDriNF98LzadTr9MdimrHc66R2CCmLv31uybBH/5B5e pIZzR5N2juDOsZ5ZTDEZvGOmvX7XmajoZ6R47YlroZfMC/AixVpsFQ67mqH0Uarq vPJrGzkeS4cDsdW2cdpUL33GTJ9QMbgSAaTVa9jJR/5cM0nkK8qIHFNCmSEoFk9p XVvQTJmCCwZgl/EMORaEzXSlEYrdqbg= -----END CERTIFICATE-----Generated at Wed May 13 04:12:19 2026 by rpki-client