$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ceebefb-1248-3180-938d-32cdfae419f5.roa File: 6ceebefb-1248-3180-938d-32cdfae419f5.roa (raw, json) Hash identifier: FH7PsR77RRXH/qCVlvDPKWSn1f2bh6Dyt7gcnnPIU5Y= Subject key identifier: 22:FF:19:4C:B5:1A:F6:0B:52:A6:A4:27:B9:51:16:0C:70:EF:E6:CC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E8DEFBB2ED79D86C083185C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ceebefb-1248-3180-938d-32cdfae419f5.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 30060 IP address blocks: 209.112.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:bb:2e:d7:9d:86:c0:83:18:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=bc089f88-ed1a-454b-bc9d-cef76850f861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:17:3d:1b:79:0f:ae:ac:f6:e1:68:7d:a8: e7:af:b6:ed:8f:da:e1:06:c7:96:ad:d0:c1:cf:2c: e9:0e:0a:a0:ac:f9:2a:aa:00:54:b4:f2:06:b3:3c: bb:db:d4:6b:ef:01:5a:08:0f:da:80:c6:50:6e:f7: 50:03:49:68:24:12:15:e7:07:ca:c6:52:9e:5c:e3: c6:44:e7:c9:1a:40:5f:50:3f:7c:cf:70:00:7b:36: d7:a8:ff:5e:f3:56:b3:53:dd:f2:9f:75:f9:74:75: b8:1d:d5:e7:54:0a:c9:f0:70:4f:89:cd:43:8b:11: 25:96:dc:fd:f4:48:4c:76:03:53:7b:f1:30:df:5e: 10:7a:bf:66:6c:b7:de:8e:e3:71:f6:28:df:c3:45: 92:c2:37:0d:74:01:02:2f:57:c7:a3:e2:c4:11:ae: 7f:08:73:6e:40:55:9c:1b:89:c5:ea:9a:31:e4:3b: 61:4a:9b:2c:3b:a1:9d:b4:ad:6f:fc:e0:ba:07:c9: 1c:bc:31:9c:06:65:27:bd:f4:6e:f3:82:6b:ff:51: 70:c7:63:c0:cf:a3:bd:28:62:00:51:08:b2:7d:46: 1e:51:be:cf:b6:a7:29:81:98:40:ce:df:60:77:82: 00:df:e8:20:24:dc:a9:ef:e5:f3:09:43:d1:22:48: ad:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FF:19:4C:B5:1A:F6:0B:52:A6:A4:27:B9:51:16:0C:70:EF:E6:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ceebefb-1248-3180-938d-32cdfae419f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:d4:cc:f7:7f:b4:91:43:c5:d5:59:bf:52:9b:e6:29:bc:69: a7:39:59:d1:23:60:e5:38:b5:d2:2e:44:b9:38:89:ba:f1:e2: 01:ea:90:48:db:72:11:e2:d3:39:ff:d8:28:9a:ac:db:41:b5: de:63:c9:8a:a7:86:15:91:67:96:d1:8f:94:d2:d4:a0:76:36: 00:b5:fa:c0:31:42:bb:ee:5c:44:50:52:61:ab:14:fe:54:7c: f5:5c:40:3e:d2:da:70:8e:e9:bd:61:e2:01:21:f8:b1:c6:cd: 78:27:b3:c1:90:b3:30:1f:d5:d6:dd:5a:94:d0:53:af:49:51: 18:04:5b:5c:57:ec:ae:ed:d9:48:f6:f1:37:6a:02:bc:af:c3: 24:d1:76:72:81:e0:52:12:21:fa:2b:5a:9c:e3:4d:0c:e8:88: 5e:fa:69:1a:4e:3b:b1:2f:97:a3:c4:0f:dc:d7:50:e2:19:77: 40:f3:1d:e1:de:40:54:0d:2b:2d:25:d7:99:d5:88:6e:04:2e: c7:ac:d0:23:cf:66:1d:96:45:b2:6b:77:10:23:d7:2a:c4:71: 39:5c:02:d9:dd:71:f8:f5:19:14:40:02:80:59:eb:0d:5c:be: e5:4c:76:05:d4:12:44:7b:de:47:3d:63:a1:b4:85:81:6a:64: fc:35:1e:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N77su152GwIMYXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk YmMwODlmODgtZWQxYS00NTRiLWJjOWQtY2VmNzY4NTBmODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzUXPRt5D66s9uFofajnr7btj9rhBseWrdDB zyzpDgqgrPkqqgBUtPIGszy729Rr7wFaCA/agMZQbvdQA0loJBIV5wfKxlKeXOPG ROfJGkBfUD98z3AAezbXqP9e81azU93yn3X5dHW4HdXnVArJ8HBPic1DixElltz9 9EhMdgNTe/Ew314Qer9mbLfejuNx9ijfw0WSwjcNdAECL1fHo+LEEa5/CHNuQFWc G4nF6pox5DthSpssO6GdtK1v/OC6B8kcvDGcBmUnvfRu84Jr/1Fwx2PAz6O9KGIA UQiyfUYeUb7PtqcpgZhAzt9gd4IA3+ggJNyp7+XzCUPRIkit5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCL/GUy1GvYLUqakJ7lRFgxw7+bMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmNlZWJlZmItMTI0OC0z MTgwLTkzOGQtMzJjZGZhZTQxOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbUzPd/tJFDxdVZv1Kb5im8aac5WdEjYOU4tdIuRLk4ibrx4gHqkEjb chHi0zn/2CiarNtBtd5jyYqnhhWRZ5bRj5TS1KB2NgC1+sAxQrvuXERQUmGrFP5U fPVcQD7S2nCO6b1h4gEh+LHGzXgns8GQszAf1dbdWpTQU69JURgEW1xX7K7t2Uj2 8TdqAryvwyTRdnKB4FISIforWpzjTQzoiF76aRpOO7Evl6PED9zXUOIZd0DzHeHe QFQNKy0l15nViG4ELses0CPPZh2WRbJrdxAj1yrEcTlcAtndcfj1GRRAAoBZ6w1c vuVMdgXUEkR73kc9Y6G0hYFqZPw1Hp0= -----END CERTIFICATE-----Generated at Fri Jul 24 03:12:34 2026 by rpki-client