$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa File: 476c714e-2cf9-3b0d-a179-f838724e41da.roa (raw, json) Hash identifier: XcS8qXyHP/jfdn6f5o26lNKoSskL8xZK/yT+jwF9pq4= Subject key identifier: AE:F7:32:1B:2F:F4:7A:2C:90:34:94:58:19:A8:DE:11:86:93:88:3B Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Certificate serial: 010D0C9F4328584DD78B1EFF0F0C3EE0DE9B9460 Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa Signing time: Fri 15 May 2026 13:00:30 +0000 ROA not before: Fri 15 May 2026 13:00:30 +0000 ROA not after: Thu 13 Aug 2026 13:00:30 +0000 asID: 13627 IP address blocks: 209.112.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d7:8b:1e:ff:0f:0c:3e:e0:de:9b:94:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Validity Not Before: May 15 13:00:30 2026 GMT Not After : Aug 13 13:00:30 2026 GMT Subject: CN=aa7b052b-d528-4478-99c5-d0a2555fe44e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f8:a0:4c:e4:68:3c:48:dc:23:19:f3:e4:5a: bd:41:2c:68:8f:2e:ec:9b:be:6c:3a:2a:6c:48:2f: 67:47:b7:52:f8:b9:38:e4:4c:aa:44:ad:38:19:d5: 16:eb:b9:0c:d9:23:36:07:d8:2c:93:d8:65:fe:a1: 1f:4d:5a:fd:66:ae:9f:12:83:82:24:85:54:c3:a7: 56:f0:3a:b0:3f:6f:5a:d4:fc:44:1d:74:a3:b1:cd: 93:ab:12:e6:51:de:ad:79:c0:4f:ae:e2:ce:32:e3: c8:23:aa:fa:81:c7:12:d6:da:01:89:0a:12:63:4e: d8:58:b3:f8:d0:2d:a5:00:50:ce:1e:f3:f6:e7:b5: b7:98:a3:47:29:af:82:d4:78:cb:bd:69:04:2f:df: 14:b0:46:c4:61:94:a8:47:4a:13:1d:2a:ed:9e:78: 7d:c0:0b:b0:81:d5:01:27:43:b1:7d:09:3b:f7:fd: 43:12:a5:2f:24:40:b4:46:3a:c9:f9:a0:ce:ab:3c: f9:e7:3c:30:b6:38:a2:a2:e4:27:f1:75:a0:03:24: 4d:01:d7:39:63:95:23:0a:6e:bc:16:bc:62:ae:60: 6a:d5:5f:d0:91:3b:d9:27:91:bc:b2:4f:ff:31:6c: d2:5d:c9:8b:e8:63:02:18:73:c7:cc:2b:e7:1b:dd: 13:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F7:32:1B:2F:F4:7A:2C:90:34:94:58:19:A8:DE:11:86:93:88:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl X509v3 Authority Key Identifier: keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer sbgp-ipAddrBlock: critical IPv4: 209.112.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:e6:f0:f3:9c:21:77:68:8b:07:85:17:cc:86:d6:c7:1c:d0: 14:d8:53:f2:78:0e:3d:46:65:7d:6d:58:2f:9c:ff:77:f0:6d: ba:08:1d:c5:79:45:92:70:d8:48:4b:87:6b:51:8d:32:f7:7e: 50:e2:14:3f:aa:89:ff:f9:a5:48:98:44:44:16:e1:1a:33:6f: 95:cf:c7:1a:5d:96:0e:7f:08:8a:0c:5f:e1:7f:a9:8c:75:63: e2:61:31:c0:02:88:94:47:29:57:29:4e:ca:35:da:e4:f1:bb: 64:3e:3c:8b:e0:b4:65:d0:f1:18:78:00:f4:cd:b0:4a:f8:ed: 1f:da:70:09:a2:9f:94:28:fe:10:b1:fa:a9:d7:b8:7f:77:62: 41:39:ab:6a:1c:ca:70:bc:dc:24:9c:71:7f:3f:f6:07:c8:e3: 6b:d5:0c:09:72:5c:ba:1c:1c:2e:6f:26:d5:69:56:00:5f:76: 5a:c7:f2:b1:7b:80:d2:f1:32:fe:16:2a:bd:ae:3d:91:65:06: e7:14:51:89:9d:09:6d:5d:66:0c:c8:4e:b7:ce:89:1a:1b:71: de:37:8d:6a:0c:bb:6d:b2:93:e2:b0:cc:43:1e:f5:99:a0:6e: d7:59:ab:fa:11:e8:38:12:31:fa:d4:3c:c5:da:dd:63:1e:fe: 48:76:34:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Xix7/Dww+4N6blGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFlOTc5NmEtNWYzZC00ZjQ3LWIxMTctNDIzNjBhMjEz ZTM3MB4XDTI2MDUxNTEzMDAzMFoXDTI2MDgxMzEzMDAzMFowLzEtMCsGA1UEAxMk YWE3YjA1MmItZDUyOC00NDc4LTk5YzUtZDBhMjU1NWZlNDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifigTORoPEjcIxnz5Fq9QSxojy7sm75sOips SC9nR7dS+Lk45EyqRK04GdUW67kM2SM2B9gsk9hl/qEfTVr9Zq6fEoOCJIVUw6dW 8DqwP29a1PxEHXSjsc2TqxLmUd6tecBPruLOMuPII6r6gccS1toBiQoSY07YWLP4 0C2lAFDOHvP257W3mKNHKa+C1HjLvWkEL98UsEbEYZSoR0oTHSrtnnh9wAuwgdUB J0OxfQk79/1DEqUvJEC0RjrJ+aDOqzz55zwwtjiiouQn8XWgAyRNAdc5Y5UjCm68 FrxirmBq1V/QkTvZJ5G8sk//MWzSXcmL6GMCGHPHzCvnG90TJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK73Mhsv9HoskDSUWBmo3hGGk4g7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5 Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2MGEyMTNlMzcvNDc2YzcxNGUtMmNmOS0z YjBkLWExNzktZjgzODcyNGU0MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFlOTc5NmEtNWYzZC00ZjQ3LWIx MTctNDIzNjBhMjEzZTM3LzFhZTk3OTZhLTVmM2QtNGY0Ny1iMTE3LTQyMzYwYTIx M2UzNy5jcmwwHwYDVR0jBBgwFoAUTss6/l8FHqwG3VnOR6besyl/QdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2 MGEyMTNlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XBZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7m8POcIXdoiweFF8yG1scc0BTYU/J4Dj1GZX1tWC+c/3fwbboIHcV5 RZJw2EhLh2tRjTL3flDiFD+qif/5pUiYREQW4Rozb5XPxxpdlg5/CIoMX+F/qYx1 Y+JhMcACiJRHKVcpTso12uTxu2Q+PIvgtGXQ8Rh4APTNsEr47R/acAmin5Qo/hCx +qnXuH93YkE5q2ocynC83CSccX8/9gfI42vVDAlyXLocHC5vJtVpVgBfdlrH8rF7 gNLxMv4WKr2uPZFlBucUUYmdCW1dZgzITrfOiRobcd43jWoMu22yk+KwzEMe9Zmg btdZq/oR6DgSMfrUPMXa3WMe/kh2NCU= -----END CERTIFICATE-----Generated at Sat Jun 6 11:16:20 2026 by rpki-client