$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/03baa8fd-afd0-3579-9b8f-a1a45a07f5ea.roa File: 03baa8fd-afd0-3579-9b8f-a1a45a07f5ea.roa (raw, json) Hash identifier: o+v4YrqIDjM+8H8JCEmLaXOruG2RjEuOEhnzq7jvwmU= Subject key identifier: 65:3D:DB:55:30:B8:FE:5A:68:0F:1D:0C:E2:06:36:F0:F6:20:12:CB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49885200DC977F26B2A7AB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/03baa8fd-afd0-3579-9b8f-a1a45a07f5ea.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36626 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:52:00:dc:97:7f:26:b2:a7:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0f4ea633-f0f5-426b-bca5-cafe477f4a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bb:af:56:ab:78:55:3e:d7:df:71:56:6c:fc: 42:4e:a9:b6:30:5e:df:a1:bd:c5:6c:1a:27:a3:e2: 78:90:5c:70:d5:bc:6e:f3:91:c8:97:b2:f3:3e:54: 6e:44:8b:e6:87:c4:2b:ab:59:38:76:8a:21:43:7f: d2:40:b4:22:e3:4f:2f:b4:d2:7a:ae:c9:2f:40:24: 67:24:ca:10:2f:b4:5c:ef:10:7b:4a:f8:01:c2:3e: 82:b3:38:87:b2:ac:95:f9:d5:da:54:d6:d0:54:53: 6a:2c:57:a1:e8:91:5e:ed:66:77:13:f2:16:12:29: 3c:6c:98:f4:b4:89:59:43:89:3c:72:fe:78:df:a6: e3:1f:ac:9d:98:15:08:1e:ac:7b:80:ac:f7:3a:cc: d2:a5:c6:11:89:a2:00:a4:53:44:d9:1e:a7:cc:99: bd:70:6d:c9:95:b0:e5:b4:f4:67:a7:c7:3b:9e:81: cd:50:c6:18:53:5a:21:b0:a4:ff:8a:70:2a:1c:aa: 3c:63:80:43:52:b8:df:95:23:35:15:55:18:1b:45: 1c:a7:8e:61:d4:7a:22:e0:32:fb:88:5d:af:d6:b0: 08:ea:11:08:3c:0a:a9:9f:fb:e0:35:55:d4:05:db: 05:79:7c:81:2d:02:50:6e:13:b7:fb:af:aa:8b:a7: f2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3D:DB:55:30:B8:FE:5A:68:0F:1D:0C:E2:06:36:F0:F6:20:12:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/03baa8fd-afd0-3579-9b8f-a1a45a07f5ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:58:45:53:ed:cf:78:bc:1e:ea:03:39:2a:ac:07:27:c5:6f: c6:ee:39:98:e5:3c:c4:8a:f1:07:e8:e8:b9:96:d7:d3:b9:bf: 44:fd:e7:63:e1:de:bd:e8:dd:40:60:70:bf:bf:ca:17:bb:2e: be:5d:4a:20:0c:0d:9d:c1:12:90:00:ed:e8:f4:7d:97:c0:3e: 55:d0:ad:b0:da:4b:d6:82:80:12:b3:42:e8:7c:5e:e4:35:ce: 0f:08:7a:ee:85:29:be:0a:32:05:32:69:a4:72:bf:32:26:d1: 04:40:6c:a9:f8:0c:4a:1c:aa:c6:19:e5:e8:f8:bf:d0:23:ac: 03:2e:bb:8a:85:4a:dc:c8:02:2b:f4:76:98:50:d6:95:82:cd: 29:98:b2:6d:44:1a:ad:4a:e1:d1:e1:61:87:f7:cd:81:31:0f: 7b:9b:a1:a2:72:f4:63:33:d4:1c:c9:9f:b9:87:14:be:87:74: ce:bd:1e:9e:67:5a:b7:e8:9b:ab:db:6c:24:68:97:ab:62:f6: cc:0d:15:cb:56:67:a0:be:0b:3a:80:2f:8b:76:69:c6:90:66: 09:57:b3:e3:e4:ba:84:34:ad:1b:08:4d:f7:b6:93:74:e9:d4: f9:62:cd:ff:3a:e3:04:74:f9:0c:37:16:70:cb:dd:cf:56:c3: 8a:83:f8:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiFIA3Jd/JrKnq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGY0ZWE2MzMtZjBmNS00MjZiLWJjYTUtY2FmZTQ3N2Y0YTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLuvVqt4VT7X33FWbPxCTqm2MF7fob3FbBon o+J4kFxw1bxu85HIl7LzPlRuRIvmh8Qrq1k4doohQ3/SQLQi408vtNJ6rskvQCRn JMoQL7Rc7xB7SvgBwj6CsziHsqyV+dXaVNbQVFNqLFeh6JFe7WZ3E/IWEik8bJj0 tIlZQ4k8cv5436bjH6ydmBUIHqx7gKz3OszSpcYRiaIApFNE2R6nzJm9cG3JlbDl tPRnp8c7noHNUMYYU1ohsKT/inAqHKo8Y4BDUrjflSM1FVUYG0Ucp45h1Hoi4DL7 iF2v1rAI6hEIPAqpn/vgNVXUBdsFeXyBLQJQbhO3+6+qi6fyrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGU921UwuP5aaA8dDOIGNvD2IBLLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDNiYWE4ZmQtYWZkMC0z NTc5LTliOGYtYTFhNDVhMDdmNWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtYRVPtz3i8HuoDOSqsByfFb8buOZjlPMSK8Qfo6LmW19O5v0T952Ph 3r3o3UBgcL+/yhe7Lr5dSiAMDZ3BEpAA7ej0fZfAPlXQrbDaS9aCgBKzQuh8XuQ1 zg8Ieu6FKb4KMgUyaaRyvzIm0QRAbKn4DEocqsYZ5ej4v9AjrAMuu4qFStzIAiv0 dphQ1pWCzSmYsm1EGq1K4dHhYYf3zYExD3uboaJy9GMz1BzJn7mHFL6HdM69Hp5n Wrfom6vbbCRol6ti9swNFctWZ6C+CzqAL4t2acaQZglXs+PkuoQ0rRsITfe2k3Tp 1Plizf864wR0+Qw3FnDL3c9Ww4qD+Ds= -----END CERTIFICATE-----Generated at Tue Oct 6 21:58:57 2026 by rpki-client