$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/07212462-01b3-3438-9a02-06b16dbcb051.roa File: 07212462-01b3-3438-9a02-06b16dbcb051.roa (raw, json) Hash identifier: 43anwzOJNn9UwANTQjsHdMukaqb1gN5XqB9TCqhsDKA= Subject key identifier: A8:0A:92:9B:66:68:88:32:32:5D:CB:2E:1B:5C:7F:81:3D:9A:AB:25 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F5A865CAB7FAB8190A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/07212462-01b3-3438-9a02-06b16dbcb051.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396573 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f5:a8:65:ca:b7:fa:b8:19:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=d7608529-51e8-47a1-b660-2f8a77d71880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d8:fa:59:0b:52:6c:7d:4e:b2:42:43:e8:c8: 02:3b:88:43:e0:57:6a:e9:3e:7f:84:f7:ba:6d:d0: b7:e4:48:43:13:d5:a7:e0:19:b6:ff:85:fc:e2:16: 9e:56:07:d6:53:53:2d:f9:ca:05:e6:09:e7:33:0f: 64:84:3b:91:99:52:45:ab:cc:9f:84:96:39:8f:fe: 91:03:82:93:f7:f0:1f:9e:14:be:ce:c5:71:17:59: 1b:20:38:19:64:f1:5a:b7:00:d6:83:58:77:bb:0a: 3f:d1:e9:06:49:6c:8e:94:b7:5c:6e:25:2b:94:ca: 8f:83:d6:6f:b9:46:00:0e:e5:64:f1:12:5f:15:00: aa:fa:b3:73:cd:82:93:3a:85:43:46:25:dd:63:52: 0f:66:b5:8e:7d:ff:42:29:73:12:17:eb:63:38:cb: 4c:53:f2:8d:8b:d8:d9:55:7b:00:03:bf:7d:c8:8f: 01:99:ae:39:f5:ae:62:d9:b4:4f:5a:10:2c:01:28: 8f:72:6e:12:c8:9a:4c:a7:40:4b:38:ca:2d:41:1f: b4:67:24:69:ed:68:b8:0b:9d:ba:cb:33:da:a2:b8: c1:2d:8d:25:c5:03:0a:99:33:bc:0e:55:d8:08:54: ec:76:5b:b5:10:cd:88:d9:3d:74:f8:88:d3:a5:64: 69:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:0A:92:9B:66:68:88:32:32:5D:CB:2E:1B:5C:7F:81:3D:9A:AB:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/07212462-01b3-3438-9a02-06b16dbcb051.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4d:47:07:6f:e1:96:94:73:c4:80:e6:0c:0e:ff:9c:67:f9: 79:69:27:ee:2a:6a:25:3e:38:e0:3c:d4:4b:bd:b6:63:88:6c: 75:26:39:de:7a:c1:1c:3a:34:6e:3e:60:bf:c9:20:91:b9:33: 56:ef:ef:0e:b1:df:f7:45:c2:c4:8d:ce:27:e9:81:9c:ce:72: 98:2b:cf:cb:46:21:a3:85:52:8d:40:d0:81:d8:97:1b:b4:14: d2:eb:78:8e:ff:e8:25:58:d3:6b:a0:79:37:90:29:c2:5a:b8: ef:71:d9:ce:6d:4a:15:0b:39:1a:28:9b:cf:09:c0:9a:74:b4: 3e:18:74:a1:45:72:81:bc:a6:75:9c:ac:f7:e2:27:c1:d8:b0: 1f:a5:c7:6d:3a:36:46:07:98:d0:80:2e:30:3e:43:05:7e:ab: 18:18:c7:9b:9b:e7:b2:73:d4:23:b6:dc:ee:e8:9f:d7:f8:05: fe:d1:f3:2f:61:ed:d3:b0:59:9d:fc:e2:be:9c:b9:18:28:8e: b3:33:03:94:a9:9b:13:d2:6c:27:51:83:40:02:fc:16:0f:ab: 8b:0e:0f:5d:8e:f9:d4:05:9f:da:d6:32:71:78:75:2c:04:d8: 7a:31:9a:27:a2:41:4e:86:46:96:7b:b2:bb:d4:c0:29:79:2f: 09:4b:5c:95 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvWoZcq3+rgZCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZDc2MDg1MjktNTFlOC00N2ExLWI2NjAtMmY4YTc3ZDcxODgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktj6WQtSbH1OskJD6MgCO4hD4Fdq6T5/hPe6 bdC35EhDE9Wn4Bm2/4X84haeVgfWU1Mt+coF5gnnMw9khDuRmVJFq8yfhJY5j/6R A4KT9/AfnhS+zsVxF1kbIDgZZPFatwDWg1h3uwo/0ekGSWyOlLdcbiUrlMqPg9Zv uUYADuVk8RJfFQCq+rNzzYKTOoVDRiXdY1IPZrWOff9CKXMSF+tjOMtMU/KNi9jZ VXsAA799yI8Bma459a5i2bRPWhAsASiPcm4SyJpMp0BLOMotQR+0ZyRp7Wi4C526 yzPaorjBLY0lxQMKmTO8DlXYCFTsdlu1EM2I2T10+IjTpWRp2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKgKkptmaIgyMl3LLhtcf4E9mqslMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDcyMTI0NjItMDFiMy0z NDM4LTlhMDItMDZiMTZkYmNiMDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAoTUcHb+GWlHPEgOYMDv+cZ/l5aSfuKmolPjjgPNRLvbZjiGx1Jjne esEcOjRuPmC/ySCRuTNW7+8Osd/3RcLEjc4n6YGcznKYK8/LRiGjhVKNQNCB2Jcb tBTS63iO/+glWNNroHk3kCnCWrjvcdnObUoVCzkaKJvPCcCadLQ+GHShRXKBvKZ1 nKz34ifB2LAfpcdtOjZGB5jQgC4wPkMFfqsYGMebm+eyc9Qjttzu6J/X+AX+0fMv Ye3TsFmd/OK+nLkYKI6zMwOUqZsT0mwnUYNAAvwWD6uLDg9djvnUBZ/a1jJxeHUs BNh6MZonokFOhkaWe7K71MApeS8JS1yV -----END CERTIFICATE-----Generated at Thu Oct 8 05:18:42 2026 by rpki-client