$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a7925a3-7a9a-3920-97d4-de9b773e29f2.roa File: 0a7925a3-7a9a-3920-97d4-de9b773e29f2.roa (raw, json) Hash identifier: T9Eh0MBw9iyT99xIN6jQtusFQ2Vj/0F5bW2hjIC7eKU= Subject key identifier: 73:AE:CE:6B:CC:1F:7F:95:C7:40:26:0A:62:56:53:A9:85:30:77:1D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F334128EB158DFC9FFE8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a7925a3-7a9a-3920-97d4-de9b773e29f2.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 36621 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f3:34:12:8e:b1:58:df:c9:ff:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=79eaf463-594c-4eba-a36b-dfaa7b3e0317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fb:94:cf:58:71:5c:31:50:2c:69:d9:6a:c8: e8:a7:cf:70:d9:8e:17:18:1a:ea:c8:3e:4f:62:3d: cc:7a:73:11:12:fc:90:1a:27:4d:51:ab:c3:ee:d4: e1:77:cd:2b:ec:6a:de:4e:95:e9:7e:a9:a7:a3:fc: d8:3a:06:76:4b:a2:13:53:c0:65:d9:be:9f:36:a1: 5b:f9:55:ec:9a:35:94:7d:b0:58:23:e1:02:7c:c6: 54:fb:e4:31:96:41:14:e4:0f:98:91:6e:c3:3a:f4: d2:4c:22:50:53:bd:85:7f:45:9b:c3:0b:44:b6:7b: 8f:cc:28:9d:aa:58:f1:91:42:3a:06:d9:01:66:de: be:cc:4f:c5:ef:79:e5:46:60:8e:20:83:10:33:6f: 50:58:b9:46:03:5a:be:e4:57:7b:57:ce:93:bd:4a: bb:ea:30:98:51:55:2e:bb:a9:04:0b:00:92:d3:65: ad:8c:6d:1c:d0:07:66:b8:dd:00:30:6c:fd:b7:a0: 24:6f:72:73:02:2d:da:45:a8:4f:53:53:0c:8e:06: 26:3b:89:50:a7:38:38:c4:d6:e9:a1:4a:ed:b6:8c: a7:e3:c1:cf:38:7f:a7:ce:e5:8a:79:b0:79:14:39: 4e:7e:03:ec:d2:cc:14:87:69:7a:37:8f:01:99:b6: c3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AE:CE:6B:CC:1F:7F:95:C7:40:26:0A:62:56:53:A9:85:30:77:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a7925a3-7a9a-3920-97d4-de9b773e29f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:26:4d:dc:49:9c:a7:d9:61:66:89:ef:de:66:6b:28:80:47: 9c:d9:70:6b:62:9a:a3:9f:6c:c3:ed:b2:27:9c:6c:85:e7:a9: e0:0f:5f:96:db:f1:ae:8e:ea:91:5e:f0:99:e7:b5:6b:f2:3c: 09:7c:9e:21:d3:3d:c4:36:58:46:50:da:cf:fa:58:0d:9f:0c: 05:29:9f:91:cf:99:86:45:73:66:fc:03:c4:1b:5a:4f:62:7c: ca:fc:1a:d3:d8:11:c6:80:34:65:d6:57:81:3f:51:e3:21:68: 06:c9:64:f4:ee:76:a1:9e:1b:8d:2c:39:fb:91:5d:eb:15:1b: e4:91:e1:b9:93:4d:3d:00:a3:f8:7b:2d:bb:84:5e:da:75:e1: 45:13:be:a0:da:de:f4:9e:2c:f9:9d:a3:c2:6e:8c:30:fe:c9: 3a:d9:20:c2:3b:37:18:71:72:83:15:63:43:d1:11:55:2f:03: 92:55:23:d8:b4:60:35:b4:82:77:3f:c0:08:e6:47:e6:a8:07: 83:25:54:11:28:06:17:14:81:63:d2:41:73:4c:20:f7:40:e1: 73:de:cc:e3:2a:17:71:9d:a3:d9:a3:1b:ef:4b:0d:d5:89:b1: d9:16:11:a0:f8:f0:8d:77:fe:07:26:e9:75:80:c4:ee:27:67: a4:4d:eb:72 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvM0Eo6xWN/J/+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NzllYWY0NjMtNTk0Yy00ZWJhLWEzNmItZGZhYTdiM2UwMzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPuUz1hxXDFQLGnZasjop89w2Y4XGBrqyD5P Yj3MenMREvyQGidNUavD7tThd80r7GreTpXpfqmno/zYOgZ2S6ITU8Bl2b6fNqFb +VXsmjWUfbBYI+ECfMZU++QxlkEU5A+YkW7DOvTSTCJQU72Ff0WbwwtEtnuPzCid qljxkUI6BtkBZt6+zE/F73nlRmCOIIMQM29QWLlGA1q+5Fd7V86TvUq76jCYUVUu u6kECwCS02WtjG0c0AdmuN0AMGz9t6Akb3JzAi3aRahPU1MMjgYmO4lQpzg4xNbp oUrttoyn48HPOH+nzuWKebB5FDlOfgPs0swUh2l6N48BmbbDRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHOuzmvMH3+Vx0AmCmJWU6mFMHcdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGE3OTI1YTMtN2E5YS0z OTIwLTk3ZDQtZGU5Yjc3M2UyOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBxJk3cSZyn2WFmie/eZmsogEec2XBrYpqjn2zD7bInnGyF56ngD1+W 2/GujuqRXvCZ57Vr8jwJfJ4h0z3ENlhGUNrP+lgNnwwFKZ+Rz5mGRXNm/APEG1pP YnzK/BrT2BHGgDRl1leBP1HjIWgGyWT07nahnhuNLDn7kV3rFRvkkeG5k009AKP4 ey27hF7adeFFE76g2t70niz5naPCboww/sk62SDCOzcYcXKDFWND0RFVLwOSVSPY tGA1tIJ3P8AI5kfmqAeDJVQRKAYXFIFj0kFzTCD3QOFz3szjKhdxnaPZoxvvSw3V ibHZFhGg+PCNd/4HJul1gMTuJ2ekTety -----END CERTIFICATE-----Generated at Wed Oct 7 02:22:11 2026 by rpki-client