$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0db6e0cd-9d2a-3179-b845-986a5641f92d.roa File: 0db6e0cd-9d2a-3179-b845-986a5641f92d.roa (raw, json) Hash identifier: BdMYRfGez550EhaBn/L6qZiot0SsyeFWN8UxKjZ+PDs= Subject key identifier: 9A:47:7B:D4:B7:C5:A3:DD:10:39:67:E3:59:10:62:B7:4F:03:21:33 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7888BFCB3F51FF90B510E50 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0db6e0cd-9d2a-3179-b845-986a5641f92d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397202 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:8b:fc:b3:f5:1f:f9:0b:51:0e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4bfb451a-c3cc-43b2-89c9-1e710a86688b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:74:37:70:ad:cd:d5:0c:4a:f4:87:ac:f1:ea: fd:77:1d:da:9a:ea:7c:c6:8f:b1:01:87:81:ad:39: b5:be:cf:11:7a:cb:1f:76:c6:b3:0e:23:8a:27:26: 2d:95:e3:2d:b5:01:34:4a:07:7a:68:fd:69:7d:5a: 09:f5:6e:6d:e5:17:5f:b9:fa:90:3c:8e:4e:70:3a: 7f:43:8f:04:3d:e6:77:66:17:23:b5:8f:64:5c:73: 06:f7:6f:df:b7:84:c6:80:ab:12:b4:b0:55:b3:77: 15:e6:43:31:4b:aa:34:a8:68:3d:32:b9:a5:55:8a: 11:b6:0b:a4:cb:35:40:b5:95:80:92:08:d2:99:ea: 06:7a:26:8d:a6:8c:8b:4a:f7:bd:16:ee:ee:b5:39: f1:34:1d:5f:ab:55:43:bf:56:9e:68:a8:ff:3d:fc: ca:37:a0:25:b9:30:86:d8:81:9e:84:46:fa:7b:d0: 14:d7:43:58:92:8b:0f:04:a7:e6:5e:ca:f1:c7:bb: a9:2e:9a:00:d9:3b:60:b1:32:43:20:d2:74:a6:4c: df:5a:83:85:54:a4:90:74:25:af:63:9c:69:c8:7a: 27:c1:11:86:0e:9b:70:eb:ed:18:f9:b6:d2:e8:4e: 46:d9:59:06:4a:56:12:00:b6:4e:f8:34:27:76:1f: 26:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:47:7B:D4:B7:C5:A3:DD:10:39:67:E3:59:10:62:B7:4F:03:21:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0db6e0cd-9d2a-3179-b845-986a5641f92d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a0:f2:c3:73:d5:f0:82:68:9b:cc:05:3f:73:3c:56:82:53: f7:3a:42:0c:c1:f5:97:7a:6b:1c:fc:c6:c7:8a:25:09:67:93: c6:9a:02:7e:d4:6a:18:23:ea:8d:06:0e:fa:59:c3:93:95:aa: be:ec:a2:64:5a:4c:a7:9d:d1:c2:66:e1:94:b6:65:25:3b:ee: 2d:78:36:d7:eb:44:d5:af:94:8b:29:7a:df:20:74:5e:c9:6d: c6:57:4c:d5:6d:78:03:f2:96:a7:38:a2:e3:7b:2a:d8:39:d9: e9:90:50:8c:ab:11:68:19:1a:07:9c:6d:bf:58:7a:06:ba:d0: d9:30:6c:89:f6:42:20:be:84:fb:4b:e9:7e:5c:d5:dc:13:5b: 71:9d:6c:93:9d:6e:3f:82:06:1d:29:f1:30:aa:54:72:90:e4: 4e:5e:b0:b1:d0:68:2c:b0:65:11:dc:30:01:bb:53:c2:48:47: a9:24:0d:e8:fa:04:40:c1:83:9d:84:cb:06:bf:13:42:3e:3b: 9c:37:d0:a8:1f:2e:ac:0c:1a:c7:bb:73:0e:d0:08:28:dc:b0: cf:e7:53:00:16:5c:95:bf:9d:34:02:cd:6e:12:5e:c8:a2:b3: 8c:c9:3f:43:90:c6:61:3f:40:26:15:10:f7:1f:f2:a7:d7:b8: 94:6f:e5:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niIv8s/Uf+QtRDlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGJmYjQ1MWEtYzNjYy00M2IyLTg5YzktMWU3MTBhODY2ODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXQ3cK3N1QxK9Ies8er9dx3amup8xo+xAYeB rTm1vs8RessfdsazDiOKJyYtleMttQE0Sgd6aP1pfVoJ9W5t5RdfufqQPI5OcDp/ Q48EPeZ3ZhcjtY9kXHMG92/ft4TGgKsStLBVs3cV5kMxS6o0qGg9MrmlVYoRtguk yzVAtZWAkgjSmeoGeiaNpoyLSve9Fu7utTnxNB1fq1VDv1aeaKj/PfzKN6AluTCG 2IGehEb6e9AU10NYkosPBKfmXsrxx7upLpoA2TtgsTJDINJ0pkzfWoOFVKSQdCWv Y5xpyHonwRGGDptw6+0Y+bbS6E5G2VkGSlYSALZO+DQndh8m5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpHe9S3xaPdEDln41kQYrdPAyEzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGRiNmUwY2QtOWQyYS0z MTc5LWI4NDUtOTg2YTU2NDFmOTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWg8sNz1fCCaJvMBT9zPFaCU/c6QgzB9Zd6axz8xseKJQlnk8aaAn7U ahgj6o0GDvpZw5OVqr7somRaTKed0cJm4ZS2ZSU77i14NtfrRNWvlIspet8gdF7J bcZXTNVteAPylqc4ouN7Ktg52emQUIyrEWgZGgecbb9Yega60NkwbIn2QiC+hPtL 6X5c1dwTW3GdbJOdbj+CBh0p8TCqVHKQ5E5esLHQaCywZRHcMAG7U8JIR6kkDej6 BEDBg52Eywa/E0I+O5w30KgfLqwMGse7cw7QCCjcsM/nUwAWXJW/nTQCzW4SXsii s4zJP0OQxmE/QCYVEPcf8qfXuJRv5QU= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:27 2026 by rpki-client