$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f1b1e97-2489-3d9a-b658-7894e5aec93e.roa File: 0f1b1e97-2489-3d9a-b658-7894e5aec93e.roa (raw, json) Hash identifier: 4XCuWEGCr175dBi4wsB8XgQIhQ/R9I/EAd/wFD+r2F8= Subject key identifier: 9B:59:80:C3:F1:ED:D9:A8:2E:9C:68:F2:02:72:50:69:ED:87:79:35 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292EFDED14821AE7EE69E60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f1b1e97-2489-3d9a-b658-7894e5aec93e.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396605 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ef:de:d1:48:21:ae:7e:e6:9e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=206b4c5b-3790-49f9-b84b-1f19403a6d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:af:28:2a:2b:93:f5:11:ac:f5:3f:6f:e7:fd: cc:f1:5b:6e:2f:4b:78:9b:94:83:e9:40:97:97:b7: 60:90:45:58:8b:d8:dc:b6:ae:19:56:ac:d5:ef:e1: b2:1c:fd:83:de:67:31:16:fa:a0:40:39:3d:15:99: e8:66:30:a5:56:90:6b:ad:cf:98:d4:8b:87:a9:d8: ce:d4:73:95:98:3c:61:3a:62:51:e5:fa:8c:ed:a2: 0d:9d:db:46:86:f8:53:a1:34:1f:4f:f3:e3:7d:35: fc:b2:5c:ba:ad:d3:f7:f1:1d:1a:4e:f3:4b:d6:90: ee:5c:14:a0:14:89:fd:59:6d:96:dc:4f:f7:8a:36: 0c:66:10:8e:41:e3:03:69:ad:ee:91:af:3d:e9:bd: 1c:09:be:5f:3d:d9:7a:d4:31:51:9e:0f:14:df:90: 72:f6:32:e1:8d:c3:80:89:95:3e:9b:60:2e:98:a5: 14:50:18:f2:bb:e0:41:dc:17:b1:b2:41:35:f9:5c: 3d:68:31:ef:a2:ea:cb:05:37:22:f5:f9:46:91:3d: 52:47:d6:27:fc:50:23:b5:ee:53:f0:6d:54:f9:e9: 1e:45:04:44:34:c2:5b:91:da:0b:6e:e6:9a:5f:67: e7:27:ef:c9:5b:e6:95:12:5c:1f:59:3c:0b:c5:6e: da:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:59:80:C3:F1:ED:D9:A8:2E:9C:68:F2:02:72:50:69:ED:87:79:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f1b1e97-2489-3d9a-b658-7894e5aec93e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a0:c8:92:aa:55:6b:05:b8:ca:4a:0f:aa:2c:b5:03:8f:94: ce:d8:44:a9:ce:89:8a:8d:4f:8f:72:4c:66:b6:7a:fd:a2:5c: 9e:8f:97:ea:a0:2b:da:48:2e:15:39:d7:f3:1f:e0:7d:46:67: 68:7d:eb:27:37:56:e8:ff:6b:ce:82:e4:5e:15:e9:f1:0b:bf: 3b:27:5e:5a:d2:c1:6d:b0:4a:47:b7:d5:53:90:4f:31:e8:bc: 2d:fc:de:d1:90:42:3e:09:62:60:a1:08:19:b5:01:2c:a9:c4: 0b:20:a4:d6:1c:fb:b7:d7:e6:28:f6:2d:20:1d:9b:91:e1:fe: 3a:da:d4:92:e0:98:28:bb:32:ba:5f:39:cc:37:03:15:c6:07: 2b:d6:05:4e:38:60:90:93:e0:1b:d7:a3:db:ec:0d:31:03:fe: 1a:82:1a:ff:c9:9b:f2:98:9f:4d:cd:a0:44:97:e9:62:83:78: ad:b2:0e:0f:f1:cf:24:c8:d3:bd:23:e5:dd:80:4c:e2:8b:18: c9:47:a1:7e:e4:5a:65:e2:77:48:88:2c:72:81:4c:c5:b6:72: a4:2a:76:05:8d:99:03:d6:79:e4:7d:9b:05:69:be:a2:06:90: 98:04:b0:c3:1e:e2:a2:55:8a:61:d7:d7:d1:e0:ac:b6:cc:b1: 15:22:bb:d6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9iku/e0Ughrn7mnmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MjA2YjRjNWItMzc5MC00OWY5LWI4NGItMWYxOTQwM2E2ZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K8oKiuT9RGs9T9v5/3M8VtuL0t4m5SD6UCX l7dgkEVYi9jctq4ZVqzV7+GyHP2D3mcxFvqgQDk9FZnoZjClVpBrrc+Y1IuHqdjO 1HOVmDxhOmJR5fqM7aINndtGhvhToTQfT/PjfTX8sly6rdP38R0aTvNL1pDuXBSg FIn9WW2W3E/3ijYMZhCOQeMDaa3uka896b0cCb5fPdl61DFRng8U35By9jLhjcOA iZU+m2AumKUUUBjyu+BB3BexskE1+Vw9aDHvourLBTci9flGkT1SR9Yn/FAjte5T 8G1U+ekeRQRENMJbkdoLbuaaX2fnJ+/JW+aVElwfWTwLxW7aEQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJtZgMPx7dmoLpxo8gJyUGnth3k1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGYxYjFlOTctMjQ4OS0z ZDlhLWI2NTgtNzg5NGU1YWVjOTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCKoMiSqlVrBbjKSg+qLLUDj5TO2ESpzomKjU+Pckxmtnr9olyej5fq oCvaSC4VOdfzH+B9RmdofesnN1bo/2vOguReFenxC787J15a0sFtsEpHt9VTkE8x 6Lwt/N7RkEI+CWJgoQgZtQEsqcQLIKTWHPu31+Yo9i0gHZuR4f462tSS4JgouzK6 XznMNwMVxgcr1gVOOGCQk+Ab16Pb7A0xA/4aghr/yZvymJ9NzaBEl+lig3itsg4P 8c8kyNO9I+XdgEziixjJR6F+5Fpl4ndIiCxygUzFtnKkKnYFjZkD1nnkfZsFab6i BpCYBLDDHuKiVYph19fR4Ky2zLEVIrvW -----END CERTIFICATE-----Generated at Tue Oct 6 19:59:14 2026 by rpki-client