$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f3ad2b4-9337-3ee6-91d4-72b2889a7d41.roa File: 0f3ad2b4-9337-3ee6-91d4-72b2889a7d41.roa (raw, json) Hash identifier: 0ucwHkE79ZGeSNNY4oIAdZ7WUVMSioIiAUU/VIpsnmQ= Subject key identifier: E7:8B:20:47:B9:12:46:97:75:E6:C5:A0:E3:5B:20:AB:43:CA:76:45 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F7CA4707D128727AB840 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f3ad2b4-9337-3ee6-91d4-72b2889a7d41.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 211369 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f7:ca:47:07:d1:28:72:7a:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=bff2f118-4c26-4341-897c-a25e3d0de3ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5c:e2:14:bc:7f:48:a2:fe:9d:95:22:d6:10: a4:53:82:12:14:27:f2:3b:1e:26:ea:dd:04:35:27: 84:a9:9b:df:2b:66:39:82:f8:f3:17:5d:cc:3f:3d: e4:03:19:f5:f1:38:e0:73:d3:31:5e:15:cf:43:8e: b6:fe:e3:ae:7d:87:33:63:1e:b4:c8:59:5e:2e:3f: e0:f5:d0:e9:d8:9c:c2:87:9a:d9:c6:a9:5f:d3:d6: f8:97:b4:62:c4:0b:38:ed:bf:f4:dd:92:d2:a1:f7: 03:dd:4a:23:67:55:22:fc:99:33:9c:c5:20:db:7b: 1b:4c:bb:9f:41:4a:92:2d:46:be:62:a4:b6:dd:78: 70:c4:65:1b:b3:49:ad:02:77:5d:c4:21:d2:42:42: 81:21:85:b9:a3:74:4c:2e:c3:22:b8:15:7c:bb:2c: 72:3e:51:1e:09:ab:66:5f:a9:52:06:98:44:cf:aa: a9:53:d6:a1:a9:e4:31:b5:fd:9e:75:4e:f9:9a:7c: 3c:f4:26:bf:e7:f5:30:c0:dc:7c:24:08:43:2e:b4: 2f:dd:16:d4:55:6f:60:9d:a8:6b:ea:06:ec:9b:d0: b7:bf:89:d4:3c:ed:81:e4:d1:69:93:13:05:86:b3: 82:da:d8:dc:23:bc:28:8e:4e:35:ed:6d:86:6a:98: 5b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8B:20:47:B9:12:46:97:75:E6:C5:A0:E3:5B:20:AB:43:CA:76:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f3ad2b4-9337-3ee6-91d4-72b2889a7d41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:68:94:64:0b:1e:5e:4c:15:f5:50:0c:2b:e2:53:d0:c6:5e: 53:80:26:eb:eb:d5:a2:01:a4:ae:0e:38:49:cd:b2:f0:26:dc: 0d:d7:cf:4f:58:12:c3:82:d3:c7:83:a4:e0:04:99:ef:7e:c4: 84:d4:21:58:18:9d:1d:f6:e0:5c:1f:73:7f:de:97:a4:89:20: 2b:59:62:07:2d:af:e9:69:53:f7:ba:cd:76:72:11:32:50:12: c9:68:11:2f:5e:f0:0e:c2:df:05:ca:b9:85:ff:02:95:a9:eb: db:47:d4:4d:b3:7a:1a:fe:2c:e7:8b:7a:6b:e1:c0:fc:86:d6: be:72:f1:fb:b3:ee:26:d3:86:28:7b:4a:0e:c7:9a:4f:e8:c7: 86:7c:2f:93:57:c5:3d:08:3e:f2:8c:21:23:a7:c3:75:57:e1: 4a:21:94:04:e5:a7:5b:8a:a6:39:b9:67:6e:7c:78:38:4d:2c: 50:cd:21:41:0f:c0:09:cd:f2:02:fc:8c:49:aa:fb:40:b7:c4: c5:d6:32:5d:9d:44:68:5b:d3:54:9a:79:87:fc:59:13:c5:17: 09:2d:71:8f:7c:ea:49:bb:4e:ef:54:bb:41:aa:ed:a2:07:ff: b6:7f:56:5f:5f:f9:0c:07:4b:2c:49:67:cc:21:66:cb:6c:4a: d6:52:33:d3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvfKRwfRKHJ6uEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YmZmMmYxMTgtNGMyNi00MzQxLTg5N2MtYTI1ZTNkMGRlM2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVziFLx/SKL+nZUi1hCkU4ISFCfyOx4m6t0E NSeEqZvfK2Y5gvjzF13MPz3kAxn18Tjgc9MxXhXPQ462/uOufYczYx60yFleLj/g 9dDp2JzCh5rZxqlf09b4l7RixAs47b/03ZLSofcD3UojZ1Ui/JkznMUg23sbTLuf QUqSLUa+YqS23XhwxGUbs0mtAnddxCHSQkKBIYW5o3RMLsMiuBV8uyxyPlEeCatm X6lSBphEz6qpU9ahqeQxtf2edU75mnw89Ca/5/UwwNx8JAhDLrQv3RbUVW9gnahr 6gbsm9C3v4nUPO2B5NFpkxMFhrOC2tjcI7wojk417W2Gaphb/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOeLIEe5EkaXdebFoONbIKtDynZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGYzYWQyYjQtOTMzNy0z ZWU2LTkxZDQtNzJiMjg4OWE3ZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAdaJRkCx5eTBX1UAwr4lPQxl5TgCbr69WiAaSuDjhJzbLwJtwN189P WBLDgtPHg6TgBJnvfsSE1CFYGJ0d9uBcH3N/3pekiSArWWIHLa/paVP3us12chEy UBLJaBEvXvAOwt8FyrmF/wKVqevbR9RNs3oa/izni3pr4cD8hta+cvH7s+4m04Yo e0oOx5pP6MeGfC+TV8U9CD7yjCEjp8N1V+FKIZQE5adbiqY5uWdufHg4TSxQzSFB D8AJzfIC/IxJqvtAt8TF1jJdnURoW9NUmnmH/FkTxRcJLXGPfOpJu07vVLtBqu2i B/+2f1ZfX/kMB0ssSWfMIWbLbErWUjPT -----END CERTIFICATE-----Generated at Tue Oct 6 19:59:09 2026 by rpki-client