$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/13210211-48b0-3415-a62d-a307cf309b4f.roa File: 13210211-48b0-3415-a62d-a307cf309b4f.roa (raw, json) Hash identifier: QRzSxaFUXqpLL04EBdd888qZeoJzBVtRJ6s4dp0YKmY= Subject key identifier: E1:59:08:D9:42:57:87:0A:68:F4:B8:97:AA:1A:2D:3C:18:C6:6D:03 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EC0A73AABBB4258CE6CEA2C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/13210211-48b0-3415-a62d-a307cf309b4f.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 36628 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:3a:ab:bb:42:58:ce:6c:ea:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=d0067bd9-d24e-4722-8cc9-2442ca208f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b7:4b:2a:e8:2a:89:5a:e9:fb:65:05:09:c2: 27:81:4d:17:e1:cd:eb:60:84:7e:5f:3d:91:fb:1b: 06:95:ae:c4:8c:38:c6:23:13:65:88:9f:d4:e6:cd: 78:50:8b:f5:ac:18:13:83:06:8b:a7:4a:08:27:97: 36:e6:45:3e:ca:70:df:78:23:1f:82:83:5c:2e:d9: 25:ac:42:43:4d:28:0f:10:66:2d:1c:73:74:c8:c6: 8c:2a:c0:98:59:98:81:17:e3:65:a2:e3:6d:95:01: ce:f0:e1:0e:39:d6:94:57:9f:a4:4a:e9:fb:31:ae: a7:bb:f9:b9:12:61:24:98:cd:35:18:5d:f2:39:b3: 29:3e:87:ea:ad:75:8b:79:00:7a:85:ca:8e:bc:f8: 2c:cf:b8:04:62:ba:ee:18:5a:cb:88:78:43:65:e8: 7d:2c:82:c3:1d:f5:29:99:3d:76:4d:44:6c:99:38: 44:4c:b4:fe:0a:30:63:ea:af:b3:14:41:bd:38:29: 07:ef:e9:b5:ac:bf:ac:9b:fd:d4:54:5b:13:f1:c5: bf:b8:b7:1e:be:74:b3:97:aa:43:6f:68:8b:29:61: bb:27:c6:79:af:21:5a:af:41:ca:d5:ca:5e:ba:42: 8c:21:40:67:4d:ee:a5:ab:26:26:68:df:9f:46:c6: e1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:59:08:D9:42:57:87:0A:68:F4:B8:97:AA:1A:2D:3C:18:C6:6D:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/13210211-48b0-3415-a62d-a307cf309b4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:f1:1e:e6:dd:65:52:45:39:f9:5f:8c:b7:e5:5c:49:87:44: af:a2:b0:d7:54:d5:bd:e1:17:c1:33:83:cf:33:0b:78:2f:6b: c2:33:b4:f5:5e:f2:e3:54:5b:74:c5:28:28:bb:b5:7c:63:a1: 83:13:c8:f3:7d:42:23:19:93:79:9a:bd:fe:7d:0d:58:a9:e8: ab:33:48:cb:57:db:ce:2f:2e:de:85:8d:59:82:c5:d1:e2:e7: 66:be:d9:fa:36:16:a2:49:bd:57:1c:02:7b:02:5d:fb:fa:b5: 1e:c2:1c:10:0f:61:63:29:04:5a:b6:a5:36:f3:f7:bd:97:d7: 9a:52:32:c4:84:8a:f7:c0:2f:61:4a:15:03:ac:da:7a:0a:5b: 3a:37:26:16:47:32:75:a2:13:c9:65:00:a6:d9:c3:7f:ef:c6: 5c:f2:e4:55:43:99:f4:6d:cf:95:52:7f:ba:2d:88:76:a2:10: 2c:f4:7a:e1:48:ce:db:3e:a0:30:44:68:2a:89:fc:a4:2e:f5: f2:9e:34:99:d5:1b:8c:08:79:49:50:ce:b0:10:c5:e9:2c:25: 9b:60:d0:77:f2:65:81:98:db:9a:37:78:4f:62:f8:9e:1f:01: c1:83:f9:b3:d6:6c:15:7a:58:88:b0:74:c4:a7:7f:e1:4d:39: b3:ef:f6:04 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7Apzqru0JYzmzqLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk ZDAwNjdiZDktZDI0ZS00NzIyLThjYzktMjQ0MmNhMjA4ZjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrdLKugqiVrp+2UFCcIngU0X4c3rYIR+Xz2R +xsGla7EjDjGIxNliJ/U5s14UIv1rBgTgwaLp0oIJ5c25kU+ynDfeCMfgoNcLtkl rEJDTSgPEGYtHHN0yMaMKsCYWZiBF+NlouNtlQHO8OEOOdaUV5+kSun7Ma6nu/m5 EmEkmM01GF3yObMpPofqrXWLeQB6hcqOvPgsz7gEYrruGFrLiHhDZeh9LILDHfUp mT12TURsmThETLT+CjBj6q+zFEG9OCkH7+m1rL+sm/3UVFsT8cW/uLcevnSzl6pD b2iLKWG7J8Z5ryFar0HK1cpeukKMIUBnTe6lqyYmaN+fRsbhGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOFZCNlCV4cKaPS4l6oaLTwYxm0DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTMyMTAyMTEtNDhiMC0z NDE1LWE2MmQtYTMwN2NmMzA5YjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBB8R7m3WVSRTn5X4y35VxJh0SvorDXVNW94RfBM4PPMwt4L2vCM7T1 XvLjVFt0xSgou7V8Y6GDE8jzfUIjGZN5mr3+fQ1YqeirM0jLV9vOLy7ehY1ZgsXR 4udmvtn6NhaiSb1XHAJ7Al37+rUewhwQD2FjKQRatqU28/e9l9eaUjLEhIr3wC9h ShUDrNp6Cls6NyYWRzJ1ohPJZQCm2cN/78Zc8uRVQ5n0bc+VUn+6LYh2ohAs9Hrh SM7bPqAwRGgqifykLvXynjSZ1RuMCHlJUM6wEMXpLCWbYNB38mWBmNuaN3hPYvie HwHBg/mz1mwVeliIsHTEp3/hTTmz7/YE -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:35 2026 by rpki-client