$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ed770e1-0ed9-3f36-9b88-7095199fa50a.roa File: 1ed770e1-0ed9-3f36-9b88-7095199fa50a.roa (raw, json) Hash identifier: qgfDXDH4N/E/COq1Jc0JqNtBYaaN8QOBoiOhuAqjcwI= Subject key identifier: CA:D0:0A:A1:20:88:55:2B:80:C8:67:B1:83:CB:7B:12:68:66:AE:50 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7887E9B28D4D1FDE259B0F6 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ed770e1-0ed9-3f36-9b88-7095199fa50a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36628 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:7e:9b:28:d4:d1:fd:e2:59:b0:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=db7d669f-eaa6-4e38-bd82-b832355f9a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:89:e0:70:1c:e8:62:3a:ae:a6:1e:88:46:fc: 4d:b5:3b:73:d7:e1:97:f6:21:e7:b2:1d:dd:28:04: 2f:ce:fc:c6:ca:b4:f1:be:fb:9e:b2:3e:dd:3b:4b: 80:dd:94:4f:69:f4:c9:c5:c3:12:d5:0e:48:69:48: 71:9a:13:f6:19:ed:06:fd:56:af:e2:5d:9c:c6:3e: 9c:6b:29:9a:60:0d:8f:f4:c0:12:47:e8:36:84:f8: c9:8d:44:cc:b1:ac:3d:c1:c7:2e:4a:fa:eb:b3:09: 3c:05:c6:30:b7:f6:98:1d:ed:bf:b2:7d:a5:c3:53: b6:75:33:0c:ae:c0:f1:03:66:aa:0a:72:b2:3f:da: 30:c9:fc:ab:22:ab:0a:61:9e:00:e9:c5:5c:c9:0c: 2b:90:10:3e:63:bb:37:55:11:cb:c2:a6:53:c8:f1: a5:36:df:57:09:07:7d:5a:3d:0f:d4:3d:59:a1:40: 4e:21:2d:7c:ef:90:e0:f3:23:91:2b:02:c7:85:89: 00:5d:b1:6c:53:ac:36:91:06:df:86:96:2f:b8:c9: e6:c9:a9:1d:47:e2:5f:c1:91:a0:4b:62:64:64:ce: eb:81:0c:ba:2d:44:c7:00:a9:d2:41:52:6c:55:02: c5:06:02:7c:0e:fb:07:b7:99:95:c7:3e:13:f8:5f: f6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D0:0A:A1:20:88:55:2B:80:C8:67:B1:83:CB:7B:12:68:66:AE:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ed770e1-0ed9-3f36-9b88-7095199fa50a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:07:62:1c:9d:28:9b:36:71:71:6f:e3:3b:19:06:ec:bc:6f: 96:a3:c8:d1:6b:83:58:25:34:9b:c9:a1:f5:3d:59:ea:8a:14: e5:f9:18:b4:23:19:20:78:1a:db:6c:b3:cc:8b:a9:68:b9:56: a0:bd:af:a4:07:f6:b8:a9:fd:ef:27:95:4a:76:0c:17:5d:bc: 10:61:bc:27:59:94:3f:6e:f1:64:ad:14:47:f0:72:5f:0c:57: 15:13:d9:68:d7:3f:52:39:0c:91:8d:93:3a:3d:ea:0b:53:6d: c6:dc:61:83:53:cf:0d:dc:98:96:c1:7f:84:b0:66:6d:5a:4b: 0b:e8:4f:3d:f9:59:b9:1a:d2:d5:56:f0:95:7e:e4:15:89:35: 79:ae:ac:c1:65:47:50:87:bc:28:2f:3a:8e:7f:d0:b0:45:7d: ae:fb:d0:22:04:20:58:89:5c:ff:a2:d2:96:70:50:18:52:ef: 46:c6:a5:52:ac:6b:dd:ee:0e:fd:3e:d5:c9:7e:05:1f:d1:8a: 17:4e:2f:84:7e:15:b3:32:64:dc:a3:e4:af:41:7d:23:2a:8a: fc:65:35:f6:54:f9:12:8e:22:6d:f3:d0:ef:12:6f:68:ff:9c: 59:7d:a5:ea:6f:19:64:cf:0a:c4:96:7f:dd:54:91:77:ea:80: 91:82:74:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niH6bKNTR/eJZsPYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGI3ZDY2OWYtZWFhNi00ZTM4LWJkODItYjgzMjM1NWY5YTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIngcBzoYjquph6IRvxNtTtz1+GX9iHnsh3d KAQvzvzGyrTxvvuesj7dO0uA3ZRPafTJxcMS1Q5IaUhxmhP2Ge0G/Vav4l2cxj6c aymaYA2P9MASR+g2hPjJjUTMsaw9wccuSvrrswk8BcYwt/aYHe2/sn2lw1O2dTMM rsDxA2aqCnKyP9owyfyrIqsKYZ4A6cVcyQwrkBA+Y7s3VRHLwqZTyPGlNt9XCQd9 Wj0P1D1ZoUBOIS1875Dg8yORKwLHhYkAXbFsU6w2kQbfhpYvuMnmyakdR+JfwZGg S2JkZM7rgQy6LUTHAKnSQVJsVQLFBgJ8DvsHt5mVxz4T+F/2NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrQCqEgiFUrgMhnsYPLexJoZq5QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWVkNzcwZTEtMGVkOS0z ZjM2LTliODgtNzA5NTE5OWZhNTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUHYhydKJs2cXFv4zsZBuy8b5ajyNFrg1glNJvJofU9WeqKFOX5GLQj GSB4Gttss8yLqWi5VqC9r6QH9rip/e8nlUp2DBddvBBhvCdZlD9u8WStFEfwcl8M VxUT2WjXP1I5DJGNkzo96gtTbcbcYYNTzw3cmJbBf4SwZm1aSwvoTz35Wbka0tVW 8JV+5BWJNXmurMFlR1CHvCgvOo5/0LBFfa770CIEIFiJXP+i0pZwUBhS70bGpVKs a93uDv0+1cl+BR/RihdOL4R+FbMyZNyj5K9BfSMqivxlNfZU+RKOIm3z0O8Sb2j/ nFl9pepvGWTPCsSWf91UkXfqgJGCdLQ= -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:30 2026 by rpki-client