$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22b6330a-a303-3425-89a5-50a7a762ca1e.roa File: 22b6330a-a303-3425-89a5-50a7a762ca1e.roa (raw, json) Hash identifier: apOj+BwPOfCIWtE9kTOyIDmgBjOjAFdN7fApSOFClQM= Subject key identifier: BD:FF:FC:1F:C1:E7:41:91:61:E0:4B:28:8C:96:A7:94:5A:50:01:D4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EC0A73A735C264FEF5FB72180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22b6330a-a303-3425-89a5-50a7a762ca1e.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 396551 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:3a:73:5c:26:4f:ef:5f:b7:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=54aad570-92b1-472a-aad5-6d0e9f3a1709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4a:e8:1f:70:24:a9:92:3a:e1:e8:ca:ef:bc: ed:06:c7:a2:c8:e3:bf:4d:d8:04:10:13:08:e1:0e: 6a:75:a1:d7:71:9f:0b:35:ad:40:7c:df:ff:a6:70: d3:7d:62:72:13:10:fe:2f:f6:30:cc:38:a9:aa:1d: 03:09:04:8b:cb:6b:81:3f:77:73:58:08:4e:77:45: c9:86:2e:26:ab:98:c3:4f:94:e8:1b:b2:de:88:60: be:aa:6f:fd:5c:bd:ce:88:0f:3d:a9:94:60:85:de: f6:2e:17:3f:df:04:02:58:83:fb:71:ca:2d:b4:56: d3:a0:e2:ac:99:d2:0c:fa:b1:74:fc:85:12:78:ac: a9:44:2a:c0:cf:57:22:b7:3a:ef:f5:47:1d:6e:ff: 27:90:e2:1c:12:9f:79:be:a2:f1:16:85:00:0d:81: f8:2e:be:14:8c:2b:18:a3:1c:66:a4:4a:09:8d:98: 4a:57:05:de:cb:2f:26:81:d3:c9:44:d5:ef:a1:fe: da:02:77:36:d4:54:95:e6:99:78:2f:00:fe:e6:04: 18:cc:53:5b:c3:0f:7d:71:bc:a3:96:24:68:f0:ff: 47:25:7d:85:a3:97:c0:49:30:d4:90:9e:59:c1:35: 23:36:e6:11:89:72:7d:0b:bd:07:b7:48:dd:41:fe: e3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FF:FC:1F:C1:E7:41:91:61:E0:4B:28:8C:96:A7:94:5A:50:01:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22b6330a-a303-3425-89a5-50a7a762ca1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:23:48:15:55:c4:05:f7:19:b9:b4:ef:63:53:37:df:e1:12: 0b:c9:c2:c9:d0:3c:ba:24:f4:6e:5e:d8:a4:88:45:78:a5:3b: 4d:bd:bc:55:46:69:d7:36:41:bf:c3:bb:3b:de:44:60:47:07: e4:0b:cf:fb:05:43:71:93:10:c0:41:97:e7:99:13:fd:71:c8: 80:6c:71:06:d7:e7:cb:a5:79:c3:37:e6:e6:9a:1c:5d:22:91: 11:1c:89:0a:2d:dc:66:88:2e:d2:da:09:cd:b7:78:dc:09:0a: fd:f1:c9:53:9f:51:58:16:bd:e1:92:3f:6f:99:7e:86:4d:9f: 27:b2:3a:21:ef:61:e8:ca:9e:26:d4:a6:02:e0:30:06:27:a8: 08:88:72:42:46:53:74:aa:99:6a:b7:df:39:c5:a8:61:9d:59: 5c:42:2b:a6:14:c7:e1:56:8c:88:ee:fa:7f:53:c3:ee:7b:47: 17:e5:05:b8:57:07:9f:ef:99:d1:dd:52:3d:dd:5e:6d:d8:c4: 19:2f:2f:72:6a:f2:b2:f7:6e:41:a1:3e:25:4e:35:ba:20:13: 93:4e:22:64:26:b1:c7:53:7c:72:f3:1d:4e:17:d8:82:66:60: a4:c0:9c:14:8d:54:9a:3b:a7:e4:49:b8:4d:a6:da:a3:fb:f8: d7:02:e7:4f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7ApzpzXCZP71+3IYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk NTRhYWQ1NzAtOTJiMS00NzJhLWFhZDUtNmQwZTlmM2ExNzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0roH3AkqZI64ejK77ztBseiyOO/TdgEEBMI 4Q5qdaHXcZ8LNa1AfN//pnDTfWJyExD+L/YwzDipqh0DCQSLy2uBP3dzWAhOd0XJ hi4mq5jDT5ToG7LeiGC+qm/9XL3OiA89qZRghd72Lhc/3wQCWIP7ccottFbToOKs mdIM+rF0/IUSeKypRCrAz1citzrv9Ucdbv8nkOIcEp95vqLxFoUADYH4Lr4UjCsY oxxmpEoJjZhKVwXeyy8mgdPJRNXvof7aAnc21FSV5pl4LwD+5gQYzFNbww99cbyj liRo8P9HJX2Fo5fASTDUkJ5ZwTUjNuYRiXJ9C70Ht0jdQf7j1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL3//B/B50GRYeBLKIyWp5RaUAHUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjJiNjMzMGEtYTMwMy0z NDI1LTg5YTUtNTBhN2E3NjJjYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCFI0gVVcQF9xm5tO9jUzff4RILycLJ0Dy6JPRuXtikiEV4pTtNvbxV RmnXNkG/w7s73kRgRwfkC8/7BUNxkxDAQZfnmRP9cciAbHEG1+fLpXnDN+bmmhxd IpERHIkKLdxmiC7S2gnNt3jcCQr98clTn1FYFr3hkj9vmX6GTZ8nsjoh72Hoyp4m 1KYC4DAGJ6gIiHJCRlN0qplqt985xahhnVlcQiumFMfhVoyI7vp/U8Pue0cX5QW4 Vwef75nR3VI93V5t2MQZLy9yavKy925BoT4lTjW6IBOTTiJkJrHHU3xy8x1OF9iC ZmCkwJwUjVSaO6fkSbhNptqj+/jXAudP -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:47 2026 by rpki-client