$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/234c9542-c7d3-3d2a-a65c-1871cbc4c8d4.roa File: 234c9542-c7d3-3d2a-a65c-1871cbc4c8d4.roa (raw, json) Hash identifier: sUBvijWlUl3PHacb5tfLt+XeVt+lGYP9sk3dLauxNl0= Subject key identifier: F8:6D:84:46:19:9D:83:89:96:E7:5A:7C:21:DC:9F:55:E4:35:65:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7888A1CF3C6D28256C7E380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/234c9542-c7d3-3d2a-a65c-1871cbc4c8d4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396588 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:8a:1c:f3:c6:d2:82:56:c7:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=72e2cc2f-bb98-45cc-b687-2edda6a19b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:3e:24:e4:9e:25:cb:f3:27:1f:94:b6:f2: a7:96:c5:ec:7f:5f:27:d4:b8:7b:9d:8b:a9:01:ec: 9c:e5:52:84:7a:b6:02:2e:95:88:71:70:1b:fa:b8: 3c:b2:3d:83:63:d7:96:c1:8d:f1:6f:78:08:61:7b: 2c:30:58:e2:9c:7d:05:27:f1:05:47:45:a9:1d:a1: 06:52:e6:30:28:64:c2:59:76:91:7e:1d:af:45:df: ea:7a:16:fe:22:ca:df:36:c8:5c:f6:aa:40:b8:a9: f8:c1:a4:0e:92:b2:9a:84:38:17:09:d9:36:a2:3d: 58:f8:3b:ab:59:fd:09:16:bf:f9:4a:63:81:67:6b: 60:f8:22:1d:95:f0:f8:97:99:f8:c9:23:37:da:a0: 49:e5:15:f5:68:38:c2:9e:2a:c1:1c:36:71:92:16: 8c:8c:ef:cc:95:df:06:7a:ae:7f:2e:0c:6a:b6:23: 31:d6:23:33:ec:bc:19:e6:4b:bf:f4:a5:40:33:dc: 1b:b4:43:5e:0e:1e:dc:77:21:c9:51:3b:72:e4:83: ef:8c:a1:53:47:be:d2:2a:c0:b3:08:7e:1d:30:7d: 72:11:39:09:7b:68:b6:e8:4a:13:cf:02:9c:a8:57: bc:aa:85:af:40:61:c0:09:8f:4b:f1:4d:f5:89:6d: 6b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6D:84:46:19:9D:83:89:96:E7:5A:7C:21:DC:9F:55:E4:35:65:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/234c9542-c7d3-3d2a-a65c-1871cbc4c8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:61:0a:b5:a2:19:1a:2d:b4:88:6d:a7:04:24:6b:9b:79:ce: 74:85:a4:64:b8:80:d1:52:d7:a8:57:5c:27:fd:80:b2:f0:b2: 04:78:6e:3b:4a:45:d3:ea:de:d9:84:a5:89:2a:2d:0d:64:e9: a3:55:52:6b:db:5a:38:97:f4:b1:8a:d5:17:b1:08:7d:a8:a6: 65:2e:cd:6c:38:fd:0d:0b:e7:73:bc:2a:02:d9:e4:63:f2:09: 3a:60:79:90:ae:05:53:80:24:98:8c:74:a1:93:3b:0d:02:5c: 45:9e:cd:61:71:69:1d:ae:18:43:db:f4:67:a6:6e:f1:6f:e7: 13:e5:ab:59:db:2a:94:6d:e3:6e:55:a7:a2:a2:6f:65:ee:2d: 00:2d:44:00:8a:f2:62:1e:1e:43:cd:4b:bb:c0:55:6f:d4:0b: 5f:91:9c:bf:a9:e0:8d:37:d4:f0:83:35:41:ec:0f:e2:f9:cb: fe:6d:e1:07:b0:51:2d:b3:3d:0f:eb:44:7c:ad:f9:18:ca:45: d9:a6:36:de:53:9b:85:9b:82:77:25:48:af:d4:d0:6d:26:2e: f5:7a:32:56:36:f2:ff:67:0e:c5:b4:2f:c7:4c:93:54:77:b1: 81:f4:af:56:7c:18:79:c2:b6:ab:44:ad:07:ba:57:54:0b:58: cc:74:a8:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niIoc88bSglbH44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzJlMmNjMmYtYmI5OC00NWNjLWI2ODctMmVkZGE2YTE5YjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQY+JOSeJcvzJx+UtvKnlsXsf18n1Lh7nYup Aeyc5VKEerYCLpWIcXAb+rg8sj2DY9eWwY3xb3gIYXssMFjinH0FJ/EFR0WpHaEG UuYwKGTCWXaRfh2vRd/qehb+IsrfNshc9qpAuKn4waQOkrKahDgXCdk2oj1Y+Dur Wf0JFr/5SmOBZ2tg+CIdlfD4l5n4ySM32qBJ5RX1aDjCnirBHDZxkhaMjO/Mld8G eq5/LgxqtiMx1iMz7LwZ5ku/9KVAM9wbtENeDh7cdyHJUTty5IPvjKFTR77SKsCz CH4dMH1yETkJe2i26EoTzwKcqFe8qoWvQGHACY9L8U31iW1rowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhthEYZnYOJludafCHcn1XkNWUSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjM0Yzk1NDItYzdkMy0z ZDJhLWE2NWMtMTg3MWNiYzRjOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVhCrWiGRottIhtpwQka5t5znSFpGS4gNFS16hXXCf9gLLwsgR4bjtK RdPq3tmEpYkqLQ1k6aNVUmvbWjiX9LGK1RexCH2opmUuzWw4/Q0L53O8KgLZ5GPy CTpgeZCuBVOAJJiMdKGTOw0CXEWezWFxaR2uGEPb9GembvFv5xPlq1nbKpRt425V p6Kib2XuLQAtRACK8mIeHkPNS7vAVW/UC1+RnL+p4I031PCDNUHsD+L5y/5t4Qew US2zPQ/rRHyt+RjKRdmmNt5Tm4WbgnclSK/U0G0mLvV6MlY28v9nDsW0L8dMk1R3 sYH0r1Z8GHnCtqtErQe6V1QLWMx0qDk= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:01 2026 by rpki-client