$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2465ffb4-559d-35df-bb3d-e068c94d5c1e.roa File: 2465ffb4-559d-35df-bb3d-e068c94d5c1e.roa (raw, json) Hash identifier: 5ctneusw9LdfgnrStsvx9g5nI76XPyXJ2j9Fq96rvMg= Subject key identifier: 19:BA:7C:B4:D3:92:7B:FB:3B:E0:46:4D:73:2D:C9:D0:36:3A:58:C7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49873B9A450A3D61764C1320 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2465ffb4-559d-35df-bb3d-e068c94d5c1e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396605 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:3b:9a:45:0a:3d:61:76:4c:13:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1b3c11f1-09e1-4ae6-b537-182786a1db03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3c:54:73:19:bd:0a:80:33:50:e4:1a:b6:c7: dc:9e:53:a6:dd:02:b6:6e:4d:58:5c:bc:13:5f:1a: e1:b9:a0:be:89:99:59:f3:c7:61:51:73:4a:c9:e4: 09:78:ec:3c:f8:91:16:0e:86:96:ec:d5:fc:cb:54: 40:84:6c:df:54:1b:5b:2d:c4:c7:62:6f:03:e7:05: c3:9f:e2:55:a3:a8:a1:5b:7a:8c:27:fc:a6:61:93: 66:40:fa:04:3f:bd:2e:5d:3e:3b:c2:ad:ea:be:16: 03:fb:b6:36:a1:b3:ee:ad:d1:81:e5:2a:c0:80:a6: 75:ed:6d:c7:b3:32:dc:98:fc:a3:90:dd:c3:29:bc: 08:f4:7c:45:0b:a4:98:4d:d1:c8:40:ac:f5:6f:72: b7:8a:ae:3a:06:76:bc:84:8f:57:08:29:5a:37:e3: 90:84:a7:6e:62:23:4b:2a:b2:39:7b:74:3f:77:9d: 54:79:1f:15:15:cc:f8:ce:0f:5e:21:fc:f6:92:0c: 8e:ef:d8:d3:16:3a:cb:e7:82:03:89:7a:52:1b:e9: 91:e5:4a:da:71:a5:c9:d0:83:33:d7:5d:0d:f5:72: 08:29:33:13:03:f6:bd:7e:3f:d5:fc:ca:f4:47:fb: 1a:4a:bd:21:91:62:22:22:d9:48:81:c0:02:ea:4c: cb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BA:7C:B4:D3:92:7B:FB:3B:E0:46:4D:73:2D:C9:D0:36:3A:58:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2465ffb4-559d-35df-bb3d-e068c94d5c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:65:3e:0a:db:6a:fb:d3:fc:dd:d1:a3:c1:80:5a:b7:ac:0a: 70:86:f4:08:ad:41:54:5a:9a:dd:80:3f:a1:58:0e:20:e7:b5: 3c:71:42:53:14:45:4a:02:6d:35:14:b0:91:0c:96:7f:ad:24: 06:e3:a8:76:d9:22:bc:00:54:4b:1a:4e:51:b2:3c:be:e1:9c: 10:e9:9b:94:15:c7:20:f3:29:1a:18:51:2c:9e:89:0e:91:a0: 94:60:2f:cf:a7:a1:1b:d6:5d:9f:71:19:93:18:a2:2d:74:31: 3e:12:8e:ab:17:57:1b:32:42:cf:54:74:e2:04:20:b4:c4:cc: 98:9d:10:6d:0a:ac:89:6f:98:71:d8:80:4e:93:f6:07:7e:3e: 09:fd:cf:06:7b:2a:2d:07:03:39:d4:17:c0:ef:43:98:1d:17: ba:34:85:e5:03:34:f5:c9:32:66:ab:b4:3b:eb:13:63:7e:f7: 97:6d:1b:59:9d:b6:a5:14:0d:81:68:3c:df:8b:55:57:11:91: 8d:ff:47:ef:f4:44:41:b3:a8:c4:cc:40:7c:19:3c:82:da:d6: a3:53:e7:b6:56:99:9a:77:34:b6:9a:9c:be:23:c6:bd:3c:35: 7c:d4:12:1f:60:8f:9b:42:e4:f3:66:3c:e6:76:9f:1f:b9:6a: d7:cb:9d:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhzuaRQo9YXZMEyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWIzYzExZjEtMDllMS00YWU2LWI1MzctMTgyNzg2YTFkYjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDxUcxm9CoAzUOQatsfcnlOm3QK2bk1YXLwT XxrhuaC+iZlZ88dhUXNKyeQJeOw8+JEWDoaW7NX8y1RAhGzfVBtbLcTHYm8D5wXD n+JVo6ihW3qMJ/ymYZNmQPoEP70uXT47wq3qvhYD+7Y2obPurdGB5SrAgKZ17W3H szLcmPyjkN3DKbwI9HxFC6SYTdHIQKz1b3K3iq46Bna8hI9XCClaN+OQhKduYiNL KrI5e3Q/d51UeR8VFcz4zg9eIfz2kgyO79jTFjrL54IDiXpSG+mR5UracaXJ0IMz 110N9XIIKTMTA/a9fj/V/Mr0R/saSr0hkWIiItlIgcAC6kzLaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBm6fLTTknv7O+BGTXMtydA2OljHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjQ2NWZmYjQtNTU5ZC0z NWRmLWJiM2QtZTA2OGM5NGQ1YzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZlPgrbavvT/N3Ro8GAWresCnCG9AitQVRamt2AP6FYDiDntTxxQlMU RUoCbTUUsJEMln+tJAbjqHbZIrwAVEsaTlGyPL7hnBDpm5QVxyDzKRoYUSyeiQ6R oJRgL8+noRvWXZ9xGZMYoi10MT4SjqsXVxsyQs9UdOIEILTEzJidEG0KrIlvmHHY gE6T9gd+Pgn9zwZ7Ki0HAznUF8DvQ5gdF7o0heUDNPXJMmartDvrE2N+95dtG1md tqUUDYFoPN+LVVcRkY3/R+/0REGzqMTMQHwZPILa1qNT57ZWmZp3NLaanL4jxr08 NXzUEh9gj5tC5PNmPOZ2nx+5atfLnUI= -----END CERTIFICATE-----Generated at Tue Oct 6 21:50:46 2026 by rpki-client