$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f2d8f6a-3167-316a-8895-801a562b5b83.roa File: 3f2d8f6a-3167-316a-8895-801a562b5b83.roa (raw, json) Hash identifier: PF87zBth4mFe9H3a8r2MPIjal0V0NguaR3YtHhc2Fpc= Subject key identifier: 76:1A:EE:76:83:88:42:6C:5C:08:92:D8:A0:CC:50:71:E1:CE:A6:49 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49738B0B9228D6FD708F7900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f2d8f6a-3167-316a-8895-801a562b5b83.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396596 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:8b:0b:92:28:d6:fd:70:8f:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=013ddb22-bd6f-4a72-a06a-501623410754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5b:4c:28:d4:42:d1:a3:c6:62:52:7f:c2:f0: 04:03:69:0c:fc:e5:94:62:f9:fc:15:a3:74:44:45: 8a:97:ab:a6:80:a4:2e:04:2d:0b:f7:3c:38:f3:a0: 4a:bd:f9:17:9f:76:66:bb:8b:32:62:9a:e0:23:7b: 41:c8:54:0d:5a:1d:5d:7e:e1:54:9f:c2:b2:6e:7c: f1:d4:3b:e3:1a:7d:a7:bf:cc:b7:22:48:50:e7:df: 9f:53:52:e3:19:e8:1c:b5:ed:aa:8e:05:fb:30:45: 40:03:f8:03:f2:6e:7c:ae:88:13:bf:99:81:9e:4e: 5d:7a:9c:69:88:e2:4a:e8:d6:3b:46:56:a7:7a:24: 0f:04:f6:cc:2c:7e:98:12:37:d4:62:ab:68:31:22: 4a:64:36:4f:60:06:e0:4e:28:58:83:1e:4c:79:ac: e3:97:59:67:17:d3:70:91:db:b6:22:f6:a2:55:39: a7:a6:63:25:24:7f:57:aa:b7:59:cd:27:e1:1d:07: ae:9f:0c:06:db:2e:e4:83:7b:cd:f2:0a:7d:d8:f8: 5c:47:83:37:a4:72:8b:21:86:78:9e:a5:67:8c:dc: 18:66:f8:24:7b:fa:37:04:f3:79:7a:14:04:02:b7: 8d:1b:aa:99:af:12:db:e1:91:ce:8f:7b:46:ac:45: 06:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1A:EE:76:83:88:42:6C:5C:08:92:D8:A0:CC:50:71:E1:CE:A6:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f2d8f6a-3167-316a-8895-801a562b5b83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:33:87:4a:b7:2a:28:51:36:c1:3c:e4:ef:68:7a:f4:a0:3e: e1:e7:66:32:3b:fa:87:37:b8:a6:04:1b:6b:98:ab:bb:39:51: 27:38:2e:0e:4f:2b:23:2a:ae:e6:10:fd:92:7a:15:a0:bd:f9: 0e:ec:30:6c:bc:c8:9e:84:64:f5:93:c8:6b:5b:e3:12:54:34: c6:f0:e8:53:e3:65:8d:e8:59:bc:a6:3b:41:eb:5f:27:ee:3c: ef:06:cb:ad:b2:40:4e:32:58:0d:7f:d9:35:92:42:6c:bd:e1: 85:d1:cf:6b:3d:21:48:e6:cc:42:fe:43:42:e2:61:c5:4e:6b: 80:90:0e:08:63:f3:cd:4e:e0:98:a5:6d:09:fe:09:70:e0:4b: c6:2b:22:bc:7c:15:18:ac:a5:8b:4a:6c:05:67:6a:9e:c0:7b: e7:52:8f:93:90:55:8f:55:70:f5:c8:f1:a8:98:ed:48:dc:63: 5a:97:c5:49:87:0c:33:42:0c:99:49:40:ab:78:23:9f:ab:8d: 09:03:01:cf:f9:ff:c2:2c:dc:fc:37:6e:4c:6f:d8:a1:fe:1d: 9d:4f:6c:32:b3:86:eb:63:69:6a:ee:0a:c8:b7:28:60:b6:4e: d9:4b:e2:b7:8b:9a:a2:3b:3d:30:ad:3a:38:a4:54:91:1a:51: ea:db:66:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc4sLkijW/XCPeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDEzZGRiMjItYmQ2Zi00YTcyLWEwNmEtNTAxNjIzNDEwNzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiltMKNRC0aPGYlJ/wvAEA2kM/OWUYvn8FaN0 REWKl6umgKQuBC0L9zw486BKvfkXn3Zmu4syYprgI3tByFQNWh1dfuFUn8Kybnzx 1DvjGn2nv8y3IkhQ59+fU1LjGegcte2qjgX7MEVAA/gD8m58rogTv5mBnk5depxp iOJK6NY7RlaneiQPBPbMLH6YEjfUYqtoMSJKZDZPYAbgTihYgx5Meazjl1lnF9Nw kdu2IvaiVTmnpmMlJH9XqrdZzSfhHQeunwwG2y7kg3vN8gp92PhcR4M3pHKLIYZ4 nqVnjNwYZvgke/o3BPN5ehQEAreNG6qZrxLb4ZHOj3tGrEUGWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYa7naDiEJsXAiS2KDMUHHhzqZJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2YyZDhmNmEtMzE2Ny0z MTZhLTg4OTUtODAxYTU2MmI1YjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8zh0q3KihRNsE85O9oevSgPuHnZjI7+oc3uKYEG2uYq7s5USc4Lg5P KyMqruYQ/ZJ6FaC9+Q7sMGy8yJ6EZPWTyGtb4xJUNMbw6FPjZY3oWbymO0HrXyfu PO8Gy62yQE4yWA1/2TWSQmy94YXRz2s9IUjmzEL+Q0LiYcVOa4CQDghj881O4Jil bQn+CXDgS8YrIrx8FRispYtKbAVnap7Ae+dSj5OQVY9VcPXI8aiY7UjcY1qXxUmH DDNCDJlJQKt4I5+rjQkDAc/5/8Is3Pw3bkxv2KH+HZ1PbDKzhutjaWruCsi3KGC2 TtlL4reLmqI7PTCtOjikVJEaUerbZsU= -----END CERTIFICATE-----Generated at Thu Oct 8 09:16:53 2026 by rpki-client