$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f4a9125-8f6d-3a3e-ac3f-42ecf44f6087.roa File: 3f4a9125-8f6d-3a3e-ac3f-42ecf44f6087.roa (raw, json) Hash identifier: XwCPUr0VzbKlGFKPPl1GdkzfuMRLcBW34re4HUAn5AI= Subject key identifier: 64:DB:F7:36:A4:F5:D9:49:C0:0B:14:36:E0:72:45:6E:12:D4:0B:A7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F579C4937994CED45E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f4a9125-8f6d-3a3e-ac3f-42ecf44f6087.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 397198 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f5:79:c4:93:79:94:ce:d4:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=994bba75-d78c-4273-a0de-ef9cb74c4cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0e:34:df:11:c9:cc:0a:f9:c8:22:74:91:f7: f8:cd:50:46:53:30:f9:3a:c9:80:08:30:74:87:c0: e7:f4:c8:83:c1:0c:00:32:31:3c:2e:ea:27:0e:c1: 73:d9:ea:4f:a6:53:84:84:bf:06:b1:ae:a9:40:1a: 87:b8:35:1c:1d:62:76:b5:ec:44:bf:bc:42:4d:11: 1b:8f:0b:54:25:8a:c7:2b:99:e4:23:b3:01:5c:31: 8a:d9:e1:db:5c:09:9f:c6:cc:f5:1a:98:8e:54:67: 42:2f:98:af:87:95:e3:d9:7d:7b:09:f9:30:bb:6b: d3:52:9d:81:b6:85:82:61:1d:1d:d6:84:bc:d8:56: 62:dc:41:54:06:2d:c5:03:07:a5:34:86:29:eb:58: 0e:2e:a3:60:34:84:c9:0e:b7:11:1f:cb:c0:89:30: 16:7b:3a:95:e0:8c:52:4c:e4:5a:de:02:ad:f2:ba: 71:cb:ca:96:06:24:f5:3f:fb:35:13:60:8c:2f:24: e6:98:6b:e7:e2:07:72:79:3f:3f:ca:c5:ac:4b:db: 45:00:c3:a5:3d:c6:10:06:a1:69:67:b5:fc:14:78: 57:60:e9:c7:9f:1e:23:f8:59:4a:7b:2e:ea:6b:d9: c6:95:39:86:4c:19:e6:6b:d6:e6:54:93:fa:f5:df: eb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DB:F7:36:A4:F5:D9:49:C0:0B:14:36:E0:72:45:6E:12:D4:0B:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f4a9125-8f6d-3a3e-ac3f-42ecf44f6087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:71:ae:d7:33:14:52:9f:5d:b8:78:de:70:eb:11:e1:c7:a1: 38:87:fa:a8:66:f6:a8:80:15:bd:bb:a7:25:c3:ae:14:27:9d: 05:c1:01:44:f0:51:97:a4:ce:13:02:ef:41:69:89:1a:41:40: e3:fc:81:52:73:47:d5:35:36:49:73:85:b3:e9:ab:f2:e8:48: 97:e5:3a:ae:c2:d7:20:1c:47:0f:4e:27:42:37:e8:db:65:61: 56:a9:b6:b8:06:d2:30:09:db:78:bf:8d:98:16:4d:af:6a:c6: 56:5f:31:c7:4a:09:81:82:d4:f4:46:96:0e:45:c9:9a:55:1b: 70:3a:77:76:c8:69:bf:56:2c:c4:b5:d0:c5:1b:b8:1b:6b:2b: ad:9c:83:e7:55:2b:13:a6:82:b6:f0:81:b3:74:00:d8:a8:c9: b3:5c:49:eb:91:48:0e:af:f2:be:0c:e8:9c:14:44:0f:04:76: 82:fe:a9:b7:58:59:eb:10:d1:6e:ed:95:68:de:b3:1d:8b:49: 72:fd:1f:4a:a8:cd:69:50:66:6c:02:fd:3b:fc:a5:76:32:fa: 13:c2:e8:7f:bc:d7:42:45:c4:db:e2:f6:1e:f5:a7:ff:ce:29: f3:8d:7d:bd:ef:54:4a:af:e5:e1:36:1c:7c:bf:86:69:f5:27: e3:34:b4:c0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvV5xJN5lM7UXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OTk0YmJhNzUtZDc4Yy00MjczLWEwZGUtZWY5Y2I3NGM0Y2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg403xHJzAr5yCJ0kff4zVBGUzD5OsmACDB0 h8Dn9MiDwQwAMjE8LuonDsFz2epPplOEhL8Gsa6pQBqHuDUcHWJ2texEv7xCTREb jwtUJYrHK5nkI7MBXDGK2eHbXAmfxsz1GpiOVGdCL5ivh5Xj2X17Cfkwu2vTUp2B toWCYR0d1oS82FZi3EFUBi3FAwelNIYp61gOLqNgNITJDrcRH8vAiTAWezqV4IxS TORa3gKt8rpxy8qWBiT1P/s1E2CMLyTmmGvn4gdyeT8/ysWsS9tFAMOlPcYQBqFp Z7X8FHhXYOnHnx4j+FlKey7qa9nGlTmGTBnma9bmVJP69d/rgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGTb9zak9dlJwAsUNuByRW4S1AunMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2Y0YTkxMjUtOGY2ZC0z YTNlLWFjM2YtNDJlY2Y0NGY2MDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBcca7XMxRSn124eN5w6xHhx6E4h/qoZvaogBW9u6clw64UJ50FwQFE 8FGXpM4TAu9BaYkaQUDj/IFSc0fVNTZJc4Wz6avy6EiX5TquwtcgHEcPTidCN+jb ZWFWqba4BtIwCdt4v42YFk2vasZWXzHHSgmBgtT0RpYORcmaVRtwOnd2yGm/VizE tdDFG7gbayutnIPnVSsTpoK28IGzdADYqMmzXEnrkUgOr/K+DOicFEQPBHaC/qm3 WFnrENFu7ZVo3rMdi0ly/R9KqM1pUGZsAv07/KV2MvoTwuh/vNdCRcTb4vYe9af/ zinzjX2971RKr+XhNhx8v4Zp9SfjNLTA -----END CERTIFICATE-----Generated at Wed Oct 7 19:26:08 2026 by rpki-client