$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ea4ff8-a757-3282-be61-5854c9bdee32.roa File: 40ea4ff8-a757-3282-be61-5854c9bdee32.roa (raw, json) Hash identifier: jOumdIymqFHQQOEcV7nYbVdW2OAmhJ3JUk28dux6KR4= Subject key identifier: E2:59:4E:23:2B:A4:EB:5C:90:A9:6B:51:23:8A:38:F5:4D:90:9A:A5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584ED4325A5828975117D04B8300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ea4ff8-a757-3282-be61-5854c9bdee32.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 0 IP address blocks: 209.112.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:5a:58:28:97:51:17:d0:4b:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=d6ee934f-bc51-4930-b299-197161415b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:99:eb:dc:04:0f:ca:9c:03:51:2f:9a:36:b4: af:5f:e2:7c:ee:97:ce:6b:dc:34:14:b8:34:2e:28: 5d:cb:d4:c7:6e:1f:75:9f:c5:70:96:63:f7:ca:fb: af:23:74:27:a1:8a:57:4b:25:be:94:f6:c1:9e:ff: 9f:4b:84:b0:ea:31:9a:e2:05:b7:09:ba:2a:57:e5: 13:56:02:66:98:5f:ca:35:db:8d:ca:7d:c5:8e:35: ab:e5:2d:a1:80:df:d9:6b:95:35:7c:37:60:95:c3: f8:59:ef:73:67:3e:64:3a:10:fa:fe:3b:75:4c:93: 07:f7:6c:88:de:f4:e1:9e:a6:15:e4:fb:98:e3:9b: 5e:0c:6f:f1:ee:43:d4:a9:88:81:a1:e8:20:22:7c: e8:ad:1d:c0:de:d6:5c:4f:47:7c:e0:31:51:ca:e3: 8e:47:d8:7a:b4:c6:81:47:9c:e9:b2:aa:78:65:99: c9:c3:44:61:9b:b3:7e:e9:3b:2b:7f:a6:9b:f2:a0: dc:de:f9:54:86:b5:ea:75:d2:23:fe:82:14:7d:d3: cf:d4:32:c1:a6:77:5f:a7:0f:c6:f5:1d:0b:c2:c5: 52:f8:0b:ec:f5:53:7d:71:ea:44:a7:28:aa:f4:8b: 63:eb:73:cd:58:73:e1:8a:c4:58:7e:4e:d9:72:8e: 00:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:59:4E:23:2B:A4:EB:5C:90:A9:6B:51:23:8A:38:F5:4D:90:9A:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ea4ff8-a757-3282-be61-5854c9bdee32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:74:89:c5:6e:ab:bd:50:56:ee:0d:32:27:fa:47:be:3f:d3: fa:5d:ec:b0:35:74:0e:97:92:0a:2a:a7:fd:6b:b8:a8:ca:4d: ed:3f:aa:71:b3:37:c8:53:20:93:9b:05:87:83:76:f4:14:79: 49:6f:99:0f:89:9c:2e:a6:b2:70:9e:c4:8b:4c:10:cb:75:ce: 38:57:ed:4d:b2:1e:87:84:5e:50:50:2d:2a:00:33:56:ac:b6: c4:da:6e:c2:fc:ab:8a:b8:03:86:96:67:5a:3e:3d:fe:78:17: 69:45:81:00:80:48:04:1e:36:bd:5a:1e:73:78:6a:36:79:95: 9c:50:38:aa:5c:83:57:92:7e:7d:ca:6f:92:1f:1a:cc:c3:a4: 8f:cb:d5:e5:cf:92:0a:c9:44:e1:10:fe:1e:84:1b:3f:0b:02: a3:b4:f4:cd:d2:21:b1:7a:8c:3d:a1:0c:2d:aa:08:e0:fa:6d: 45:e9:c5:aa:64:1a:3c:e6:2e:a4:91:2f:eb:40:68:cb:2d:1a: 74:5d:1c:8a:fa:7a:02:45:1e:44:19:80:37:58:c4:8b:c0:a0: 72:64:a8:9e:39:b3:a9:71:a2:ab:93:aa:bc:e1:1e:93:0c:5a: 90:5d:46:86:37:76:6c:aa:48:b8:f5:ad:93:73:60:f8:45:19: ea:eb:05:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMlpYKJdRF9BLgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZDZlZTkzNGYtYmM1MS00OTMwLWIyOTktMTk3MTYxNDE1YjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpnr3AQPypwDUS+aNrSvX+J87pfOa9w0FLg0 Lihdy9THbh91n8VwlmP3yvuvI3QnoYpXSyW+lPbBnv+fS4Sw6jGa4gW3CboqV+UT VgJmmF/KNduNyn3FjjWr5S2hgN/Za5U1fDdglcP4We9zZz5kOhD6/jt1TJMH92yI 3vThnqYV5PuY45teDG/x7kPUqYiBoeggInzorR3A3tZcT0d84DFRyuOOR9h6tMaB R5zpsqp4ZZnJw0Rhm7N+6Tsrf6ab8qDc3vlUhrXqddIj/oIUfdPP1DLBpndfpw/G 9R0LwsVS+Avs9VN9cepEpyiq9Itj63PNWHPhisRYfk7Zco4APQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJZTiMrpOtckKlrUSOKOPVNkJqlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDBlYTRmZjgtYTc1Ny0z MjgyLWJlNjEtNTg1NGM5YmRlZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp0icVuq71QVu4NMif6R74/0/pd7LA1dA6Xkgoqp/1ruKjKTe0/qnGz N8hTIJObBYeDdvQUeUlvmQ+JnC6msnCexItMEMt1zjhX7U2yHoeEXlBQLSoAM1as tsTabsL8q4q4A4aWZ1o+Pf54F2lFgQCASAQeNr1aHnN4ajZ5lZxQOKpcg1eSfn3K b5IfGszDpI/L1eXPkgrJROEQ/h6EGz8LAqO09M3SIbF6jD2hDC2qCOD6bUXpxapk GjzmLqSRL+tAaMstGnRdHIr6egJFHkQZgDdYxIvAoHJkqJ45s6lxoquTqrzhHpMM WpBdRoY3dmyqSLj1rZNzYPhFGerrBYg= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:40 2026 by rpki-client