$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c9297fa-98b4-3381-9e3c-cd6e8b303481.roa File: 4c9297fa-98b4-3381-9e3c-cd6e8b303481.roa (raw, json) Hash identifier: QcQv0SZ4dxqwplNe6IgrGl7c8zjIyhhVadq8+ICVEvs= Subject key identifier: 98:29:8C:00:85:1D:B8:73:DC:E6:84:D6:DA:86:3D:FA:81:8C:93:AC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F81CA9E0CC8A6D77CE88 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c9297fa-98b4-3381-9e3c-cd6e8b303481.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396564 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f8:1c:a9:e0:cc:8a:6d:77:ce:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=41e3e727-1285-44a5-9644-5b44f994d46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5c:0c:55:bd:e9:60:98:ef:63:85:b9:f0:bc: a1:b5:eb:a9:c3:22:e3:05:72:11:45:19:26:2c:4a: 16:44:a9:44:bb:dd:f1:df:2b:f9:63:75:30:c6:22: 77:7b:5d:16:1a:8f:b0:04:87:2c:a5:d6:4e:3e:57: a2:e1:49:11:ba:6a:ff:b5:00:df:fb:a1:e8:e1:ef: e3:8d:30:e9:3b:ab:08:b1:b5:e2:f4:a9:36:fd:bc: 5c:af:a2:8a:86:97:37:24:27:5d:55:2d:a9:77:3b: d6:5b:6e:74:cd:5f:9d:a0:d4:f1:dc:e7:42:23:73: 65:c6:a3:5e:94:18:f2:cc:a0:f2:31:3b:85:a2:4a: b2:04:78:92:e5:29:0f:b7:20:8d:97:68:5d:bf:73: 06:cf:03:43:92:7c:79:0c:ca:1d:86:ac:44:1a:f3: 36:65:e1:34:0d:cf:6b:bf:f0:4a:4c:79:5c:fd:f5: 1e:2b:7f:67:3d:dc:6f:f0:1d:45:40:51:24:25:fd: 50:2c:b6:8c:d5:18:53:f0:a4:4b:97:2c:de:86:68: 22:1c:25:8e:0c:11:59:e2:cf:91:d4:01:a9:56:1e: e3:cb:9b:f1:10:3a:08:99:3f:ba:88:61:a6:60:3b: c2:1c:9d:ad:78:43:4f:9c:03:54:dd:d0:11:2a:09: 98:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:29:8C:00:85:1D:B8:73:DC:E6:84:D6:DA:86:3D:FA:81:8C:93:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c9297fa-98b4-3381-9e3c-cd6e8b303481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:0e:85:84:84:38:59:6f:1d:67:f9:c7:73:63:55:3e:2e:bb: 76:cd:73:76:16:90:8e:6a:c6:f4:31:09:93:5e:a8:73:10:2f: 75:ef:c8:78:f1:5a:19:f2:29:93:a5:5a:71:05:88:d3:fa:79: 60:39:98:6d:e5:36:89:cf:12:a7:4b:bf:a5:d6:84:0d:30:c5: d8:d8:e8:06:f3:01:71:5c:f1:ad:c2:0c:e1:24:cd:35:2e:47: 5b:06:88:0a:4d:b9:85:8c:2f:66:3e:57:8d:dc:1f:ce:d7:d2: 35:c0:32:57:65:b8:4f:e5:44:6e:d5:c1:59:e1:2a:6a:61:55: 07:37:59:67:c6:4f:0d:1a:67:a1:39:49:24:de:d9:f9:b3:1d: 97:f1:73:1a:f1:d0:5a:08:32:ef:03:a7:6c:79:38:25:78:fd: 47:a3:f3:9f:f5:94:47:70:e5:24:d4:49:59:92:d7:20:fe:49: b7:b0:30:e3:d8:b7:68:04:e9:32:33:a6:71:a2:9e:45:9f:13: 04:1c:2e:d2:b5:34:4c:84:99:43:00:d2:63:f2:04:09:14:d8: 99:f9:a0:25:a1:cf:81:85:ec:97:c4:14:f2:ca:ae:2c:66:37: ba:35:05:8c:23:6c:12:3f:60:d3:71:bd:8b:82:c3:e0:cc:a1: c8:ea:20:17 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvgcqeDMim13zogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NDFlM2U3MjctMTI4NS00NGE1LTk2NDQtNWI0NGY5OTRkNDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVwMVb3pYJjvY4W58LyhteupwyLjBXIRRRkm LEoWRKlEu93x3yv5Y3UwxiJ3e10WGo+wBIcspdZOPlei4UkRumr/tQDf+6Ho4e/j jTDpO6sIsbXi9Kk2/bxcr6KKhpc3JCddVS2pdzvWW250zV+doNTx3OdCI3NlxqNe lBjyzKDyMTuFokqyBHiS5SkPtyCNl2hdv3MGzwNDknx5DModhqxEGvM2ZeE0Dc9r v/BKTHlc/fUeK39nPdxv8B1FQFEkJf1QLLaM1RhT8KRLlyzehmgiHCWODBFZ4s+R 1AGpVh7jy5vxEDoImT+6iGGmYDvCHJ2teENPnANU3dARKgmYBwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJgpjACFHbhz3OaE1tqGPfqBjJOsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGM5Mjk3ZmEtOThiNC0z MzgxLTllM2MtY2Q2ZThiMzAzNDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCHDoWEhDhZbx1n+cdzY1U+Lrt2zXN2FpCOasb0MQmTXqhzEC9178h4 8VoZ8imTpVpxBYjT+nlgOZht5TaJzxKnS7+l1oQNMMXY2OgG8wFxXPGtwgzhJM01 LkdbBogKTbmFjC9mPleN3B/O19I1wDJXZbhP5URu1cFZ4SpqYVUHN1lnxk8NGmeh OUkk3tn5sx2X8XMa8dBaCDLvA6dseTgleP1Ho/Of9ZRHcOUk1ElZktcg/km3sDDj 2LdoBOkyM6Zxop5FnxMEHC7StTRMhJlDANJj8gQJFNiZ+aAloc+BheyXxBTyyq4s Zje6NQWMI2wSP2DTcb2LgsPgzKHI6iAX -----END CERTIFICATE-----Generated at Tue Oct 6 20:10:15 2026 by rpki-client