$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e00a0a2-de98-3d35-b748-4fc81b333fd4.roa File: 4e00a0a2-de98-3d35-b748-4fc81b333fd4.roa (raw, json) Hash identifier: SnOX4d7vtfszcN0WgtaSjN9QmRljUfjXrhS+tJLFW6c= Subject key identifier: 9E:FD:66:AB:62:62:C6:18:85:58:38:7F:C9:03:C4:77:A8:19:FD:22 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F372FC3DC77B95ACE580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e00a0a2-de98-3d35-b748-4fc81b333fd4.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396543 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f3:72:fc:3d:c7:7b:95:ac:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=04a4d634-fef5-4be5-bd7a-76f8b0e1df80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:60:a7:d0:45:5d:97:24:24:d2:5a:73:25:26: 74:f2:84:8a:52:cd:dd:3d:d8:cb:d8:8f:49:5e:8c: 52:1c:eb:90:14:cb:74:6c:22:7d:16:3f:10:40:c3: e0:90:7f:82:b8:01:ac:67:bd:e0:11:3c:1a:ac:d4: 12:c7:90:44:ac:03:37:bf:a0:ef:26:b6:e3:a4:c7: 64:a6:fe:15:28:6e:e1:37:80:2e:e0:e4:53:a6:c9: 46:7a:84:30:9a:49:d7:76:79:0e:55:d8:b3:e0:a6: 8d:e2:1b:52:0f:ce:de:01:b3:77:4d:d6:03:64:80: d4:b4:73:a4:9e:b2:17:6e:b2:d3:02:02:93:75:ad: b4:d6:fa:c3:38:00:6c:96:19:1d:b8:02:d6:6b:f8: af:bb:96:7c:f9:4f:93:29:29:9c:15:af:e7:dc:0e: 43:d0:67:69:90:b5:03:fa:b1:90:97:0b:77:e9:86: e8:83:16:71:d6:43:4f:e2:b0:f1:9c:6c:f7:fc:87: f2:e5:91:63:bc:1a:55:6b:d2:60:18:b3:05:9c:2f: 9b:78:ab:15:7e:9f:e1:2b:30:29:8a:d6:a6:4c:32: c2:26:b4:48:89:05:8a:9a:0e:b4:cf:19:0e:27:24: e8:ce:77:f0:2e:f9:47:25:5a:b2:36:55:16:df:0b: 80:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FD:66:AB:62:62:C6:18:85:58:38:7F:C9:03:C4:77:A8:19:FD:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e00a0a2-de98-3d35-b748-4fc81b333fd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b2:56:f0:73:ad:26:87:2b:6c:06:14:b1:79:72:f6:47:f2: 7e:b0:6e:59:15:7f:b7:3b:5f:eb:fb:49:06:59:70:7e:38:16: 39:5e:5f:71:cc:ed:4b:c9:0e:6a:89:9d:7d:bc:f4:12:32:5c: c9:03:bd:2a:fc:70:26:e1:ed:d9:15:83:98:a8:1b:6e:09:f5: ef:4b:ff:48:1a:2b:a8:7b:49:df:1f:f6:30:b6:7b:bb:01:92: 8e:81:09:a2:0a:7b:ff:70:af:b3:c0:d7:02:ce:86:6a:34:49: 86:f1:ce:c6:30:63:c9:d2:dc:f4:5b:29:32:a2:f7:fe:79:4a: 57:3d:02:29:e2:1e:62:d3:81:1b:d0:37:fc:37:02:f7:3d:4a: 57:16:54:05:4e:f3:19:bc:34:3f:67:0d:91:9f:07:97:a6:f4: ee:ea:56:e9:aa:ce:c5:de:ba:44:1a:d0:06:5c:bc:cd:23:98: 38:bc:4f:96:88:63:0f:a3:12:79:03:e1:bd:57:19:38:74:48: d9:bd:67:aa:29:62:f1:ef:4e:d1:e9:f8:42:9a:aa:df:af:cb: f3:f7:0e:84:5d:98:b7:db:dc:f9:53:e7:fb:7b:14:f4:90:ea: f1:43:79:5c:3c:e0:b3:85:5f:aa:bc:d1:e4:ec:f1:9b:78:20: 79:cc:16:94 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvNy/D3He5Ws5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MDRhNGQ2MzQtZmVmNS00YmU1LWJkN2EtNzZmOGIwZTFkZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWCn0EVdlyQk0lpzJSZ08oSKUs3dPdjL2I9J XoxSHOuQFMt0bCJ9Fj8QQMPgkH+CuAGsZ73gETwarNQSx5BErAM3v6DvJrbjpMdk pv4VKG7hN4Au4ORTpslGeoQwmknXdnkOVdiz4KaN4htSD87eAbN3TdYDZIDUtHOk nrIXbrLTAgKTda201vrDOABslhkduALWa/ivu5Z8+U+TKSmcFa/n3A5D0GdpkLUD +rGQlwt36YbogxZx1kNP4rDxnGz3/Ify5ZFjvBpVa9JgGLMFnC+beKsVfp/hKzAp itamTDLCJrRIiQWKmg60zxkOJyToznfwLvlHJVqyNlUW3wuAawIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ79ZqtiYsYYhVg4f8kDxHeoGf0iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGUwMGEwYTItZGU5OC0z ZDM1LWI3NDgtNGZjODFiMzMzZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBislbwc60mhytsBhSxeXL2R/J+sG5ZFX+3O1/r+0kGWXB+OBY5Xl9x zO1LyQ5qiZ19vPQSMlzJA70q/HAm4e3ZFYOYqBtuCfXvS/9IGiuoe0nfH/Ywtnu7 AZKOgQmiCnv/cK+zwNcCzoZqNEmG8c7GMGPJ0tz0Wykyovf+eUpXPQIp4h5i04Eb 0Df8NwL3PUpXFlQFTvMZvDQ/Zw2RnweXpvTu6lbpqs7F3rpEGtAGXLzNI5g4vE+W iGMPoxJ5A+G9Vxk4dEjZvWeqKWLx707R6fhCmqrfr8vz9w6EXZi329z5U+f7exT0 kOrxQ3lcPOCzhV+qvNHk7PGbeCB5zBaU -----END CERTIFICATE-----Generated at Wed Oct 7 13:06:00 2026 by rpki-client