$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa File: 525cb902-d047-345f-b98a-33a46136085b.roa (raw, json) Hash identifier: gyGgMjieivq5cSg3qdks/kTUrkV40kVUS0BZyBNQRMw= Subject key identifier: BB:84:40:77:A0:EC:1C:D9:EA:9E:0D:23:D7:74:ED:9B:65:32:F1:F2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F6CB80361F60C0AF3580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396578 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f6:cb:80:36:1f:60:c0:af:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=3c507baa-194f-418a-9092-05ecfbd0e5b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4b:76:c8:44:12:af:35:9f:7f:37:f0:e6:bd: 41:e4:ae:e9:b4:77:44:cd:0d:f9:c4:0a:5b:0c:a0: 1b:e2:18:8c:53:5c:80:86:30:a2:54:34:03:d8:62: 57:7e:68:38:f9:f8:0f:cc:22:e1:56:2f:5e:b1:f0: a2:ef:d2:dd:56:bf:41:48:db:23:3f:4b:65:45:22: 9f:d0:02:19:7e:f1:74:34:4d:c0:f9:d1:a9:55:23: a0:ab:1c:22:af:ba:0b:ca:7e:1b:26:64:7d:af:f8: 1e:49:46:1d:5b:8f:fb:3d:56:8b:30:64:1c:3c:14: 73:b7:52:b0:e3:7a:b8:00:5c:f8:a4:ff:50:7f:a7: ae:a0:ce:60:e0:5f:c7:a3:3b:ee:e3:da:57:fc:49: ed:70:04:14:d6:73:da:cb:19:9a:85:a7:7d:05:1a: 24:d6:c8:f2:3d:42:46:8b:a2:09:1d:70:54:18:64: 28:d8:28:9a:34:cc:97:48:99:27:fe:01:3d:e5:c0: e8:49:0c:a1:f0:5c:9c:a2:00:ff:d2:cb:51:ac:ee: db:ea:56:da:92:40:fc:b9:42:f7:8a:f9:b2:de:66: f5:90:15:00:fb:5c:9b:cd:04:e5:c7:63:27:e0:23: 5d:9c:e4:fc:d5:48:8c:c4:6e:21:90:2f:56:58:8d: f6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:84:40:77:A0:EC:1C:D9:EA:9E:0D:23:D7:74:ED:9B:65:32:F1:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:e8:8b:45:94:fe:95:c8:cd:3b:4f:77:fc:bd:91:b3:c6:bd: c1:c4:b6:8a:73:08:ec:f2:43:33:11:a7:8b:7b:05:64:3f:46: 84:c3:77:f1:5f:e4:7b:65:e2:d6:88:e4:38:f9:83:6f:a8:31: 1a:ac:df:1a:42:d5:b7:1b:66:4f:56:5d:15:a5:e3:93:dd:d9: ed:a0:ab:b4:71:2c:34:51:ba:f0:a1:f1:3f:87:8b:22:b8:7d: 8c:e5:77:b9:c0:a6:e6:e3:51:e3:28:a7:2b:51:f8:a7:51:12: a6:ea:59:6e:e5:62:c4:89:fb:a1:39:cd:84:0d:68:2d:d6:75: 01:ae:38:69:50:5e:5d:6d:7d:5f:a6:85:3d:58:52:f6:d7:5d: b8:cd:3f:74:e4:70:03:83:fd:7b:87:bb:94:1c:c2:d5:db:17: cd:f5:be:16:3c:da:4f:c2:a1:e3:f8:49:2d:5a:1f:ef:da:fa: 9e:b9:35:d1:c3:f7:74:39:e1:a7:1f:97:54:0b:36:9e:7b:9c: b1:ac:16:f7:09:8f:f0:83:84:69:f2:52:93:d4:bd:f8:bf:03: a1:8d:b4:8a:5d:b4:99:df:1c:a8:1a:b9:4b:bb:04:c6:ab:36: 2c:5f:f3:3c:81:74:41:7f:5c:42:8a:75:f6:64:35:67:0b:b5: 80:ac:e4:8b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvbLgDYfYMCvNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk M2M1MDdiYWEtMTk0Zi00MThhLTkwOTItMDVlY2ZiZDBlNWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkt2yEQSrzWffzfw5r1B5K7ptHdEzQ35xApb DKAb4hiMU1yAhjCiVDQD2GJXfmg4+fgPzCLhVi9esfCi79LdVr9BSNsjP0tlRSKf 0AIZfvF0NE3A+dGpVSOgqxwir7oLyn4bJmR9r/geSUYdW4/7PVaLMGQcPBRzt1Kw 43q4AFz4pP9Qf6euoM5g4F/Hozvu49pX/EntcAQU1nPayxmahad9BRok1sjyPUJG i6IJHXBUGGQo2CiaNMyXSJkn/gE95cDoSQyh8FycogD/0stRrO7b6lbakkD8uUL3 ivmy3mb1kBUA+1ybzQTlx2Mn4CNdnOT81UiMxG4hkC9WWI32CwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLuEQHeg7BzZ6p4NI9d07ZtlMvHyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTI1Y2I5MDItZDA0Ny0z NDVmLWI5OGEtMzNhNDYxMzYwODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBz6ItFlP6VyM07T3f8vZGzxr3BxLaKcwjs8kMzEaeLewVkP0aEw3fx X+R7ZeLWiOQ4+YNvqDEarN8aQtW3G2ZPVl0VpeOT3dntoKu0cSw0UbrwofE/h4si uH2M5Xe5wKbm41HjKKcrUfinURKm6llu5WLEifuhOc2EDWgt1nUBrjhpUF5dbX1f poU9WFL21124zT905HADg/17h7uUHMLV2xfN9b4WPNpPwqHj+EktWh/v2vqeuTXR w/d0OeGnH5dUCzaee5yxrBb3CY/wg4Rp8lKT1L34vwOhjbSKXbSZ3xyoGrlLuwTG qzYsX/M8gXRBf1xCinX2ZDVnC7WArOSL -----END CERTIFICATE-----Generated at Tue Oct 6 23:09:56 2026 by rpki-client