$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/55aa0d63-d5ec-31ce-ad4c-38aaa2a1be17.roa File: 55aa0d63-d5ec-31ce-ad4c-38aaa2a1be17.roa (raw, json) Hash identifier: sgGM+aWidHc/DlvqKGwJ58CUt8d9AHM8OdTkLGoZYqY= Subject key identifier: 00:31:A8:49:BA:49:38:6F:FB:34:EC:60:35:A7:06:DE:8F:47:AA:CD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F25066C99E8CAB746900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/55aa0d63-d5ec-31ce-ad4c-38aaa2a1be17.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396612 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f2:50:66:c9:9e:8c:ab:74:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=a5b1587c-6dba-47b2-b3ca-cd5d0f06b8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:85:d5:b2:61:b2:8e:71:31:c3:ca:c1:8b:d2: 95:4e:ef:1c:3e:34:e0:d3:c0:20:b1:98:03:1e:76: 0e:36:31:b2:fe:49:6f:41:86:88:e9:db:d4:84:18: 27:09:55:dc:1e:5c:f3:68:b1:06:f6:0b:ed:c9:e0: 7d:e5:1e:d6:b0:43:cf:e3:ba:c9:99:8a:8f:9c:c6: 7b:e5:54:6d:5a:de:4f:58:8d:10:04:ec:58:fd:0a: 99:1e:de:2d:ee:5a:7e:cf:cc:58:63:08:4b:82:f8: e0:bd:b7:eb:b3:3c:e6:bc:1f:1c:9e:c0:30:1d:1d: 09:28:b7:9c:18:d1:00:5b:ec:ef:4b:f1:0d:e0:96: e0:24:53:92:ea:c9:d6:aa:21:17:0d:5d:f5:61:12: 8f:88:29:ad:e7:1b:06:39:48:a7:01:3e:10:02:18: e3:18:9d:f4:04:4e:f8:34:13:e5:e2:16:66:51:66: c8:b4:d6:24:81:9f:53:0e:92:3a:e4:f1:92:50:3b: 04:49:ae:ed:9b:e8:ab:f2:5a:7a:62:c4:1a:8f:fb: cc:d1:87:c0:11:0d:d6:1c:88:1e:ce:41:0f:2b:f5: b9:dc:75:c8:98:43:77:2e:a7:16:8c:b2:31:33:ff: 11:2c:7c:9a:b8:29:c3:3b:3a:c1:81:b1:81:84:c4: 42:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:31:A8:49:BA:49:38:6F:FB:34:EC:60:35:A7:06:DE:8F:47:AA:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/55aa0d63-d5ec-31ce-ad4c-38aaa2a1be17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:fd:92:74:26:51:3f:79:27:10:e0:ff:6d:5d:45:5e:a1:22: 1a:f9:34:9f:e9:61:bd:63:9b:75:e0:bb:51:72:cf:f1:91:0a: 44:f1:58:b7:21:18:9f:c5:8d:e3:12:38:64:42:84:5d:04:88: 86:cb:f3:57:5a:e2:ab:bf:47:1c:18:64:87:46:e2:4a:4e:fa: 23:48:a5:3d:8d:e7:da:88:c6:7c:16:7b:c5:0d:99:70:61:b9: 4c:71:b5:ec:cf:a1:46:db:94:4c:23:5b:7e:4b:72:a3:9e:9c: 20:92:f5:02:47:05:95:50:ce:50:36:6b:f5:83:7a:5c:65:aa: c6:ba:29:6a:8b:db:a2:41:b9:c5:6f:d6:ad:f0:9f:6e:77:8b: 03:ff:89:04:a0:0b:c3:88:c7:70:f0:1b:cd:dd:cc:f8:5c:97: 00:bc:68:28:d5:14:30:03:ec:3e:72:c3:f0:ee:44:6d:7d:43: 39:70:c0:4e:8a:ab:29:16:4a:52:ee:58:28:15:5b:4f:7a:fa: 81:6e:c4:ee:e9:36:63:63:b4:0c:d5:ce:a8:99:ff:63:01:1b: 2a:36:09:c7:f0:d5:df:ec:64:52:b3:3c:56:2b:85:53:d5:3f: 8e:1a:ba:d7:e2:46:9c:41:59:95:17:46:40:34:4c:46:b0:e2: 48:95:b0:0e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvJQZsmejKt0aQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YTViMTU4N2MtNmRiYS00N2IyLWIzY2EtY2Q1ZDBmMDZiOGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIXVsmGyjnExw8rBi9KVTu8cPjTg08AgsZgD HnYONjGy/klvQYaI6dvUhBgnCVXcHlzzaLEG9gvtyeB95R7WsEPP47rJmYqPnMZ7 5VRtWt5PWI0QBOxY/QqZHt4t7lp+z8xYYwhLgvjgvbfrszzmvB8cnsAwHR0JKLec GNEAW+zvS/EN4JbgJFOS6snWqiEXDV31YRKPiCmt5xsGOUinAT4QAhjjGJ30BE74 NBPl4hZmUWbItNYkgZ9TDpI65PGSUDsESa7tm+ir8lp6YsQaj/vM0YfAEQ3WHIge zkEPK/W53HXImEN3LqcWjLIxM/8RLHyauCnDOzrBgbGBhMRCTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAAxqEm6SThv+zTsYDWnBt6PR6rNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTVhYTBkNjMtZDVlYy0z MWNlLWFkNGMtMzhhYWEyYTFiZTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAc/ZJ0JlE/eScQ4P9tXUVeoSIa+TSf6WG9Y5t14LtRcs/xkQpE8Vi3 IRifxY3jEjhkQoRdBIiGy/NXWuKrv0ccGGSHRuJKTvojSKU9jefaiMZ8FnvFDZlw YblMcbXsz6FG25RMI1t+S3KjnpwgkvUCRwWVUM5QNmv1g3pcZarGuilqi9uiQbnF b9at8J9ud4sD/4kEoAvDiMdw8BvN3cz4XJcAvGgo1RQwA+w+csPw7kRtfUM5cMBO iqspFkpS7lgoFVtPevqBbsTu6TZjY7QM1c6omf9jARsqNgnH8NXf7GRSszxWK4VT 1T+OGrrX4kacQVmVF0ZANExGsOJIlbAO -----END CERTIFICATE-----Generated at Wed Oct 7 08:00:10 2026 by rpki-client