$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5602f271-c354-3acc-891a-b49116a2c3c1.roa File: 5602f271-c354-3acc-891a-b49116a2c3c1.roa (raw, json) Hash identifier: YHA32pYkjlwJwY/Y6q8gFMHFI7K/kxWnOXqs+5e9hOU= Subject key identifier: C1:F3:10:E2:FA:67:0D:FE:A7:2C:57:41:9A:FB:36:61:D0:49:EA:80 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498AFF907454E7747EB92BC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5602f271-c354-3acc-891a-b49116a2c3c1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396610 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:ff:90:74:54:e7:74:7e:b9:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8a2caea3-e189-45b9-9c81-bf3f08bac554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ef:dc:b6:d2:d9:2c:64:7f:0c:f4:f3:e3:48: 7a:dc:98:68:a4:a5:05:08:52:2a:52:64:61:65:f3: af:80:0e:66:e9:6c:96:0d:75:fc:d3:f1:95:c2:10: 3c:5f:a3:12:29:9f:45:f0:c0:05:ac:dd:71:ef:3d: b5:9d:8f:b4:6b:4e:d1:51:c5:bd:b2:4b:1f:70:35: 85:4b:b1:12:f7:cf:66:3e:c2:dd:f0:85:d8:b4:39: c7:90:c7:bd:a2:fc:0f:2c:46:bf:d9:93:45:7e:5b: cc:8e:cc:a5:17:f8:b8:86:5b:ae:7a:ad:4c:ff:e4: 5f:3b:41:1c:80:44:8b:3a:b5:da:ca:31:00:4d:cd: 37:fd:b0:7f:36:db:de:1b:92:48:2e:59:84:15:f6: d6:b5:df:b6:fa:d9:93:14:e4:c4:f0:a2:3b:27:20: c8:e8:d2:ee:58:1d:3d:de:0a:97:cf:3a:b2:e0:f5: e8:98:f2:6b:2b:81:cf:61:71:94:83:0e:5a:37:d9: 53:fe:5c:a1:6f:0b:4c:d9:1a:63:12:1a:f3:bd:7a: 7f:7b:6e:20:6e:90:2f:9a:f3:da:49:82:e8:64:12: 39:d8:09:80:e4:cc:71:b4:e7:ee:20:5e:61:b2:20: 1a:38:41:5f:fb:45:ed:33:83:90:66:00:d4:b5:ff: 3c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F3:10:E2:FA:67:0D:FE:A7:2C:57:41:9A:FB:36:61:D0:49:EA:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5602f271-c354-3acc-891a-b49116a2c3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:08:1d:36:f2:b8:14:83:da:04:13:17:3f:17:27:7d:5c:fa: ae:34:73:dc:a5:35:2e:35:4e:7b:b4:eb:65:9b:ee:91:5c:cf: 10:52:81:1b:14:df:61:d3:45:d8:8d:27:e0:be:0e:b9:78:60: 88:28:46:78:4b:12:fd:42:94:48:6c:cd:2d:e8:29:67:dd:18: 0e:09:95:46:59:ad:71:3b:1b:0a:8a:7c:60:67:fc:59:d3:ff: 89:17:0e:7b:3d:d1:ff:20:54:b8:1e:a0:d7:d8:76:0b:26:51: f9:55:d7:32:34:52:d1:55:8c:9f:4e:03:5a:21:2e:b1:6b:9c: 93:1c:45:56:11:b2:60:1c:00:0f:02:00:50:00:99:9b:96:d1: 72:cb:d5:b9:14:34:34:50:eb:55:8a:ce:01:6d:92:1e:01:33: 81:02:92:d0:cc:4f:b8:65:70:1d:09:ac:bf:a1:91:31:8a:30: f8:c6:1a:cc:a8:de:12:2e:60:84:23:ab:b2:ee:5b:8b:d7:0c: 6a:0e:34:2d:eb:d2:d0:69:fc:1b:dd:04:b6:7c:db:74:ba:7a: be:83:cd:20:77:5d:91:f0:4e:18:36:9f:96:cc:11:4f:35:66: 8c:06:4e:d5:a4:7e:e8:70:02:fa:7b:36:5e:d0:ad:e7:09:4f: 23:cb:bd:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jiv+QdFTndH65K8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGEyY2FlYTMtZTE4OS00NWI5LTljODEtYmYzZjA4YmFjNTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje/cttLZLGR/DPTz40h63JhopKUFCFIqUmRh ZfOvgA5m6WyWDXX80/GVwhA8X6MSKZ9F8MAFrN1x7z21nY+0a07RUcW9sksfcDWF S7ES989mPsLd8IXYtDnHkMe9ovwPLEa/2ZNFflvMjsylF/i4hluueq1M/+RfO0Ec gESLOrXayjEATc03/bB/NtveG5JILlmEFfbWtd+2+tmTFOTE8KI7JyDI6NLuWB09 3gqXzzqy4PXomPJrK4HPYXGUgw5aN9lT/lyhbwtM2RpjEhrzvXp/e24gbpAvmvPa SYLoZBI52AmA5MxxtOfuIF5hsiAaOEFf+0XtM4OQZgDUtf88iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHzEOL6Zw3+pyxXQZr7NmHQSeqAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTYwMmYyNzEtYzM1NC0z YWNjLTg5MWEtYjQ5MTE2YTJjM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsIHTbyuBSD2gQTFz8XJ31c+q40c9ylNS41Tnu062Wb7pFczxBSgRsU 32HTRdiNJ+C+Drl4YIgoRnhLEv1ClEhszS3oKWfdGA4JlUZZrXE7GwqKfGBn/FnT /4kXDns90f8gVLgeoNfYdgsmUflV1zI0UtFVjJ9OA1ohLrFrnJMcRVYRsmAcAA8C AFAAmZuW0XLL1bkUNDRQ61WKzgFtkh4BM4ECktDMT7hlcB0JrL+hkTGKMPjGGsyo 3hIuYIQjq7LuW4vXDGoONC3r0tBp/BvdBLZ823S6er6DzSB3XZHwThg2n5bMEU81 ZowGTtWkfuhwAvp7Nl7QrecJTyPLvf8= -----END CERTIFICATE-----Generated at Tue Oct 6 16:05:29 2026 by rpki-client