$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b2e7b97-9281-33e1-953e-fc929888a2f0.roa File: 5b2e7b97-9281-33e1-953e-fc929888a2f0.roa (raw, json) Hash identifier: 7jsLSjOfVKUmgHMFP4Lms4outTA4YHKMIyC3d7FQAZA= Subject key identifier: B5:44:68:76:67:06:6C:7A:59:21:44:02:97:77:03:15:AC:86:11:3C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F59D08D44415F61B5300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b2e7b97-9281-33e1-953e-fc929888a2f0.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396552 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f5:9d:08:d4:44:15:f6:1b:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=6fcf9b73-9d0b-432b-bbad-c8a5baca2a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d9:28:3e:53:7f:11:b5:56:7b:54:7c:3f:88: b2:60:39:ba:a1:29:29:78:b7:09:00:c5:8f:74:56: a4:df:4d:b7:b1:d3:b4:7f:34:9e:df:3b:92:b8:f0: 4e:02:13:04:54:d8:d0:38:a8:ff:e6:0c:a4:b3:6a: fd:33:d3:e6:ec:a6:74:63:7e:21:47:de:2d:52:57: 54:a8:bf:eb:d1:f4:6a:a7:6b:b4:09:15:ab:92:b4: 2a:46:06:34:aa:6b:77:e7:af:2b:98:67:59:fd:fc: 5c:0b:11:da:26:a5:41:46:d2:f0:2f:2c:77:cb:dc: 44:31:ee:5c:f1:a6:27:ac:f9:5e:1d:9b:eb:42:0d: 31:7c:92:06:f4:8e:5f:f2:d1:96:c5:cc:f2:ea:f9: e8:0e:1e:5a:41:6f:d1:c8:32:d2:10:d4:ad:89:5b: 87:41:e6:b3:01:0c:01:ad:a3:f1:02:e7:fb:9f:22: ac:be:99:da:31:7a:ee:4d:a1:51:05:82:06:67:4f: 54:ab:2e:29:07:89:c5:d8:08:33:0f:4e:c8:21:e2: 9f:4c:9c:da:8c:ab:9e:a7:63:e2:b5:08:e7:b4:15: 91:e6:ff:f8:bf:4e:11:e4:6e:f8:65:2c:c0:2f:2d: 0b:84:d3:aa:d4:6e:c4:2a:d1:29:d9:cc:ca:9a:eb: 16:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:44:68:76:67:06:6C:7A:59:21:44:02:97:77:03:15:AC:86:11:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b2e7b97-9281-33e1-953e-fc929888a2f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:24:3f:8d:29:3b:be:fd:10:d6:77:32:94:33:b4:94:dc:bf: 9e:f5:22:31:5d:b0:b9:a7:e5:e5:ea:fd:59:66:06:17:1d:2a: 68:3a:fd:71:fe:05:ee:f2:ee:52:e7:71:96:cf:13:c8:0a:c1: 54:8a:29:32:f9:21:ab:1a:86:15:f9:7e:31:6f:8e:d5:a4:4c: 95:08:86:86:7a:d1:6c:4d:98:4e:23:ac:6b:b0:ec:4f:b3:f1: 75:68:27:6a:c6:9f:c0:9a:9b:1b:26:12:bb:c9:fa:1f:ff:0f: f8:85:af:b8:6c:f1:f5:8c:94:33:c0:fa:38:63:a5:cb:16:9a: ab:7e:7f:d1:2d:47:c6:f0:0a:94:7c:94:0d:d6:16:c6:08:a7: 97:64:13:8a:e6:32:5b:18:8b:35:ba:79:b5:f8:08:6c:54:ee: 68:87:31:2b:51:59:49:50:cb:47:bc:e3:53:4d:3b:bd:9b:bd: c0:4e:21:a7:0e:97:bc:bc:10:f9:d6:72:d8:4d:35:64:81:34: 75:43:93:c5:de:d9:03:fb:0a:56:3e:e6:ca:88:5d:25:25:e9: c9:a7:19:07:88:1b:39:c9:a9:a7:95:e6:c6:a7:e8:d5:01:7e: 97:92:77:13:30:c5:fe:e6:e3:af:89:ce:72:fb:05:ca:c5:46: 9a:ac:89:e1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvWdCNREFfYbUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NmZjZjliNzMtOWQwYi00MzJiLWJiYWQtYzhhNWJhY2EyYTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NkoPlN/EbVWe1R8P4iyYDm6oSkpeLcJAMWP dFak3023sdO0fzSe3zuSuPBOAhMEVNjQOKj/5gyks2r9M9Pm7KZ0Y34hR94tUldU qL/r0fRqp2u0CRWrkrQqRgY0qmt3568rmGdZ/fxcCxHaJqVBRtLwLyx3y9xEMe5c 8aYnrPleHZvrQg0xfJIG9I5f8tGWxczy6vnoDh5aQW/RyDLSENStiVuHQeazAQwB raPxAuf7nyKsvpnaMXruTaFRBYIGZ09Uqy4pB4nF2AgzD07IIeKfTJzajKuep2Pi tQjntBWR5v/4v04R5G74ZSzALy0LhNOq1G7EKtEp2czKmusWvwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLVEaHZnBmx6WSFEApd3AxWshhE8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWIyZTdiOTctOTI4MS0z M2UxLTk1M2UtZmM5Mjk4ODhhMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAsJD+NKTu+/RDWdzKUM7SU3L+e9SIxXbC5p+Xl6v1ZZgYXHSpoOv1x /gXu8u5S53GWzxPICsFUiiky+SGrGoYV+X4xb47VpEyVCIaGetFsTZhOI6xrsOxP s/F1aCdqxp/AmpsbJhK7yfof/w/4ha+4bPH1jJQzwPo4Y6XLFpqrfn/RLUfG8AqU fJQN1hbGCKeXZBOK5jJbGIs1unm1+AhsVO5ohzErUVlJUMtHvONTTTu9m73ATiGn Dpe8vBD51nLYTTVkgTR1Q5PF3tkD+wpWPubKiF0lJenJpxkHiBs5yamnlebGp+jV AX6XkncTMMX+5uOvic5y+wXKxUaarInh -----END CERTIFICATE-----Generated at Wed Oct 7 07:40:55 2026 by rpki-client