$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5f4be87c-4600-35bd-b087-ad38f32fe278.roa File: 5f4be87c-4600-35bd-b087-ad38f32fe278.roa (raw, json) Hash identifier: oVg8pX+nWypQbUofdyIejXdXvWBJ0s3WadD4JcrzP6g= Subject key identifier: 77:64:90:F2:09:9D:28:6B:AC:4F:36:AF:6A:4D:12:49:63:10:03:08 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498C03EA26BFF30DB601DA40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5f4be87c-4600-35bd-b087-ad38f32fe278.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396591 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:03:ea:26:bf:f3:0d:b6:01:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2d9c37e7-b405-488c-943b-62c6770e9447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d6:21:e1:40:c2:0c:93:72:4b:89:09:7c:7a: d9:a6:3c:85:d5:21:6e:a6:a7:6c:85:06:35:a3:92: 87:69:9a:15:b5:16:7e:d3:a6:65:31:1b:32:df:fc: d8:93:b7:8c:41:62:d3:87:fa:0c:b7:af:7e:da:9e: f8:df:96:5d:f3:79:91:0d:9b:f3:3e:c0:04:63:af: 1e:a3:ad:49:28:ef:7a:ad:94:96:fc:92:d7:bb:81: 37:e8:c5:05:a9:f6:48:84:8c:12:de:8c:8d:9f:de: 10:94:59:e3:8b:30:8c:ff:43:61:65:ca:e6:42:ed: 0b:c7:3b:67:4c:4c:c8:75:aa:ae:f7:84:c5:62:22: 7f:6f:40:4d:9b:7a:50:45:9d:4f:54:07:b5:15:90: 5f:45:45:ca:47:4f:a2:be:b3:30:21:39:5b:93:6b: 24:ab:ad:1d:ac:f8:aa:83:98:f6:ec:88:4d:87:80: ff:7d:c3:9e:37:ec:fa:6a:2b:d0:40:51:5c:59:c0: 80:81:e2:e0:c0:19:be:94:55:3e:d3:05:31:93:3e: ef:07:8b:42:55:8f:35:6b:49:2f:25:aa:d9:1e:b9: fa:6a:e1:3f:10:b4:c7:ed:b6:6d:58:af:2b:aa:8a: da:9a:ca:be:f2:a3:16:13:c3:39:9a:6e:4d:1c:d3: ef:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:64:90:F2:09:9D:28:6B:AC:4F:36:AF:6A:4D:12:49:63:10:03:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5f4be87c-4600-35bd-b087-ad38f32fe278.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:90:b4:8d:c7:a7:42:34:fa:b0:1d:fa:28:80:13:9d:9c:3c: 22:5a:2f:84:3f:5e:dd:bc:d6:ec:ff:ca:fe:7e:5e:c0:66:80: 81:86:f9:88:6e:bf:07:c2:7e:3e:bc:ce:88:46:a5:75:72:cd: d3:48:63:c9:7b:a0:06:7a:c5:b4:19:31:ec:ae:30:1d:09:f3: 29:ea:97:99:e6:45:0e:7a:69:9d:17:c9:1f:aa:e7:da:c8:fc: a6:20:23:39:d0:97:6c:d0:c0:76:9a:b5:40:a8:d0:7a:13:7a: 80:2f:4f:0f:fa:af:78:43:a6:32:f5:48:6e:75:ab:ba:ff:02: d7:d3:d5:6b:d4:75:4b:ec:65:b0:b8:d8:72:07:83:31:b5:22: ef:7d:20:18:a8:02:c9:ef:77:c9:f1:70:f3:b6:69:07:b4:20: 47:9f:b4:2a:2b:3c:4f:cd:e3:bd:e5:75:b1:7f:a9:ec:01:7e: 9d:ab:a5:1b:4d:00:a6:d7:48:7a:32:6b:ce:69:24:18:a6:3a: 45:2b:08:4b:36:14:fa:f7:aa:73:e1:e6:5c:5b:a9:92:be:2a: 16:86:03:4e:8a:68:e0:1b:bf:fe:cc:c2:d9:b2:6c:d9:2b:f0: ac:97:8e:66:5e:87:3c:c7:1c:24:d8:e1:d7:10:67:57:68:1f: 21:2e:2f:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjAPqJr/zDbYB2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmQ5YzM3ZTctYjQwNS00ODhjLTk0M2ItNjJjNjc3MGU5NDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9Yh4UDCDJNyS4kJfHrZpjyF1SFupqdshQY1 o5KHaZoVtRZ+06ZlMRsy3/zYk7eMQWLTh/oMt69+2p7435Zd83mRDZvzPsAEY68e o61JKO96rZSW/JLXu4E36MUFqfZIhIwS3oyNn94QlFnjizCM/0NhZcrmQu0Lxztn TEzIdaqu94TFYiJ/b0BNm3pQRZ1PVAe1FZBfRUXKR0+ivrMwITlbk2skq60drPiq g5j27IhNh4D/fcOeN+z6aivQQFFcWcCAgeLgwBm+lFU+0wUxkz7vB4tCVY81a0kv JarZHrn6auE/ELTH7bZtWK8rqoramsq+8qMWE8M5mm5NHNPvtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdkkPIJnShrrE82r2pNEkljEAMIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWY0YmU4N2MtNDYwMC0z NWJkLWIwODctYWQzOGYzMmZlMjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+QtI3Hp0I0+rAd+iiAE52cPCJaL4Q/Xt281uz/yv5+XsBmgIGG+Yhu vwfCfj68zohGpXVyzdNIY8l7oAZ6xbQZMeyuMB0J8ynql5nmRQ56aZ0XyR+q59rI /KYgIznQl2zQwHaatUCo0HoTeoAvTw/6r3hDpjL1SG51q7r/AtfT1WvUdUvsZbC4 2HIHgzG1Iu99IBioAsnvd8nxcPO2aQe0IEeftCorPE/N473ldbF/qewBfp2rpRtN AKbXSHoya85pJBimOkUrCEs2FPr3qnPh5lxbqZK+KhaGA06KaOAbv/7MwtmybNkr 8KyXjmZehzzHHCTY4dcQZ1doHyEuLwg= -----END CERTIFICATE-----Generated at Tue Oct 6 20:02:03 2026 by rpki-client