$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/625a1cb4-9275-3615-813b-2e4aec695d6f.roa File: 625a1cb4-9275-3615-813b-2e4aec695d6f.roa (raw, json) Hash identifier: UHu3gTkJCtl9tFLr4TyzxCGiAuSlbkFiH8o1aRHe1RU= Subject key identifier: 53:E4:D8:D7:A0:97:96:DA:3A:A0:7E:EB:DA:22:28:5F:97:8C:42:C8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292EEFB22143579DA729F20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/625a1cb4-9275-3615-813b-2e4aec695d6f.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396580 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ee:fb:22:14:35:79:da:72:9f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=8afdd985-30f0-49dc-b64d-f46e3592eff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1e:2c:90:d7:98:00:61:72:16:2e:46:30:c4: 4b:c4:40:ee:89:31:7f:f1:e3:1d:c0:ed:c2:a7:a9: 97:bc:6d:a3:9d:70:9b:76:ac:c7:3b:46:6c:95:23: 33:c3:ce:5f:19:f6:3c:d3:43:47:24:41:df:d3:9e: a7:ef:fb:4f:b3:49:54:95:26:86:f8:60:2f:fe:b6: 99:83:40:44:b7:27:7d:a9:9d:90:a5:ce:b2:e5:0f: ca:c8:74:62:14:cb:84:75:f1:7b:d0:b0:d7:0f:86: 6d:35:63:2a:54:dd:1f:14:a0:09:f3:14:73:d4:83: f4:e7:de:4c:31:af:d7:08:00:2e:7b:a4:d1:3e:7d: 60:c9:3a:2b:61:ae:66:f5:e6:f4:19:12:a2:8c:61: cb:70:04:bb:e3:22:e5:4e:fe:15:dd:e0:f9:bf:ff: 47:e5:28:1d:a9:30:da:b5:77:15:9b:22:c0:4f:74: a8:1c:5a:45:1e:ba:91:9f:e7:2b:cd:dd:13:9f:19: ba:09:5e:b3:9c:5e:19:66:8a:5b:f2:41:71:c4:cf: b1:cf:78:4f:d9:6d:f9:21:3f:11:6e:79:f7:f5:13: ad:98:ff:a0:5a:62:b8:d7:44:f2:3a:e7:b0:4c:e4: f2:65:cb:72:9b:70:68:b1:58:1a:54:5f:49:60:64: ef:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E4:D8:D7:A0:97:96:DA:3A:A0:7E:EB:DA:22:28:5F:97:8C:42:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/625a1cb4-9275-3615-813b-2e4aec695d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ef:76:be:ac:e0:29:5e:e9:d3:5b:f6:0f:09:c4:b3:df:1f: d8:1e:1c:d3:13:d8:5b:76:70:fa:c3:42:59:54:34:b5:ec:4b: e4:f5:de:6c:33:26:4b:02:3d:41:7a:24:b7:45:44:9c:07:a8: dc:56:8b:bd:4f:09:3e:4d:da:d2:36:7b:fd:d8:c5:8a:a5:d6: 62:b8:03:6d:47:0a:c6:f3:1c:ca:73:33:78:ee:9a:6d:a0:29: 23:95:cd:d5:d1:ff:98:3c:de:32:aa:19:f9:8d:c1:a5:4c:e4: f4:b3:04:e8:48:c0:cd:e6:96:2a:11:a3:92:35:a2:54:05:38: 35:d8:c1:55:54:be:c7:1e:09:20:c1:9c:ef:71:51:dc:b6:26: 58:46:8e:9e:1f:5e:a1:55:a2:44:3e:43:81:a5:f9:5f:1e:60: 42:54:3a:04:3d:c7:33:aa:e7:c2:58:59:4d:03:6b:ce:03:9f: 41:a3:4f:da:27:e7:b9:a8:99:63:39:c0:39:43:04:f1:bf:0b: d1:f9:c3:c2:3c:8f:26:7a:58:ae:e8:af:4a:49:fd:87:e0:2f: 85:ee:55:95:a4:38:f9:4e:ca:41:dd:45:0c:2f:b4:df:21:26: 3e:54:31:55:12:9d:a8:aa:a1:f1:0a:97:47:88:8d:06:b2:77: f1:f6:72:b9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9iku77IhQ1edpynyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OGFmZGQ5ODUtMzBmMC00OWRjLWI2NGQtZjQ2ZTM1OTJlZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3B4skNeYAGFyFi5GMMRLxEDuiTF/8eMdwO3C p6mXvG2jnXCbdqzHO0ZslSMzw85fGfY800NHJEHf056n7/tPs0lUlSaG+GAv/raZ g0BEtyd9qZ2Qpc6y5Q/KyHRiFMuEdfF70LDXD4ZtNWMqVN0fFKAJ8xRz1IP0595M Ma/XCAAue6TRPn1gyTorYa5m9eb0GRKijGHLcAS74yLlTv4V3eD5v/9H5SgdqTDa tXcVmyLAT3SoHFpFHrqRn+crzd0Tnxm6CV6znF4ZZopb8kFxxM+xz3hP2W35IT8R bnn39ROtmP+gWmK410TyOuewTOTyZctym3BosVgaVF9JYGTv2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFPk2Negl5baOqB+69oiKF+XjELIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjI1YTFjYjQtOTI3NS0z NjE1LTgxM2ItMmU0YWVjNjk1ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB373a+rOApXunTW/YPCcSz3x/YHhzTE9hbdnD6w0JZVDS17Evk9d5s MyZLAj1BeiS3RUScB6jcVou9Twk+TdrSNnv92MWKpdZiuANtRwrG8xzKczN47ppt oCkjlc3V0f+YPN4yqhn5jcGlTOT0swToSMDN5pYqEaOSNaJUBTg12MFVVL7HHgkg wZzvcVHctiZYRo6eH16hVaJEPkOBpflfHmBCVDoEPcczqufCWFlNA2vOA59Bo0/a J+e5qJljOcA5QwTxvwvR+cPCPI8meliu6K9KSf2H4C+F7lWVpDj5TspB3UUML7Tf ISY+VDFVEp2oqqHxCpdHiI0Gsnfx9nK5 -----END CERTIFICATE-----Generated at Wed Oct 7 08:04:31 2026 by rpki-client