$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/628a34d0-889d-36a9-bbbd-5cda7c9000d7.roa File: 628a34d0-889d-36a9-bbbd-5cda7c9000d7.roa (raw, json) Hash identifier: 6XLqx7ege1cyNWy/wf0+9Jd/RyjEaawDx4KOffYWAEE= Subject key identifier: 6B:8A:E3:38:C5:87:1F:C1:66:1A:5C:15:F6:DB:72:5A:93:33:00:34 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA78889D11494DD8D812C7880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/628a34d0-889d-36a9-bbbd-5cda7c9000d7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396549 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:89:d1:14:94:dd:8d:81:2c:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=fc48db44-4d29-49cd-93aa-d64b470504fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:97:de:c6:77:03:44:9b:4c:eb:9e:2a:cd:eb: 46:1b:1e:dd:0f:14:11:f1:5a:60:9c:60:51:28:1e: ac:0b:6c:2b:77:e8:ea:65:14:db:16:39:9d:fc:38: 55:40:12:c9:7f:a0:bd:ec:a7:03:01:d2:0a:c6:4d: 28:75:e2:55:5d:b1:2f:83:5c:0f:68:2e:1b:ea:09: ba:14:76:dc:de:a9:79:4a:37:db:f1:11:79:8d:10: cd:ec:84:36:5b:33:49:c8:e7:2a:b5:08:c6:0f:01: 76:d1:55:a1:d4:10:87:70:4d:dc:32:7a:76:15:e3: 2c:87:f1:1e:48:c6:fb:48:6f:46:ed:1f:76:88:6f: 12:8c:7d:b0:8c:98:fb:9d:a7:ec:3e:5d:66:2e:78: d5:a6:0a:93:45:34:65:36:c8:52:ee:40:50:30:1a: bf:e3:7c:cd:17:22:44:74:48:21:08:e0:fe:35:e4: af:2d:6a:39:64:c2:ba:34:af:a1:ab:ba:ec:2b:dc: 50:42:e4:eb:1c:ea:d0:06:5b:40:8c:9e:98:c2:e1: 50:18:aa:bc:ed:f3:e2:b8:f4:65:9b:e7:b3:6c:35: 64:09:99:2c:88:7a:ee:f2:3b:b4:74:69:c3:c4:97: 16:7e:e1:f2:b8:82:aa:e7:eb:10:1b:e1:8f:0d:af: 77:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8A:E3:38:C5:87:1F:C1:66:1A:5C:15:F6:DB:72:5A:93:33:00:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/628a34d0-889d-36a9-bbbd-5cda7c9000d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:88:0e:62:ee:c9:d8:04:66:91:f4:4f:be:7a:ae:86:bf:ea: f8:1f:bf:c0:60:ca:df:48:94:5f:eb:5b:1d:4c:56:80:c4:0f: 22:14:a7:e5:b2:61:24:aa:3f:c8:97:7d:d4:18:c0:35:84:11: 97:79:e5:0e:54:5b:02:1b:85:df:62:91:89:f6:ef:e7:c3:70: 68:b1:61:6d:5a:ab:3f:ae:91:82:18:d4:d6:21:9c:57:ec:52: b8:fd:4a:cc:51:02:cc:a9:c6:67:49:43:8c:c3:f8:d2:11:4d: 62:bd:11:1d:77:4a:99:56:2d:8e:ea:80:42:81:a0:5c:3f:b9: 0a:93:d2:37:90:88:77:95:c3:0b:d8:83:16:df:4e:ea:31:a7: 51:f0:e1:b5:4b:92:c0:db:69:8d:76:e6:f2:1a:45:5a:c1:11: 08:7d:b4:45:04:5b:37:85:62:4d:85:6e:ee:81:3f:fb:d2:48: 1f:4a:32:ec:42:30:78:95:7a:06:7f:31:25:a2:74:95:5b:20: cc:11:e7:33:49:5d:38:44:4d:e7:00:b8:b9:ad:61:d4:af:aa: 09:27:92:f1:97:0d:86:0b:a6:eb:3e:4e:db:d1:47:5e:ee:4b: 86:1f:a3:70:a3:3c:58:42:86:32:3f:af:1a:a1:49:15:33:78: c3:0c:fe:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niInRFJTdjYEseIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZmM0OGRiNDQtNGQyOS00OWNkLTkzYWEtZDY0YjQ3MDUwNGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJfexncDRJtM654qzetGGx7dDxQR8VpgnGBR KB6sC2wrd+jqZRTbFjmd/DhVQBLJf6C97KcDAdIKxk0odeJVXbEvg1wPaC4b6gm6 FHbc3ql5Sjfb8RF5jRDN7IQ2WzNJyOcqtQjGDwF20VWh1BCHcE3cMnp2FeMsh/Ee SMb7SG9G7R92iG8SjH2wjJj7nafsPl1mLnjVpgqTRTRlNshS7kBQMBq/43zNFyJE dEghCOD+NeSvLWo5ZMK6NK+hq7rsK9xQQuTrHOrQBltAjJ6YwuFQGKq87fPiuPRl m+ezbDVkCZksiHru8ju0dGnDxJcWfuHyuIKq5+sQG+GPDa93kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuK4zjFhx/BZhpcFfbbclqTMwA0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjI4YTM0ZDAtODg5ZC0z NmE5LWJiYmQtNWNkYTdjOTAwMGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGIDmLuydgEZpH0T756roa/6vgfv8Bgyt9IlF/rWx1MVoDEDyIUp+Wy YSSqP8iXfdQYwDWEEZd55Q5UWwIbhd9ikYn27+fDcGixYW1aqz+ukYIY1NYhnFfs Urj9SsxRAsypxmdJQ4zD+NIRTWK9ER13SplWLY7qgEKBoFw/uQqT0jeQiHeVwwvY gxbfTuoxp1Hw4bVLksDbaY125vIaRVrBEQh9tEUEWzeFYk2Fbu6BP/vSSB9KMuxC MHiVegZ/MSWidJVbIMwR5zNJXThETecAuLmtYdSvqgknkvGXDYYLpus+TtvRR17u S4Yfo3CjPFhChjI/rxqhSRUzeMMM/oQ= -----END CERTIFICATE-----Generated at Wed Aug 19 18:44:59 2026 by rpki-client