$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/628ecc28-b0d6-3862-a0f0-386f97e93f6f.roa File: 628ecc28-b0d6-3862-a0f0-386f97e93f6f.roa (raw, json) Hash identifier: Eza8op4reb7d0bEt1TUqZAztepsUyOmLJAPvR3erp+Y= Subject key identifier: 84:1A:86:6B:50:CE:A8:1E:11:4F:E4:62:BD:AD:63:95:C0:DC:FD:E4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F7A5F955312D63DE9180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/628ecc28-b0d6-3862-a0f0-386f97e93f6f.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 25485 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f7:a5:f9:55:31:2d:63:de:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=d4d04c4f-4591-4bcf-a43a-99756fc47d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:14:6d:a7:1d:60:df:21:e0:a6:c8:40:ba:32: 90:84:d0:98:8b:ba:c9:7b:fb:84:bd:a4:b2:23:f9: 4a:3d:9a:27:02:1c:a8:ae:87:a5:fd:99:07:22:00: ee:a6:e2:1c:a8:52:b9:d7:d5:8e:e3:25:c8:75:1b: 18:de:f4:bc:11:e1:cd:2c:64:e6:12:bb:09:5c:31: f7:9b:ff:9c:ea:9e:3b:3b:d7:f0:8f:b2:ac:6c:b9: be:10:19:de:3e:77:c6:45:05:97:01:98:27:06:c4: 63:d1:7a:5d:ca:34:c1:e6:bd:45:ec:8e:42:d0:c0: 23:c4:96:fe:d2:8f:77:45:01:c3:41:e6:65:67:fe: c5:69:2b:c2:20:54:8d:04:e6:cc:3a:3f:33:3a:29: a7:97:fe:37:bb:35:36:a2:6d:3f:5d:2f:68:d4:2c: 53:5e:16:b5:4c:fb:55:6c:f4:1a:eb:c6:dc:24:2a: e4:fe:57:ba:04:98:f3:36:8c:5d:89:47:b5:7c:70: e4:d4:3e:59:f9:3f:28:50:c9:8a:19:43:2d:be:9a: 1a:7e:20:ad:6c:40:7a:a7:3c:4f:61:e5:d2:2d:ff: 76:b9:71:7a:00:b3:d6:98:88:1d:ae:39:cf:12:32: ba:9d:a1:7a:ed:1e:4e:30:74:9e:5b:b6:68:77:93: 1b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1A:86:6B:50:CE:A8:1E:11:4F:E4:62:BD:AD:63:95:C0:DC:FD:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/628ecc28-b0d6-3862-a0f0-386f97e93f6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a5:83:5e:5c:63:2e:cf:57:a5:90:27:f0:b9:ad:1b:93:cd: a6:e1:5d:05:3d:d2:0d:13:64:04:c0:61:65:2b:6b:be:cd:d5: 17:68:6a:f1:ec:a0:b5:96:f1:4a:79:fb:5a:d5:87:fd:08:fc: 2a:9f:fe:07:85:ed:da:64:38:2d:37:d7:96:40:51:ff:84:81: d1:e9:bb:1c:dd:30:3b:ec:8c:aa:19:52:97:1a:bd:a4:39:0d: 4d:0a:88:46:52:11:47:d3:0f:de:0b:9b:b8:84:c7:44:a2:cf: 32:53:d9:5a:e3:6f:84:88:15:0d:dd:85:48:7c:83:53:69:8c: e2:b2:e4:86:2e:b9:a9:6e:e5:5c:e5:51:f0:ee:3e:2a:8f:0f: 81:10:f2:cc:2c:d2:74:6e:2c:7e:65:45:45:ef:e9:c8:c4:65: 10:22:98:38:26:a0:fa:cf:eb:45:d2:cb:6c:a5:d2:85:8e:be: d7:3c:0d:07:b6:17:f9:ab:67:5c:4a:6c:6d:c6:30:a2:1a:19: a7:59:d9:f6:50:c6:00:46:5b:69:cb:1e:3d:8a:6e:d3:ea:3a: 81:7c:32:ab:30:53:08:32:7c:c1:19:22:30:83:c4:1e:d7:8d: 06:fb:00:66:f4:1c:90:42:ea:7c:43:f9:39:a5:ea:23:7d:db: 6c:18:90:41 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvel+VUxLWPekYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZDRkMDRjNGYtNDU5MS00YmNmLWE0M2EtOTk3NTZmYzQ3ZDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBRtpx1g3yHgpshAujKQhNCYi7rJe/uEvaSy I/lKPZonAhyoroel/ZkHIgDupuIcqFK519WO4yXIdRsY3vS8EeHNLGTmErsJXDH3 m/+c6p47O9fwj7KsbLm+EBnePnfGRQWXAZgnBsRj0XpdyjTB5r1F7I5C0MAjxJb+ 0o93RQHDQeZlZ/7FaSvCIFSNBObMOj8zOimnl/43uzU2om0/XS9o1CxTXha1TPtV bPQa68bcJCrk/le6BJjzNoxdiUe1fHDk1D5Z+T8oUMmKGUMtvpoafiCtbEB6pzxP YeXSLf92uXF6ALPWmIgdrjnPEjK6naF67R5OMHSeW7Zod5MbcwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIQahmtQzqgeEU/kYr2tY5XA3P3kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjI4ZWNjMjgtYjBkNi0z ODYyLWEwZjAtMzg2Zjk3ZTkzZjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAApYNeXGMuz1elkCfwua0bk82m4V0FPdINE2QEwGFlK2u+zdUXaGrx 7KC1lvFKefta1Yf9CPwqn/4Hhe3aZDgtN9eWQFH/hIHR6bsc3TA77IyqGVKXGr2k OQ1NCohGUhFH0w/eC5u4hMdEos8yU9la42+EiBUN3YVIfINTaYzisuSGLrmpbuVc 5VHw7j4qjw+BEPLMLNJ0bix+ZUVF7+nIxGUQIpg4JqD6z+tF0stspdKFjr7XPA0H thf5q2dcSmxtxjCiGhmnWdn2UMYARltpyx49im7T6jqBfDKrMFMIMnzBGSIwg8Qe 140G+wBm9ByQQup8Q/k5peojfdtsGJBB -----END CERTIFICATE-----Generated at Thu Oct 8 08:51:51 2026 by rpki-client