$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/633f8a6e-4a0c-3d43-a60e-09afc18e69c2.roa File: 633f8a6e-4a0c-3d43-a60e-09afc18e69c2.roa (raw, json) Hash identifier: fAca7FH+6HIxHB+mEBhOXzBssGMpPo6E9oLckc1MF1A= Subject key identifier: CA:01:ED:1F:2E:3F:88:EC:28:CD:36:55:AF:A5:7A:4C:0F:58:B2:D6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F0D1B04C4C0776D21940 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/633f8a6e-4a0c-3d43-a60e-09afc18e69c2.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 32651 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f0:d1:b0:4c:4c:07:76:d2:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=e40a7a89-cbfd-43e0-875c-c317513e0b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:11:31:0a:03:a3:56:47:ad:1a:66:07:28:f4: 29:df:20:f0:30:18:f9:d0:9e:e8:a3:37:8b:bd:69: e9:c2:ec:5c:37:22:a5:64:6c:82:d1:82:44:4c:3f: 15:8a:24:68:8b:18:fa:74:37:5e:c4:5d:98:78:ee: 4b:a1:9a:2f:1b:5e:c4:e2:46:86:b1:43:17:4c:a4: bd:f4:1b:5f:c1:b3:00:00:b8:89:d3:08:0b:06:30: 5d:dd:73:46:29:92:47:a1:fc:78:d6:2b:35:61:58: 08:22:35:94:bd:8b:5e:5a:86:ec:70:04:30:69:2e: 41:0a:91:f1:e1:da:08:aa:04:9d:fb:85:66:21:5b: 34:a5:8a:10:6a:b4:a9:1a:29:b1:f2:56:74:7a:9f: 2f:a9:61:ee:2a:66:ef:d0:98:43:86:1c:15:78:98: 24:24:02:2d:f8:23:77:41:3e:9d:a7:0f:c1:27:5f: 40:e2:7a:03:f3:6a:b4:46:b9:af:72:a0:bd:85:11: c4:d9:d5:ca:e7:b1:6e:ac:d7:87:7c:8c:8e:cd:e3: 97:18:9c:40:79:35:af:25:6d:16:1e:cd:5a:c3:e1: e4:75:0f:3f:e8:06:b2:5f:89:0e:34:7d:65:49:73: e2:08:e0:8a:1b:1f:dd:e7:47:df:70:71:cf:bb:03: 5e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:01:ED:1F:2E:3F:88:EC:28:CD:36:55:AF:A5:7A:4C:0F:58:B2:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/633f8a6e-4a0c-3d43-a60e-09afc18e69c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:89:3d:51:22:c9:65:8e:04:c4:d8:3d:a9:d4:a8:6f:60:88: 1f:f6:f5:c9:d3:df:87:9b:1d:9c:0a:0e:47:03:4b:b6:0f:dc: 45:d7:91:44:4f:2e:23:04:47:a7:f3:68:e7:3e:e8:8c:b6:c8: 84:1e:7d:9b:14:af:e8:f0:a8:14:e9:56:c5:b9:e6:3c:f8:8d: b2:21:dc:ed:05:01:a3:5b:9f:bc:02:27:63:c2:4e:a9:54:c2: 94:4b:b6:cc:77:8b:54:5c:4f:60:fb:e8:a3:00:22:44:20:b7: 6f:bf:35:9f:9f:9f:db:39:da:5c:5b:1b:0e:38:3a:e6:81:a3: 35:ba:24:44:6b:0b:95:9f:ca:a6:05:a3:64:01:71:a4:a7:1c: c7:c5:57:7d:34:7f:93:f3:f5:e8:90:ae:41:b2:bd:1d:09:9d: 7e:38:07:0c:47:71:0b:57:2f:75:7f:f4:45:1b:8e:03:68:62: 2a:d4:99:be:53:da:e5:68:22:70:54:a8:17:a2:ba:df:a0:fb: 9c:25:7d:88:6e:1a:d2:fa:1e:f3:72:cc:fd:58:36:5b:58:ab: 1d:09:92:b8:9d:88:a4:c5:66:d2:98:e7:97:d6:2e:41:ea:76: 60:a3:81:76:5a:2b:f8:88:2e:31:61:69:fe:c1:21:11:31:32: e2:ba:8b:cc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvDRsExMB3bSGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZTQwYTdhODktY2JmZC00M2UwLTg3NWMtYzMxNzUxM2UwYjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhExCgOjVketGmYHKPQp3yDwMBj50J7oozeL vWnpwuxcNyKlZGyC0YJETD8ViiRoixj6dDdexF2YeO5LoZovG17E4kaGsUMXTKS9 9BtfwbMAALiJ0wgLBjBd3XNGKZJHofx41is1YVgIIjWUvYteWobscAQwaS5BCpHx 4doIqgSd+4VmIVs0pYoQarSpGimx8lZ0ep8vqWHuKmbv0JhDhhwVeJgkJAIt+CN3 QT6dpw/BJ19A4noD82q0RrmvcqC9hRHE2dXK57FurNeHfIyOzeOXGJxAeTWvJW0W Hs1aw+HkdQ8/6AayX4kONH1lSXPiCOCKGx/d50ffcHHPuwNeYwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMoB7R8uP4jsKM02Va+lekwPWLLWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjMzZjhhNmUtNGEwYy0z ZDQzLWE2MGUtMDlhZmMxOGU2OWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCDiT1RIslljgTE2D2p1KhvYIgf9vXJ09+Hmx2cCg5HA0u2D9xF15FE Ty4jBEen82jnPuiMtsiEHn2bFK/o8KgU6VbFueY8+I2yIdztBQGjW5+8Aidjwk6p VMKUS7bMd4tUXE9g++ijACJEILdvvzWfn5/bOdpcWxsOODrmgaM1uiREawuVn8qm BaNkAXGkpxzHxVd9NH+T8/XokK5Bsr0dCZ1+OAcMR3ELVy91f/RFG44DaGIq1Jm+ U9rlaCJwVKgXorrfoPucJX2IbhrS+h7zcsz9WDZbWKsdCZK4nYikxWbSmOeX1i5B 6nZgo4F2Wiv4iC4xYWn+wSERMTLiuovM -----END CERTIFICATE-----Generated at Tue Oct 6 14:54:56 2026 by rpki-client