$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ea0ecde-a516-3d8e-8157-de32a708e504.roa File: 6ea0ecde-a516-3d8e-8157-de32a708e504.roa (raw, json) Hash identifier: 7oQeODtQOe6z6pL0P94Mb6F4Dac907MEJwsA7vHh8F0= Subject key identifier: 62:4A:CE:8E:A1:6B:C4:CA:3E:27:07:A9:A7:2C:E9:E9:0B:62:14:0A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F7764110C0F0F445A780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ea0ecde-a516-3d8e-8157-de32a708e504.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396589 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f7:76:41:10:c0:f0:f4:45:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=bd047afd-52e2-46cc-a6f8-cf4ff10027ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:70:d6:4f:9f:b7:f8:03:11:d2:a2:ab:73:9c: db:6d:39:08:b5:a0:28:57:0e:08:59:f8:b5:27:5c: ce:be:1f:24:5b:f4:af:92:8a:da:b9:a1:11:ed:25: 46:ac:f7:14:fa:5e:f8:02:c7:ae:94:ed:f5:93:2b: 40:27:f6:ad:e6:7c:4b:9e:6c:0b:68:97:27:5b:f2: 58:fa:26:e6:ab:1f:76:fc:cd:b4:cc:66:7d:f1:02: 77:5c:5a:ff:ef:cd:a5:dd:9e:96:7f:64:a6:99:87: 02:c7:78:8b:27:19:ef:76:b2:de:19:94:47:43:04: ff:b3:a5:5e:49:0c:66:ba:b4:74:9f:f1:f9:79:c3: b3:7a:7d:80:4d:ce:8a:c2:e7:9c:b6:68:dd:a0:a3: 00:22:fd:07:72:b9:ef:db:f7:43:87:90:9d:9d:cf: 77:9b:13:fb:f7:4c:43:c6:02:b3:d6:97:a2:26:c7: 27:20:12:74:03:40:81:15:d0:30:e3:0c:6d:a8:f3: 54:db:2d:d8:bf:fd:66:ef:63:79:8f:07:b9:a7:65: 3d:d8:12:f0:29:2f:90:82:cc:78:36:31:a7:b2:54: 11:47:ea:35:83:88:35:b6:0e:eb:44:56:6a:8a:28: 94:f3:a3:19:45:1e:8f:37:e1:05:e4:cd:53:4a:87: 2d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4A:CE:8E:A1:6B:C4:CA:3E:27:07:A9:A7:2C:E9:E9:0B:62:14:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ea0ecde-a516-3d8e-8157-de32a708e504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:5e:e2:a6:6b:b2:63:6e:26:99:fc:4a:2c:ab:52:99:49:36: 33:cc:26:43:e1:33:a0:d9:87:88:80:c5:c6:a1:0b:15:05:23: d0:33:cd:c6:98:1b:ba:c7:23:b2:e7:83:d7:08:c3:b6:2f:cd: 6e:1b:ba:c2:fd:58:85:2a:a1:99:42:43:99:27:bb:9d:a6:6e: 7c:bb:c6:6c:02:cb:0f:27:7e:3b:e6:50:00:42:eb:e6:8d:e2: 26:b8:c3:02:c8:a8:3e:56:e9:20:61:44:2e:30:be:a0:40:31: d6:0f:e5:ca:89:23:c0:d3:ad:6b:a0:f6:e5:9d:0d:77:a2:01: 05:4b:82:f1:2a:1d:3d:20:b8:3c:d9:38:4d:47:a3:ec:cf:fc: 2c:b6:92:78:15:11:93:36:34:42:b0:af:dc:9d:91:67:cf:4d: 0b:d2:45:f6:02:f5:27:d7:15:9a:d2:04:86:d4:65:5b:da:57: 50:e7:d0:4d:f2:41:46:fb:fb:0b:1c:ee:86:17:b2:45:5d:cf: c8:51:80:c9:21:05:44:6d:f6:f5:9a:f7:98:39:1e:dc:52:4f: 57:56:94:84:87:75:e8:b0:35:df:7d:c9:53:d7:d6:35:e1:8c: e6:de:dd:4f:a3:72:43:a4:4a:c1:b9:5a:dc:49:e5:ea:f7:fd: db:08:51:02 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvd2QRDA8PRFp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YmQwNDdhZmQtNTJlMi00NmNjLWE2ZjgtY2Y0ZmYxMDAyN2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnDWT5+3+AMR0qKrc5zbbTkItaAoVw4IWfi1 J1zOvh8kW/SvkorauaER7SVGrPcU+l74AseulO31kytAJ/at5nxLnmwLaJcnW/JY +ibmqx92/M20zGZ98QJ3XFr/782l3Z6Wf2SmmYcCx3iLJxnvdrLeGZRHQwT/s6Ve SQxmurR0n/H5ecOzen2ATc6KwuectmjdoKMAIv0Hcrnv2/dDh5Cdnc93mxP790xD xgKz1peiJscnIBJ0A0CBFdAw4wxtqPNU2y3Yv/1m72N5jwe5p2U92BLwKS+Qgsx4 NjGnslQRR+o1g4g1tg7rRFZqiiiU86MZRR6PN+EF5M1TSoctFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGJKzo6ha8TKPicHqacs6ekLYhQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmVhMGVjZGUtYTUxNi0z ZDhlLTgxNTctZGUzMmE3MDhlNTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAVXuKma7JjbiaZ/Eosq1KZSTYzzCZD4TOg2YeIgMXGoQsVBSPQM83G mBu6xyOy54PXCMO2L81uG7rC/ViFKqGZQkOZJ7udpm58u8ZsAssPJ3475lAAQuvm jeImuMMCyKg+VukgYUQuML6gQDHWD+XKiSPA061roPblnQ13ogEFS4LxKh09ILg8 2ThNR6Psz/wstpJ4FRGTNjRCsK/cnZFnz00L0kX2AvUn1xWa0gSG1GVb2ldQ59BN 8kFG+/sLHO6GF7JFXc/IUYDJIQVEbfb1mveYOR7cUk9XVpSEh3XosDXffclT19Y1 4Yzm3t1Po3JDpErBuVrcSeXq9/3bCFEC -----END CERTIFICATE-----Generated at Tue Oct 6 19:54:56 2026 by rpki-client