$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/76e99ac0-0bff-3cb1-9cdb-733596791286.roa File: 76e99ac0-0bff-3cb1-9cdb-733596791286.roa (raw, json) Hash identifier: aj5KF8WuO25Qi4tO3wnmm0+ytXUlBiIQCJEpWpq9lbs= Subject key identifier: B0:63:89:F5:EC:76:9F:88:AB:E4:BC:35:1B:C1:1F:66:57:19:98:C3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F398F144E90364724500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/76e99ac0-0bff-3cb1-9cdb-733596791286.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 397206 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f3:98:f1:44:e9:03:64:72:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=9e5dc24a-bec2-40f4-8660-03cb4f7285c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:70:2c:08:9d:7e:b9:7c:ac:24:f7:ac:fe:64: 0d:5c:e6:07:d3:25:37:ed:62:a7:f1:f4:9f:f0:fb: 29:d8:c9:75:55:fa:2d:d4:17:9a:06:03:32:9b:9b: 12:53:6b:df:cd:f5:04:a4:39:fb:78:3c:a8:c8:49: e7:5f:e8:d3:2f:4c:7e:92:98:42:1d:62:4e:02:27: 45:be:7f:0c:11:ac:8b:a0:25:99:67:8d:14:1c:be: 1d:97:a7:7c:8a:e0:d8:dc:d2:d9:42:1b:4a:34:9c: 55:d7:38:a4:65:f0:94:fc:37:4f:77:8d:05:d6:1e: 07:df:75:07:39:0c:39:8f:df:d8:7d:bb:4a:05:4b: 5c:19:33:8f:17:da:60:39:03:3e:f9:e6:aa:7a:21: 53:b0:87:d8:dc:99:d3:22:2b:4c:2f:6d:86:ae:21: a1:ae:c1:14:2e:d7:dc:c1:b4:f4:01:cd:e3:3c:02: 80:72:22:b3:c4:26:7a:68:f2:4a:98:23:b4:37:8d: 76:bf:8c:13:37:28:f7:6e:12:81:98:87:54:d0:56: d6:45:eb:9b:df:5a:78:da:f9:01:42:a8:85:0b:82: 40:e1:e5:d0:40:d5:7d:3b:a4:55:9e:41:5f:e6:ef: 02:cc:c8:da:30:96:23:7d:3c:38:05:93:be:77:4c: 5c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:63:89:F5:EC:76:9F:88:AB:E4:BC:35:1B:C1:1F:66:57:19:98:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/76e99ac0-0bff-3cb1-9cdb-733596791286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b5:85:fa:a9:2b:66:3b:99:5d:10:59:2b:ef:21:a3:d1:b1: 06:5f:e8:ea:e2:ef:0d:79:81:8e:7f:a0:18:9a:0a:f5:b0:4e: d5:7c:b6:d0:2e:96:b4:4e:26:55:ad:24:fc:d6:85:7a:2e:e8: 17:ef:62:14:e6:b1:fe:eb:46:bb:c9:e9:6e:1c:92:99:6f:26: 55:3b:1c:ab:70:db:4c:d2:70:3c:87:57:f5:3a:ce:35:c4:30: 27:90:bb:b7:52:87:ce:48:f4:c4:77:53:af:44:c3:c2:3d:e5: 0b:39:71:1e:1a:47:a0:21:05:2a:de:63:85:f1:dc:90:69:a2: ce:9f:64:ff:74:bb:fb:a8:33:96:8a:f5:9c:3a:82:8c:28:c6: f6:a0:e1:5f:da:2f:84:aa:50:28:cd:10:5c:65:c3:cf:6b:e4: f6:4a:1f:68:83:72:e5:b0:58:9e:f5:c5:90:17:37:e6:74:fa: e0:ae:73:73:32:71:4b:df:9e:90:f3:f6:d3:4c:b4:1f:e8:91: dd:25:df:da:74:7e:4e:5d:14:e9:86:57:bd:49:d9:f5:e5:15: f1:aa:37:16:9f:a6:bc:6c:7f:05:7a:76:9a:2c:5a:7f:e6:3c: 1b:ba:33:00:6e:45:eb:9e:32:b3:e5:8d:c1:3e:6e:1e:b9:2d: 76:f5:3b:d0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvOY8UTpA2RyRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OWU1ZGMyNGEtYmVjMi00MGY0LTg2NjAtMDNjYjRmNzI4NWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnAsCJ1+uXysJPes/mQNXOYH0yU37WKn8fSf 8Psp2Ml1Vfot1BeaBgMym5sSU2vfzfUEpDn7eDyoyEnnX+jTL0x+kphCHWJOAidF vn8MEayLoCWZZ40UHL4dl6d8iuDY3NLZQhtKNJxV1zikZfCU/DdPd40F1h4H33UH OQw5j9/YfbtKBUtcGTOPF9pgOQM++eaqeiFTsIfY3JnTIitML22GriGhrsEULtfc wbT0Ac3jPAKAciKzxCZ6aPJKmCO0N412v4wTNyj3bhKBmIdU0FbWReub31p42vkB QqiFC4JA4eXQQNV9O6RVnkFf5u8CzMjaMJYjfTw4BZO+d0xcgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLBjifXsdp+Iq+S8NRvBH2ZXGZjDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzZlOTlhYzAtMGJmZi0z Y2IxLTljZGItNzMzNTk2NzkxMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBNtYX6qStmO5ldEFkr7yGj0bEGX+jq4u8NeYGOf6AYmgr1sE7VfLbQ Lpa0TiZVrST81oV6LugX72IU5rH+60a7yeluHJKZbyZVOxyrcNtM0nA8h1f1Os41 xDAnkLu3UofOSPTEd1OvRMPCPeULOXEeGkegIQUq3mOF8dyQaaLOn2T/dLv7qDOW ivWcOoKMKMb2oOFf2i+EqlAozRBcZcPPa+T2Sh9og3LlsFie9cWQFzfmdPrgrnNz MnFL356Q8/bTTLQf6JHdJd/adH5OXRTphle9Sdn15RXxqjcWn6a8bH8FenaaLFp/ 5jwbujMAbkXrnjKz5Y3BPm4euS129TvQ -----END CERTIFICATE-----Generated at Tue Oct 6 18:37:37 2026 by rpki-client