$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89dfc5b8-ee25-3f38-9835-da0ed0640577.roa File: 89dfc5b8-ee25-3f38-9835-da0ed0640577.roa (raw, json) Hash identifier: sD/UCgTf4eACxTF1wW2O0K7xCKSaHt6DzbDaDDWQgbI= Subject key identifier: E7:9D:7D:99:F2:5A:AC:69:18:CC:E4:88:4B:8D:44:24:80:E8:36:3F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7888CE3A1BCBE48F64277B0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89dfc5b8-ee25-3f38-9835-da0ed0640577.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 25485 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:8c:e3:a1:bc:be:48:f6:42:77:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7654b6d9-7506-44af-b2b6-346367d665ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:98:2c:af:e1:4f:70:0f:a9:07:0e:b0:21:73: 52:d5:b2:4c:4b:d0:68:ed:ec:64:f3:95:79:ce:96: 80:4e:6d:da:50:d1:ee:2b:2f:74:af:82:b3:65:9d: 19:5d:e8:ca:d5:1d:e7:d9:25:5a:6c:80:77:d0:5c: 45:df:b5:29:6e:33:2f:7f:f2:47:b4:c3:1b:a8:74: fc:61:b1:d0:4a:9b:05:1e:e9:94:d6:e0:c3:c0:5a: cc:66:8a:0a:6d:91:6e:ec:27:f7:90:22:5e:5c:94: bb:01:e5:5a:b2:6d:ea:c7:ee:36:74:92:1e:37:06: 8d:ec:4a:16:26:8d:d6:c3:08:88:d7:66:fe:44:0f: 13:f7:e0:ad:70:ca:60:51:85:59:60:92:1d:b7:2a: 58:0c:d1:b1:c5:11:67:6f:45:fe:3b:4e:b4:de:41: 9a:6e:c1:d2:92:52:e3:32:81:e3:46:bb:2e:5d:c2: 95:d9:b2:7b:33:db:a9:3a:1c:b4:30:5f:c1:b4:e2: cd:73:67:19:54:af:79:a7:5b:1d:6c:f5:83:79:b2: eb:2b:2f:50:4e:26:ca:89:4a:92:b7:45:de:76:43: 0a:93:f0:ee:9f:b4:f0:b1:10:a1:31:c9:20:59:34: f0:c7:5b:50:21:0e:7e:20:62:25:49:89:fe:4c:ec: a5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9D:7D:99:F2:5A:AC:69:18:CC:E4:88:4B:8D:44:24:80:E8:36:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89dfc5b8-ee25-3f38-9835-da0ed0640577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:46:9f:ba:96:01:a7:5c:ce:c7:d4:17:87:04:63:5a:e0:d9: fc:d5:09:db:c9:e1:cc:1a:40:74:b5:e5:d8:92:ee:4a:3e:38: 8c:3e:dc:b4:d0:82:a0:ae:34:ef:9c:02:f0:6b:98:1f:13:fa: ff:21:a4:2b:ed:8c:1a:d3:86:46:1c:f4:21:f0:6b:17:ce:e6: 4e:08:50:76:25:b2:0b:ac:38:b8:e1:6e:54:be:a4:97:20:ab: d4:ed:92:50:93:8f:f1:3d:17:ea:8a:03:0c:8b:25:7b:b9:7b: 6d:15:82:ac:08:e7:cb:7c:2f:61:00:cf:33:eb:b5:66:fc:57: f9:02:bf:dd:0f:a6:53:9e:88:36:70:c6:2d:0c:34:40:d4:79: d0:09:0e:53:2d:78:0e:b1:8d:59:35:3f:ef:e5:0c:85:0e:f2: cf:c7:cd:41:7a:72:bb:70:1c:37:fe:7a:61:74:eb:93:52:40: 31:67:bb:3b:a6:01:6d:bb:9b:ed:84:cc:af:d6:d3:58:90:24: 39:63:53:ff:bb:bf:dd:33:4d:37:e1:a0:2e:84:6b:7c:a4:a9: b3:61:90:d1:3a:e1:a6:07:39:60:df:07:e5:fe:71:b0:a5:d4: f0:47:5c:f8:c5:44:ce:ec:ad:27:bb:23:bb:ec:78:56:c2:2d: e0:4e:66:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niIzjoby+SPZCd7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzY1NGI2ZDktNzUwNi00NGFmLWIyYjYtMzQ2MzY3ZDY2NWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZgsr+FPcA+pBw6wIXNS1bJMS9Bo7exk85V5 zpaATm3aUNHuKy90r4KzZZ0ZXejK1R3n2SVabIB30FxF37UpbjMvf/JHtMMbqHT8 YbHQSpsFHumU1uDDwFrMZooKbZFu7Cf3kCJeXJS7AeVasm3qx+42dJIeNwaN7EoW Jo3WwwiI12b+RA8T9+CtcMpgUYVZYJIdtypYDNGxxRFnb0X+O0603kGabsHSklLj MoHjRrsuXcKV2bJ7M9upOhy0MF/BtOLNc2cZVK95p1sdbPWDebLrKy9QTibKiUqS t0XedkMKk/Dun7TwsRChMckgWTTwx1tQIQ5+IGIlSYn+TOylzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOedfZnyWqxpGMzkiEuNRCSA6DY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODlkZmM1YjgtZWUyNS0z ZjM4LTk4MzUtZGEwZWQwNjQwNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5Gn7qWAadczsfUF4cEY1rg2fzVCdvJ4cwaQHS15diS7ko+OIw+3LTQ gqCuNO+cAvBrmB8T+v8hpCvtjBrThkYc9CHwaxfO5k4IUHYlsgusOLjhblS+pJcg q9TtklCTj/E9F+qKAwyLJXu5e20VgqwI58t8L2EAzzPrtWb8V/kCv90PplOeiDZw xi0MNEDUedAJDlMteA6xjVk1P+/lDIUO8s/HzUF6crtwHDf+emF065NSQDFnuzum AW27m+2EzK/W01iQJDljU/+7v90zTTfhoC6Ea3ykqbNhkNE64aYHOWDfB+X+cbCl 1PBHXPjFRM7srSe7I7vseFbCLeBOZnU= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:36 2026 by rpki-client