$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89dfc5b8-ee25-3f38-9835-da0ed0640577.roa File: 89dfc5b8-ee25-3f38-9835-da0ed0640577.roa (raw, json) Hash identifier: L1GMZ9GPJ4NhOM3khLFsuWvSOtxxKM+EtGsMzFbcpno= Subject key identifier: 70:57:24:84:B1:70:CB:2B:46:C1:EC:B0:5E:46:05:4C:7C:37:E6:20 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4989BB4D11926D9AECB8C580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89dfc5b8-ee25-3f38-9835-da0ed0640577.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 25485 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:bb:4d:11:92:6d:9a:ec:b8:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7f406e18-ebc0-497d-98c9-1f5bbbdefc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fc:38:d5:8d:5b:59:e1:c5:3f:42:95:c2:52: c9:70:6c:e8:ad:a2:4f:03:3f:f8:ee:59:4a:b3:88: 9b:81:c7:85:5c:6f:46:22:6b:e8:ee:fe:55:e9:45: c5:7f:de:0e:8d:65:8c:8e:e2:92:2b:d9:e5:49:b9: 80:09:dc:c7:8c:95:ca:42:f1:35:b3:43:18:55:c9: 7f:2a:f1:e1:92:dd:3a:bf:f4:81:d1:31:83:e1:da: d8:eb:a4:bd:bd:c0:f7:5f:f2:c3:96:2f:97:be:46: 3c:d1:67:b3:3b:fe:2b:9e:35:82:de:86:0e:f4:f1: a0:3e:e0:74:fe:9b:4b:5b:31:fa:6f:4d:44:77:ad: 6f:31:70:6b:32:c0:45:23:ce:cc:4e:8f:03:57:c8: 96:19:90:c7:88:25:1b:e5:7a:99:8d:b0:c9:4b:f0: e5:93:e6:3c:d3:86:75:bf:bc:d7:a5:1d:7f:38:ff: e0:48:6f:2a:51:29:47:d8:ac:eb:8c:a9:d8:59:69: 7a:16:30:79:49:41:b1:92:ba:c3:67:ee:14:d5:ad: de:1e:c6:2b:3e:d2:d6:eb:23:ef:25:6b:2a:9c:7e: 6a:08:c4:5d:01:35:d8:b2:0a:e7:d2:c5:fe:b2:06: be:35:cc:f7:0b:63:4b:c6:99:66:2f:46:96:20:de: 91:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:57:24:84:B1:70:CB:2B:46:C1:EC:B0:5E:46:05:4C:7C:37:E6:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89dfc5b8-ee25-3f38-9835-da0ed0640577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b8:1b:f0:9b:0c:2f:eb:38:74:9c:77:c3:7b:d7:84:7e:2e: 1d:81:f6:ad:44:a5:0e:57:dc:ff:52:3e:35:ee:ae:e1:cd:70: a2:25:90:14:7f:c2:84:c2:e9:62:56:03:a3:f5:78:9c:57:ce: 96:42:8c:b0:70:37:e4:ad:86:25:b4:df:17:cf:80:79:ff:dd: 87:9b:29:e6:f2:83:a6:73:c6:47:da:cb:ed:6c:57:37:97:d8: 42:ac:ef:c6:28:0a:23:76:82:dd:d9:37:6e:ef:23:7e:3a:14: 8a:d6:bd:1c:ef:48:13:28:67:2c:55:f0:bf:96:a4:d2:3f:ea: 1c:61:fb:9c:98:e8:61:46:6e:29:64:5e:bc:d7:13:f1:b8:01: d7:99:f3:ce:1a:0b:84:1b:40:cf:4a:b1:a5:42:f8:23:50:85: 4d:d9:56:cc:ae:46:38:e4:f4:80:7a:f3:70:7b:68:3e:d7:af: 8b:9d:53:58:54:bc:6e:2e:7f:15:34:6b:05:77:cc:b2:4c:cc: 4f:19:9b:21:8c:05:ed:f1:6b:2d:eb:68:bc:80:a2:1f:aa:c1: e7:ad:44:13:f7:eb:42:50:bb:15:5f:c5:04:69:8b:41:8b:9b: b6:ba:fa:36:31:6d:06:fb:52:62:8b:2f:82:5f:63:48:50:1f: 3a:f8:ec:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JibtNEZJtmuy4xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2Y0MDZlMTgtZWJjMC00OTdkLTk4YzktMWY1YmJiZGVmYzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfw41Y1bWeHFP0KVwlLJcGzoraJPAz/47llK s4ibgceFXG9GImvo7v5V6UXFf94OjWWMjuKSK9nlSbmACdzHjJXKQvE1s0MYVcl/ KvHhkt06v/SB0TGD4drY66S9vcD3X/LDli+XvkY80WezO/4rnjWC3oYO9PGgPuB0 /ptLWzH6b01Ed61vMXBrMsBFI87MTo8DV8iWGZDHiCUb5XqZjbDJS/Dlk+Y804Z1 v7zXpR1/OP/gSG8qUSlH2KzrjKnYWWl6FjB5SUGxkrrDZ+4U1a3eHsYrPtLW6yPv JWsqnH5qCMRdATXYsgrn0sX+sga+Ncz3C2NLxplmL0aWIN6RRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBXJISxcMsrRsHssF5GBUx8N+YgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODlkZmM1YjgtZWUyNS0z ZjM4LTk4MzUtZGEwZWQwNjQwNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG4G/CbDC/rOHScd8N714R+Lh2B9q1EpQ5X3P9SPjXuruHNcKIlkBR/ woTC6WJWA6P1eJxXzpZCjLBwN+SthiW03xfPgHn/3YebKebyg6Zzxkfay+1sVzeX 2EKs78YoCiN2gt3ZN27vI346FIrWvRzvSBMoZyxV8L+WpNI/6hxh+5yY6GFGbilk XrzXE/G4AdeZ884aC4QbQM9KsaVC+CNQhU3ZVsyuRjjk9IB683B7aD7Xr4udU1hU vG4ufxU0awV3zLJMzE8ZmyGMBe3xay3raLyAoh+qweetRBP360JQuxVfxQRpi0GL m7a6+jYxbQb7UmKLL4JfY0hQHzr47A0= -----END CERTIFICATE-----Generated at Tue Oct 6 14:55:52 2026 by rpki-client