$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b3b7ea8-d637-32d3-946d-d7eba904b552.roa File: 8b3b7ea8-d637-32d3-946d-d7eba904b552.roa (raw, json) Hash identifier: pdIlhQxzhfOoWWezPv4TrHYTmn+Plh6T0G8il4I70Ks= Subject key identifier: 8D:C2:20:97:57:28:24:88:7D:D9:52:76:46:FF:EE:07:16:F6:8D:96 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EC0A73D0121EED35E7CC09C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b3b7ea8-d637-32d3-946d-d7eba904b552.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 396586 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:3d:01:21:ee:d3:5e:7c:c0:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=ed611b20-39ad-4fef-8f49-5b634a3ea73e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d6:47:51:b4:92:7d:a8:27:0b:6f:0b:9f:a9: 85:49:1c:44:bd:bb:0d:b4:13:35:2c:bf:22:26:54: f6:06:1b:24:60:ca:9b:c0:74:08:f1:e2:9e:68:ad: 7e:7e:e4:22:f2:89:bf:2a:c9:07:4e:95:40:98:54: 5f:ac:31:56:ab:65:b9:05:f0:2b:4c:23:ef:9d:71: bc:5a:fb:c5:e9:f9:4a:e8:34:3e:27:65:d7:35:6f: b4:e3:bf:51:66:95:ea:07:a5:39:69:ec:a9:15:c7: 40:3b:aa:26:ec:c1:63:75:54:8f:b8:5d:3c:05:0f: c8:e4:cd:a9:b8:1a:74:36:d1:92:dc:cd:c2:d2:b2: 0c:76:39:6e:46:10:c6:64:48:d5:75:13:1c:e3:9f: 7e:0f:83:19:71:84:06:71:fc:d0:84:f6:ac:92:52: 49:8d:8f:2d:5d:aa:c1:af:04:b9:60:4c:b1:98:f4: e7:9e:71:72:5c:82:f3:af:14:7a:e4:a2:cc:8f:0c: dd:52:b9:70:e0:2a:2a:0b:b2:9d:16:b3:75:42:da: 0c:98:e4:e4:a9:13:87:3b:5a:c4:4f:14:97:97:f7: 42:75:a2:c0:4b:37:3f:65:30:3b:e9:9a:9f:11:81: b2:26:01:ad:2f:1a:c2:5b:dc:30:a2:4d:f9:04:12: 25:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C2:20:97:57:28:24:88:7D:D9:52:76:46:FF:EE:07:16:F6:8D:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b3b7ea8-d637-32d3-946d-d7eba904b552.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:f1:d5:05:ed:b0:e5:db:cb:d1:86:0f:f9:7b:b9:bd:18:db: aa:f2:e8:38:ef:d4:57:f1:4a:e1:4e:82:6d:47:a7:0c:e5:45: 04:7b:76:98:5f:0d:cf:4a:cd:17:d2:3a:ab:b1:93:5f:35:a6: 30:d5:29:84:13:23:78:c2:02:1b:b2:2c:53:fc:0a:a6:13:3d: 02:0f:1b:17:2a:58:cc:18:75:86:49:9d:9d:55:91:55:6d:0c: 9c:6b:91:ec:60:dd:89:f3:00:04:fb:8d:8c:c0:14:90:61:14: de:9e:11:be:1d:9b:1e:08:1f:c8:72:f6:ed:1b:70:e4:23:d4: ff:65:21:40:cb:34:68:45:09:2c:23:87:eb:10:8d:da:11:dc: 2d:1c:77:a5:3a:1f:19:c3:b8:c6:b4:09:a2:9b:50:51:3a:fe: 6f:28:20:08:f6:ee:b4:ad:16:7f:77:21:77:20:e7:12:ab:0c: 3e:f4:6f:0e:88:3a:43:f3:2f:d4:81:d5:c6:6a:9e:82:4e:41: 55:23:f5:ee:ac:9b:e1:b4:99:11:82:72:7f:3c:19:b0:c4:b7: 81:8e:36:67:39:c7:78:97:39:08:94:86:7a:71:96:bd:b6:ae: cc:8f:91:f1:f2:d1:0b:e0:3c:f5:e9:e7:87:c7:db:01:5a:9b: 44:eb:3d:f2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7Apz0BIe7TXnzAnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk ZWQ2MTFiMjAtMzlhZC00ZmVmLThmNDktNWI2MzRhM2VhNzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNZHUbSSfagnC28Ln6mFSRxEvbsNtBM1LL8i JlT2BhskYMqbwHQI8eKeaK1+fuQi8om/KskHTpVAmFRfrDFWq2W5BfArTCPvnXG8 WvvF6flK6DQ+J2XXNW+0479RZpXqB6U5aeypFcdAO6om7MFjdVSPuF08BQ/I5M2p uBp0NtGS3M3C0rIMdjluRhDGZEjVdRMc459+D4MZcYQGcfzQhPasklJJjY8tXarB rwS5YEyxmPTnnnFyXILzrxR65KLMjwzdUrlw4CoqC7KdFrN1QtoMmOTkqROHO1rE TxSXl/dCdaLASzc/ZTA76ZqfEYGyJgGtLxrCW9wwok35BBIlfQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI3CIJdXKCSIfdlSdkb/7gcW9o2WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGIzYjdlYTgtZDYzNy0z MmQzLTk0NmQtZDdlYmE5MDRiNTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCG8dUF7bDl28vRhg/5e7m9GNuq8ug479RX8UrhToJtR6cM5UUEe3aY Xw3PSs0X0jqrsZNfNaYw1SmEEyN4wgIbsixT/AqmEz0CDxsXKljMGHWGSZ2dVZFV bQyca5HsYN2J8wAE+42MwBSQYRTenhG+HZseCB/IcvbtG3DkI9T/ZSFAyzRoRQks I4frEI3aEdwtHHelOh8Zw7jGtAmim1BROv5vKCAI9u60rRZ/dyF3IOcSqww+9G8O iDpD8y/UgdXGap6CTkFVI/XurJvhtJkRgnJ/PBmwxLeBjjZnOcd4lzkIlIZ6cZa9 tq7Mj5Hx8tEL4Dz16eeHx9sBWptE6z3y -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:20 2026 by rpki-client