$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e6923f3-4a15-37a9-9c23-12f8b4c27404.roa File: 8e6923f3-4a15-37a9-9c23-12f8b4c27404.roa (raw, json) Hash identifier: GjCkTDpx53D0oCvZg96yDitk+E4hw4ucOdcAbAq2Jxw= Subject key identifier: 75:7F:67:71:EE:12:CE:76:68:ED:E0:8B:EE:C6:13:F8:E2:22:20:C1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F562708BA875D7DB9ED0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e6923f3-4a15-37a9-9c23-12f8b4c27404.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396617 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f5:62:70:8b:a8:75:d7:db:9e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=baf859f3-2b0a-48ad-97ec-7e315ab10558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ed:31:3a:aa:9c:5c:2e:2a:b9:53:bc:86:21: 50:19:72:ab:df:8b:ab:db:4c:0e:aa:d7:3b:c9:fc: a0:c9:b8:36:eb:02:98:5c:85:96:3c:1f:d4:59:dd: 67:07:83:04:c5:ab:cf:83:55:0e:af:8a:3f:5b:ae: 93:01:e6:88:c4:ac:3a:90:2f:4a:95:3c:20:29:d7: 94:6f:57:84:c4:ad:3d:92:85:0e:61:8a:86:65:aa: 2b:cb:64:6d:b7:c8:d5:ab:0c:14:eb:b4:04:a0:5c: b0:9b:d0:23:06:c6:fe:90:17:7f:00:36:15:9d:29: 3d:df:78:32:d2:48:54:a7:3d:9f:bf:3c:7a:7b:7e: e6:f0:76:12:47:37:82:53:39:59:41:6c:95:ab:68: fe:ba:47:e4:bb:57:9f:c5:23:2e:0e:34:e9:72:b9: db:9c:c6:d3:60:03:0e:18:6d:4c:f6:a2:28:cd:77: 1b:58:8c:89:32:c7:a3:5f:1d:69:ac:45:3d:37:57: 82:c9:36:98:4a:47:66:ec:8b:a3:ed:3e:a6:0e:c8: c2:7a:3d:ee:1e:d6:e0:a2:3f:37:5b:25:84:d9:f6: 18:ec:ee:ff:57:60:8f:9d:e9:79:8d:9a:4f:ea:8e: cc:bb:8d:91:8b:f6:73:ca:0c:c4:d4:64:b8:85:9e: e7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7F:67:71:EE:12:CE:76:68:ED:E0:8B:EE:C6:13:F8:E2:22:20:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e6923f3-4a15-37a9-9c23-12f8b4c27404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:54:cb:6c:c1:43:18:23:bd:a6:4f:ae:cb:6d:83:10:25:39: a2:7a:2f:07:a3:42:2c:f5:a7:a8:7f:4f:98:9a:52:67:bc:bb: a8:48:93:e7:14:86:24:34:bb:d3:6a:29:8c:6a:f9:8c:30:62: 4a:76:27:6b:cf:1a:f4:22:59:42:f3:b2:3f:69:2a:de:7f:bb: 91:95:76:c9:06:5e:b9:ae:b1:55:d4:21:f7:da:26:ea:72:98: e4:bf:17:87:5d:34:5f:a2:df:4d:85:65:8c:3e:3e:ad:74:97: c8:a5:26:9f:ea:69:f3:4c:94:76:01:cd:32:5c:86:b2:6d:14: cc:34:bb:2e:80:a4:f0:58:44:d4:33:f6:22:3c:91:3b:d7:33: 2d:cb:4c:50:b0:a7:78:c4:0c:23:ac:ab:63:ad:46:c0:60:1d: 3a:43:7f:b2:4c:31:19:43:c5:b2:78:4c:2b:31:0c:7f:3c:d1: 8d:c2:7d:ee:a7:0c:18:0b:a1:85:13:08:bc:34:79:8a:61:89: 08:b1:3c:79:32:d6:a6:59:31:0e:28:94:c2:a6:47:77:c1:ec: 2c:41:3a:9c:55:57:cd:8b:7f:9d:dd:c7:b1:26:6d:15:9a:b7: 98:17:a1:80:9d:ca:e7:58:37:b5:c1:4e:d7:7a:30:b3:db:6e: 17:6b:79:34 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvVicIuoddfbntAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YmFmODU5ZjMtMmIwYS00OGFkLTk3ZWMtN2UzMTVhYjEwNTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+0xOqqcXC4quVO8hiFQGXKr34ur20wOqtc7 yfygybg26wKYXIWWPB/UWd1nB4MExavPg1UOr4o/W66TAeaIxKw6kC9KlTwgKdeU b1eExK09koUOYYqGZaory2Rtt8jVqwwU67QEoFywm9AjBsb+kBd/ADYVnSk933gy 0khUpz2fvzx6e37m8HYSRzeCUzlZQWyVq2j+ukfku1efxSMuDjTpcrnbnMbTYAMO GG1M9qIozXcbWIyJMsejXx1prEU9N1eCyTaYSkdm7Iuj7T6mDsjCej3uHtbgoj83 WyWE2fYY7O7/V2CPnel5jZpP6o7Mu42Ri/ZzygzE1GS4hZ7n/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHV/Z3HuEs52aO3gi+7GE/jiIiDBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGU2OTIzZjMtNGExNS0z N2E5LTljMjMtMTJmOGI0YzI3NDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAfVMtswUMYI72mT67LbYMQJTmiei8Ho0Is9aeof0+YmlJnvLuoSJPn FIYkNLvTaimMavmMMGJKdidrzxr0IllC87I/aSref7uRlXbJBl65rrFV1CH32ibq cpjkvxeHXTRfot9NhWWMPj6tdJfIpSaf6mnzTJR2Ac0yXIaybRTMNLsugKTwWETU M/YiPJE71zMty0xQsKd4xAwjrKtjrUbAYB06Q3+yTDEZQ8WyeEwrMQx/PNGNwn3u pwwYC6GFEwi8NHmKYYkIsTx5MtamWTEOKJTCpkd3wewsQTqcVVfNi3+d3cexJm0V mreYF6GAncrnWDe1wU7XejCz224Xa3k0 -----END CERTIFICATE-----Generated at Tue Oct 6 23:10:52 2026 by rpki-client