$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95a5a1eb-38c8-3cd5-abcc-7390677a5bc7.roa File: 95a5a1eb-38c8-3cd5-abcc-7390677a5bc7.roa (raw, json) Hash identifier: Ija1egZPPCEbaqYcHWLIVtiJa/DdREiV67ZRurKuSYs= Subject key identifier: AE:C5:82:60:2C:6D:B2:84:75:FB:29:08:FF:17:2F:F1:93:DF:1C:61 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F4A06699FA931DDEEB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95a5a1eb-38c8-3cd5-abcc-7390677a5bc7.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396585 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f4:a0:66:99:fa:93:1d:de:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=4a79c41d-a61a-4da0-9be7-83d6baec8783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fc:49:95:41:cf:7b:26:f5:0c:00:34:b2:2b: 2d:c4:67:2a:4c:92:fa:ac:09:d0:41:3c:30:e0:2c: cb:2d:1b:b7:bb:99:09:90:1a:83:60:dc:d7:b1:ec: 18:83:7d:99:36:d8:27:07:5c:3e:2f:63:f9:81:79: 6a:63:1c:6d:cf:b0:91:96:01:7e:f2:8b:b2:3f:c0: 3a:7f:f3:72:10:0a:8b:1a:67:75:be:32:9f:b2:6d: 91:23:38:23:39:3f:33:7e:c2:59:fe:8c:c4:db:a7: 03:72:e3:6d:4a:ac:a1:62:d2:cb:46:dd:e3:a5:2b: ec:d5:07:52:54:25:09:ac:7b:cb:59:34:c8:b3:f8: ca:e2:00:f5:1a:fa:3e:9e:39:00:e9:05:92:69:66: b3:da:52:c7:3c:87:4b:41:db:4f:a1:d5:24:d0:2b: cf:31:07:47:55:f4:94:d3:a7:96:e8:ab:b1:9a:9c: e6:9a:ca:9c:aa:c7:a4:57:6c:bb:80:62:75:cf:9e: 2a:df:96:16:0e:a7:38:0f:b9:9d:e8:02:c4:47:62: 91:68:d6:4e:c9:23:a5:cc:89:25:39:f1:8a:e2:53: cd:4b:6e:b9:9a:54:bd:22:ea:d4:c2:67:9f:fa:01: 75:d5:c0:7c:cb:28:ef:ad:6c:a2:6d:6f:55:41:89: da:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C5:82:60:2C:6D:B2:84:75:FB:29:08:FF:17:2F:F1:93:DF:1C:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95a5a1eb-38c8-3cd5-abcc-7390677a5bc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c3:aa:7e:2e:d9:6b:c8:85:ca:7d:cf:98:96:68:34:b2:4b: f6:e4:d0:98:43:7e:7a:26:fa:44:6c:db:91:ac:22:60:e1:f8: b7:c5:1d:d1:86:71:00:ce:07:37:26:2e:b2:03:71:1f:f9:0e: 2e:f1:76:73:d3:7f:a4:9d:83:e9:49:8f:93:13:82:91:29:28: a7:6c:6f:63:33:d4:36:33:4e:65:58:7a:42:de:c4:52:e7:5c: 68:17:78:75:72:f9:49:c1:89:72:71:75:da:22:cd:f9:b2:36: 2b:71:8b:88:3b:7b:23:83:a4:77:44:94:2e:01:e1:78:4f:fe: e7:82:b9:b5:c0:cf:d9:97:eb:5c:44:f4:fc:cf:ae:88:28:0d: a7:b8:0b:45:e1:3f:65:f1:20:c7:1b:32:63:65:5d:91:62:e8: dd:b8:00:13:7e:83:43:40:14:1d:c3:bd:45:96:4f:a6:ef:f5: de:e9:6f:db:a6:09:4a:c3:c3:06:c7:5e:f8:9e:ad:22:2a:c5: 97:ed:c8:35:41:b7:b3:d3:ed:b0:2c:fd:ba:bb:38:a4:9f:63: 90:3d:54:64:7a:3b:3b:f8:04:37:75:6f:44:73:90:1d:04:2a: ce:a2:d0:e4:15:53:de:54:09:a4:42:0f:76:7b:65:63:0b:be: 71:b1:90:3a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvSgZpn6kx3e64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NGE3OWM0MWQtYTYxYS00ZGEwLTliZTctODNkNmJhZWM4NzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvxJlUHPeyb1DAA0sistxGcqTJL6rAnQQTww 4CzLLRu3u5kJkBqDYNzXsewYg32ZNtgnB1w+L2P5gXlqYxxtz7CRlgF+8ouyP8A6 f/NyEAqLGmd1vjKfsm2RIzgjOT8zfsJZ/ozE26cDcuNtSqyhYtLLRt3jpSvs1QdS VCUJrHvLWTTIs/jK4gD1Gvo+njkA6QWSaWaz2lLHPIdLQdtPodUk0CvPMQdHVfSU 06eW6KuxmpzmmsqcqsekV2y7gGJ1z54q35YWDqc4D7md6ALER2KRaNZOySOlzIkl OfGK4lPNS265mlS9IurUwmef+gF11cB8yyjvrWyibW9VQYnajwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK7FgmAsbbKEdfspCP8XL/GT3xxhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTVhNWExZWItMzhjOC0z Y2Q1LWFiY2MtNzM5MDY3N2E1YmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA9w6p+LtlryIXKfc+Ylmg0skv25NCYQ356JvpEbNuRrCJg4fi3xR3R hnEAzgc3Ji6yA3Ef+Q4u8XZz03+knYPpSY+TE4KRKSinbG9jM9Q2M05lWHpC3sRS 51xoF3h1cvlJwYlycXXaIs35sjYrcYuIO3sjg6R3RJQuAeF4T/7ngrm1wM/Zl+tc RPT8z66IKA2nuAtF4T9l8SDHGzJjZV2RYujduAATfoNDQBQdw71Flk+m7/Xe6W/b pglKw8MGx174nq0iKsWX7cg1Qbez0+2wLP26uzikn2OQPVRkejs7+AQ3dW9Ec5Ad BCrOotDkFVPeVAmkQg92e2VjC75xsZA6 -----END CERTIFICATE-----Generated at Tue Oct 6 10:25:46 2026 by rpki-client