$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9641d997-69b0-376f-a225-6c0526f238da.roa File: 9641d997-69b0-376f-a225-6c0526f238da.roa (raw, json) Hash identifier: kXVoyWauLfOa8X0K5vaG5Wf6HP5F+ENRJeT3hgr1NVE= Subject key identifier: D0:C8:D2:18:42:AC:C2:AE:0F:FB:62:77:F1:31:2D:91:59:F1:0B:B8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F519D79CE9D4597C3F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9641d997-69b0-376f-a225-6c0526f238da.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396546 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f5:19:d7:9c:e9:d4:59:7c:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=2cfa1aaa-9740-497a-ba2b-af6fcd8b408e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:14:17:bf:a3:ac:ee:c8:a6:28:4d:1a:b7:1f: b3:58:e3:ef:d8:cf:f6:20:d7:95:92:a6:9a:13:b2: b1:f2:0d:08:e8:fa:fd:5f:89:b6:5a:7d:1b:a3:dc: f0:e6:60:28:80:db:b7:99:d6:50:e2:e3:79:1e:45: 8c:f4:fb:4c:94:e5:14:d4:9d:4f:2f:4e:bf:53:94: 5c:81:0a:64:59:cf:9c:1c:5d:dc:c8:0d:75:bb:86: ac:98:a1:41:77:ca:d1:54:a0:9b:65:21:cc:d3:77: 13:8a:80:1e:b1:2f:c4:82:bb:49:8f:ad:84:d9:58: ba:39:bb:9f:81:43:28:b0:08:d5:10:34:9a:09:3d: fe:e5:ec:35:6f:7b:28:ee:aa:fc:0b:7d:3c:7f:04: b4:70:25:e1:84:00:0b:55:7e:09:e4:9f:fa:ec:b1: 36:6c:2d:c6:88:f2:70:fb:4f:1e:e2:ad:0a:e6:5c: de:f3:5f:bc:b4:a7:d7:e4:b5:2b:3d:60:fe:8f:52: 64:b6:b2:bb:72:c8:64:4e:35:e5:98:84:4c:a4:40: 2d:fa:4e:93:a3:eb:0b:31:66:0f:c1:6e:7c:c1:70: 7f:ca:b1:30:9c:fb:51:68:5b:08:87:19:8f:a6:ac: c5:90:e4:1d:2b:fc:9f:25:71:d9:5d:53:f5:db:de: 00:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C8:D2:18:42:AC:C2:AE:0F:FB:62:77:F1:31:2D:91:59:F1:0B:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9641d997-69b0-376f-a225-6c0526f238da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:42:2f:d7:b7:d8:6f:b4:7c:11:01:c5:85:c7:1a:a7:69:8a: a8:bc:47:d5:c1:98:e8:67:99:f6:e1:fd:af:54:ed:f1:1a:c2: 1f:ea:57:d4:18:31:da:98:d7:52:06:56:05:4d:34:3d:8f:a0: 3b:10:c3:2d:2b:1c:5a:fd:0c:d0:8f:a6:b5:f1:0f:37:df:59: 50:9b:5a:95:46:86:cd:27:32:12:5d:2b:14:8d:71:45:ba:25: 28:9d:16:2e:e0:82:cc:3d:80:7a:27:8c:ca:dc:a6:f0:4f:48: d4:f0:98:d7:35:d4:18:04:53:5c:6f:b3:3e:9b:d3:93:8b:14: 3f:ea:ca:25:e1:56:4f:45:e2:ce:79:bd:13:5b:95:3a:a9:d2: f3:48:6f:3e:18:bf:61:13:e9:91:da:11:71:66:d9:0f:43:1b: 8a:d7:3c:1e:c6:c1:89:65:e6:60:b1:00:f0:69:ce:45:5e:7c: 4b:ec:51:8b:d1:94:da:08:8d:c5:86:c8:26:53:0f:93:03:23: e2:06:77:b4:fd:68:9e:28:49:b4:bb:07:14:31:0b:9f:db:ff: 58:81:7d:d7:4e:ff:22:56:ce:da:b7:58:16:a2:29:4c:9d:05: 29:b9:19:4d:01:79:00:87:0d:11:d3:1f:5c:9c:96:f9:bf:05: ad:26:9f:b9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvUZ15zp1Fl8PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MmNmYTFhYWEtOTc0MC00OTdhLWJhMmItYWY2ZmNkOGI0MDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRQXv6Os7simKE0atx+zWOPv2M/2INeVkqaa E7Kx8g0I6Pr9X4m2Wn0bo9zw5mAogNu3mdZQ4uN5HkWM9PtMlOUU1J1PL06/U5Rc gQpkWc+cHF3cyA11u4asmKFBd8rRVKCbZSHM03cTioAesS/EgrtJj62E2Vi6Obuf gUMosAjVEDSaCT3+5ew1b3so7qr8C308fwS0cCXhhAALVX4J5J/67LE2bC3GiPJw +08e4q0K5lze81+8tKfX5LUrPWD+j1JktrK7cshkTjXlmIRMpEAt+k6To+sLMWYP wW58wXB/yrEwnPtRaFsIhxmPpqzFkOQdK/yfJXHZXVP1294AgwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNDI0hhCrMKuD/tid/ExLZFZ8Qu4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTY0MWQ5OTctNjliMC0z NzZmLWEyMjUtNmMwNTI2ZjIzOGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAYQi/Xt9hvtHwRAcWFxxqnaYqovEfVwZjoZ5n24f2vVO3xGsIf6lfU GDHamNdSBlYFTTQ9j6A7EMMtKxxa/QzQj6a18Q8331lQm1qVRobNJzISXSsUjXFF uiUonRYu4ILMPYB6J4zK3KbwT0jU8JjXNdQYBFNcb7M+m9OTixQ/6sol4VZPReLO eb0TW5U6qdLzSG8+GL9hE+mR2hFxZtkPQxuK1zwexsGJZeZgsQDwac5FXnxL7FGL 0ZTaCI3FhsgmUw+TAyPiBne0/WieKEm0uwcUMQuf2/9YgX3XTv8iVs7at1gWoilM nQUpuRlNAXkAhw0R0x9cnJb5vwWtJp+5 -----END CERTIFICATE-----Generated at Thu Oct 8 02:25:41 2026 by rpki-client