$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/990ba4a5-8283-3ec4-9be4-fe5c6a1833e2.roa File: 990ba4a5-8283-3ec4-9be4-fe5c6a1833e2.roa (raw, json) Hash identifier: j1ONxC4J/FKDJCEJEH2wmoNUIcs9g9yj3EMYE6yGbP4= Subject key identifier: E9:A0:A6:63:AD:23:3B:6A:45:DD:06:72:EB:81:61:9B:09:68:59:5E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7888E8E4A8E817EFCD4BAC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/990ba4a5-8283-3ec4-9be4-fe5c6a1833e2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396597 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:8e:8e:4a:8e:81:7e:fc:d4:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e5fa0e98-6043-44f2-9fa8-6f78aac0e80d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:81:55:ac:8d:f9:4e:e3:34:1a:f3:a3:38:e4: 76:83:cb:49:f9:65:b1:be:44:32:77:b2:d8:21:df: 26:55:de:41:be:d8:62:45:f2:c5:6f:58:9b:30:ac: 20:2d:9f:e7:4d:6d:5b:09:5b:16:1a:64:8a:82:28: 53:5d:fb:62:08:4d:be:14:24:14:e5:86:45:9b:5f: e9:8b:24:a8:b2:55:ea:65:44:be:bd:76:45:0a:e1: fe:ea:4b:61:bf:fa:d9:52:1b:c1:24:57:f4:ab:21: 83:a5:c5:a0:fb:d0:85:cf:ef:3d:9e:19:e2:14:b5: f0:5b:c0:8d:04:40:39:30:e2:b5:d7:7d:9e:42:59: 14:91:bc:8d:4b:8b:0d:80:1b:47:c7:84:8b:38:2d: e9:60:99:a6:d4:3b:55:db:8f:d0:4b:7e:82:d2:3c: 49:b9:7f:4f:4e:0e:2f:ac:34:23:ac:57:77:05:a1: 74:78:e0:45:3d:89:46:f7:ba:ad:0a:a8:44:9c:2e: d9:c0:07:0f:0f:8f:8d:32:17:46:4c:40:87:4a:5a: 89:db:5c:05:2e:76:1b:3c:e9:3e:de:e7:f3:60:b8: 8b:51:bb:80:33:f3:26:c1:69:8e:3f:7b:c8:ab:3b: ce:b7:83:40:ed:ea:da:c6:ea:62:ec:a6:c0:26:a5: 84:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A0:A6:63:AD:23:3B:6A:45:DD:06:72:EB:81:61:9B:09:68:59:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/990ba4a5-8283-3ec4-9be4-fe5c6a1833e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:9f:3f:b2:59:ea:de:f8:0d:4d:83:38:e8:56:fd:a0:f2:e3: b6:2d:49:b3:0f:f5:a3:39:9c:56:13:92:c3:38:94:62:33:15: 6e:81:95:da:a6:46:ab:22:29:ec:87:3e:a1:cf:57:73:ab:9b: fd:94:66:22:27:45:d7:98:48:b2:eb:0f:a5:9c:4d:1e:f2:2c: 3c:25:c8:f5:34:91:8c:0c:d2:02:e5:68:91:18:96:48:61:55: b2:0d:ba:2f:da:2b:cf:70:43:36:9e:6c:cb:c6:46:f0:8e:c7: ab:26:65:c2:dd:96:18:80:70:48:b2:99:61:8f:f5:0d:6f:d6: 23:a1:30:2a:24:a0:aa:87:35:a1:4a:02:18:ab:4e:d9:bb:b6: 77:f5:90:c1:09:bc:df:49:6f:1e:39:44:c4:cf:6a:c9:39:7e: 58:f6:7a:20:87:d0:3c:11:17:40:db:38:31:f2:34:e6:0d:77: e8:33:4d:a0:d4:32:0b:ef:ad:55:12:e7:d5:e5:f0:b2:56:e2: d0:5f:4a:1d:98:e2:39:e8:6a:1a:53:88:24:ec:99:7d:a4:8f: 57:c6:f3:c9:40:bd:d2:4f:15:1f:a1:ce:26:23:2d:f9:39:6c: f2:b8:38:2b:6c:d5:b2:ba:ac:19:a9:8d:b7:e3:7c:82:18:6b: a9:18:1a:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niI6OSo6BfvzUusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTVmYTBlOTgtNjA0My00NGYyLTlmYTgtNmY3OGFhYzBlODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYFVrI35TuM0GvOjOOR2g8tJ+WWxvkQyd7LY Id8mVd5BvthiRfLFb1ibMKwgLZ/nTW1bCVsWGmSKgihTXftiCE2+FCQU5YZFm1/p iySoslXqZUS+vXZFCuH+6kthv/rZUhvBJFf0qyGDpcWg+9CFz+89nhniFLXwW8CN BEA5MOK1132eQlkUkbyNS4sNgBtHx4SLOC3pYJmm1DtV24/QS36C0jxJuX9PTg4v rDQjrFd3BaF0eOBFPYlG97qtCqhEnC7ZwAcPD4+NMhdGTECHSlqJ21wFLnYbPOk+ 3ufzYLiLUbuAM/MmwWmOP3vIqzvOt4NA7eraxupi7KbAJqWEWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmgpmOtIztqRd0GcuuBYZsJaFleMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTkwYmE0YTUtODI4My0z ZWM0LTliZTQtZmU1YzZhMTgzM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqfP7JZ6t74DU2DOOhW/aDy47YtSbMP9aM5nFYTksM4lGIzFW6Bldqm RqsiKeyHPqHPV3Orm/2UZiInRdeYSLLrD6WcTR7yLDwlyPU0kYwM0gLlaJEYlkhh VbINui/aK89wQzaebMvGRvCOx6smZcLdlhiAcEiymWGP9Q1v1iOhMCokoKqHNaFK AhirTtm7tnf1kMEJvN9Jbx45RMTPask5flj2eiCH0DwRF0DbODHyNOYNd+gzTaDU MgvvrVUS59Xl8LJW4tBfSh2Y4jnoahpTiCTsmX2kj1fG88lAvdJPFR+hziYjLfk5 bPK4OCts1bK6rBmpjbfjfIIYa6kYGjw= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:40 2026 by rpki-client