$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3ee5a87-5d4c-36ef-ba7f-75238bbcf741.roa File: a3ee5a87-5d4c-36ef-ba7f-75238bbcf741.roa (raw, json) Hash identifier: 0Q+oBWVurVKZwelAyZz03K4axGAIEngWxznpe8ABG+A= Subject key identifier: CF:E9:BE:CD:43:5F:52:3D:E1:6F:C0:A4:F6:16:74:42:78:45:A3:44 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7888F26A50698F38AB2AC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3ee5a87-5d4c-36ef-ba7f-75238bbcf741.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396553 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:8f:26:a5:06:98:f3:8a:b2:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=511465b8-e05e-4674-b87d-0071a65e5aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:5b:86:38:cd:07:2a:2f:22:1c:c0:a4:52:b4: 41:6f:d5:7f:83:db:58:9e:41:b7:4b:d5:6e:76:62: 1f:82:f2:f2:bd:a3:fd:b4:ef:dc:cc:05:a1:cf:7e: 34:30:3f:db:d9:8f:3e:e8:69:04:92:33:01:36:5d: 2a:5b:c5:fe:26:17:c4:58:35:8b:80:70:c0:67:d7: 3a:c5:a5:aa:0f:60:cc:de:51:f3:0c:b0:88:80:93: ed:b8:e4:9b:21:88:7e:8e:cf:f4:43:d0:78:a7:ba: ba:2a:1a:01:d3:5b:84:78:10:0c:11:8e:01:50:7b: 59:ae:54:ec:f4:b4:14:8d:82:87:7a:75:61:10:36: 80:bc:70:3e:3a:30:c7:7f:29:2c:4f:5a:91:f5:94: 00:59:8c:0b:98:78:83:be:87:5b:a0:a9:3c:59:37: 68:8b:e0:e9:d7:8e:97:9a:57:d1:e7:d1:7b:a7:2a: e8:18:08:d9:4b:15:51:cc:ec:49:c9:33:9f:32:ae: 94:2c:4d:64:22:46:9c:5d:dd:65:48:c3:66:60:a5: 0f:55:cf:ac:5c:f4:67:9e:4e:ea:4f:12:1f:10:12: 16:38:b4:27:f4:8e:a0:1f:40:d6:29:31:7a:29:01: 3f:d1:a5:67:4d:d5:d0:54:1a:18:6b:2d:7b:87:11: c5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E9:BE:CD:43:5F:52:3D:E1:6F:C0:A4:F6:16:74:42:78:45:A3:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3ee5a87-5d4c-36ef-ba7f-75238bbcf741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:2f:25:8d:c5:04:7c:67:5a:a0:6c:30:0b:94:58:51:d4:16: 80:5a:05:2e:fc:1a:95:da:a8:80:e0:73:9f:09:f4:b2:b1:53: df:6c:bb:a8:ff:54:05:c9:5c:e3:8f:08:26:68:ab:da:36:a8: a6:fa:82:d8:45:a8:e9:25:4e:ed:ef:f3:d2:68:c0:4a:95:1b: 08:2f:ea:53:46:3a:9e:11:a4:32:d1:c0:5a:e0:07:95:72:42: 71:91:20:a1:6c:bb:6a:fe:e5:fd:bd:98:7c:55:4b:f4:95:3b: 88:45:03:0b:bc:23:4e:f6:11:a5:f7:fa:8c:13:36:92:2e:6a: 33:b0:75:8e:4c:0c:db:9e:48:de:f2:f8:d2:6d:68:cb:a2:f8: c4:24:3d:e2:f9:b9:c2:20:d4:c5:98:97:0d:57:ea:cf:dd:95: 54:12:f9:27:31:b9:f1:d7:e8:89:82:4f:32:ab:0f:9b:e2:8c: f6:d2:5d:b0:62:ca:85:76:90:ec:43:b3:fb:b1:db:d4:6e:8b: fe:da:34:01:70:e6:ed:b0:66:66:0b:3f:ce:2f:99:25:9c:73: 0a:8d:da:74:cb:4b:d9:05:a5:82:c9:66:dd:00:01:44:72:a8: 99:21:03:c4:aa:8d:f2:f5:9d:b7:d3:7b:55:7a:7d:97:f7:f9: 20:35:69:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niI8mpQaY84qyrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTExNDY1YjgtZTA1ZS00Njc0LWI4N2QtMDA3MWE2NWU1YWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9luGOM0HKi8iHMCkUrRBb9V/g9tYnkG3S9Vu dmIfgvLyvaP9tO/czAWhz340MD/b2Y8+6GkEkjMBNl0qW8X+JhfEWDWLgHDAZ9c6 xaWqD2DM3lHzDLCIgJPtuOSbIYh+js/0Q9B4p7q6KhoB01uEeBAMEY4BUHtZrlTs 9LQUjYKHenVhEDaAvHA+OjDHfyksT1qR9ZQAWYwLmHiDvodboKk8WTdoi+Dp146X mlfR59F7pyroGAjZSxVRzOxJyTOfMq6ULE1kIkacXd1lSMNmYKUPVc+sXPRnnk7q TxIfEBIWOLQn9I6gH0DWKTF6KQE/0aVnTdXQVBoYay17hxHFRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/pvs1DX1I94W/ApPYWdEJ4RaNEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTNlZTVhODctNWQ0Yy0z NmVmLWJhN2YtNzUyMzhiYmNmNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkvJY3FBHxnWqBsMAuUWFHUFoBaBS78GpXaqIDgc58J9LKxU99su6j/ VAXJXOOPCCZoq9o2qKb6gthFqOklTu3v89JowEqVGwgv6lNGOp4RpDLRwFrgB5Vy QnGRIKFsu2r+5f29mHxVS/SVO4hFAwu8I072EaX3+owTNpIuajOwdY5MDNueSN7y +NJtaMui+MQkPeL5ucIg1MWYlw1X6s/dlVQS+ScxufHX6ImCTzKrD5vijPbSXbBi yoV2kOxDs/ux29Rui/7aNAFw5u2wZmYLP84vmSWccwqN2nTLS9kFpYLJZt0AAURy qJkhA8SqjfL1nbfTe1V6fZf3+SA1aeE= -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:36 2026 by rpki-client