$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531e496-8f60-365a-9f71-97f429bea4f3.roa File: a531e496-8f60-365a-9f71-97f429bea4f3.roa (raw, json) Hash identifier: OnmbMBkBvqKqoYUw1y9wEYYmao0hMXDnXENGpehKpQ4= Subject key identifier: CA:83:95:0F:B1:A9:64:E9:BF:78:AA:4E:98:1C:91:4E:7B:D8:51:2A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EC0A73D72FB58D72533839880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531e496-8f60-365a-9f71-97f429bea4f3.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 40717 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:3d:72:fb:58:d7:25:33:83:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=7a0146d6-56ca-42f0-a76e-010589f6a0da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:99:a0:ee:9f:04:44:55:eb:63:a7:4c:3a:46: b0:f4:62:34:08:1f:dd:22:c1:8d:6a:24:3a:44:8e: 8b:47:1a:c7:d5:d9:2d:0c:3d:81:d9:4a:7e:2a:5d: cc:c9:6d:8d:dc:0e:a6:e7:49:97:e8:32:46:8d:10: d6:39:e9:66:ef:14:dc:03:42:c1:ae:1a:37:d8:b2: 55:93:bb:ac:1f:7d:89:36:93:c3:41:cf:88:48:d7: 6b:27:bb:19:4b:9f:5b:c7:73:b2:6d:c8:54:57:bf: f4:dd:91:6a:32:19:73:b3:9c:cd:5f:a3:09:6b:e1: b6:45:5c:29:eb:9e:17:71:8d:3b:7c:02:cf:e5:95: da:37:f6:25:be:b1:42:1e:6d:55:89:f3:97:66:19: 8f:e1:bf:0a:54:4f:aa:4c:e3:fb:32:1e:b8:65:e5: af:a3:2f:fe:8f:5e:89:18:2c:35:f5:f5:06:88:41: 00:42:dc:4c:c9:21:c2:01:d7:5c:a5:48:0b:8e:49: e5:1c:ef:27:6f:f2:b0:11:13:6c:54:96:9f:b5:4f: bd:12:d9:96:62:b7:5f:2d:be:6c:33:b8:5a:b2:96: 28:c7:0d:62:ae:d3:24:f2:a1:ba:35:37:21:51:00: 2e:12:1f:92:16:a3:5a:de:22:ae:ee:8a:1c:93:50: 58:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:83:95:0F:B1:A9:64:E9:BF:78:AA:4E:98:1C:91:4E:7B:D8:51:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531e496-8f60-365a-9f71-97f429bea4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ed:cf:01:b0:4c:65:41:4d:d1:15:78:b2:72:0e:77:29:14: 1f:c1:d7:b6:c9:9d:46:b8:3d:ab:4e:6c:8b:f6:ac:d5:d9:57: 30:ad:01:3c:d0:f5:5b:92:d8:4c:eb:33:d6:3a:fe:69:d5:05: ca:b9:12:a5:09:eb:80:0c:d0:71:53:7a:91:5f:87:44:5e:86: f0:4a:3b:d5:24:ab:1a:92:00:62:04:cd:25:f4:1e:6a:d4:9b: 6d:8f:64:d6:21:de:29:c9:7e:b3:1f:70:1b:b0:13:48:21:57: 9d:62:a3:40:15:78:c3:2d:a2:c2:ac:cc:ff:b0:4c:47:1f:14: 7a:a5:28:46:6d:bb:0a:ae:9b:b5:49:fd:ba:cb:b5:37:9c:3a: 68:5d:a9:f2:db:b8:64:4b:37:42:da:7e:8a:4b:ab:34:4e:a8: f4:39:cd:86:a1:20:64:8f:9a:e3:a4:74:50:22:62:36:6d:a9: b1:e0:23:d9:71:a9:48:37:a0:42:3a:fa:20:99:8f:e6:51:a2: 8e:c9:6e:45:e9:80:1c:eb:0a:75:1a:51:89:bd:e7:89:14:62: 46:17:9f:ff:82:2e:e8:e8:8d:e0:92:a3:f7:5a:37:bf:44:b2: 6f:18:17:5e:79:71:33:e2:9a:e9:d2:c3:99:c7:23:26:33:ed: 90:5a:f9:18 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7Apz1y+1jXJTODmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk N2EwMTQ2ZDYtNTZjYS00MmYwLWE3NmUtMDEwNTg5ZjZhMGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJmg7p8ERFXrY6dMOkaw9GI0CB/dIsGNaiQ6 RI6LRxrH1dktDD2B2Up+Kl3MyW2N3A6m50mX6DJGjRDWOelm7xTcA0LBrho32LJV k7usH32JNpPDQc+ISNdrJ7sZS59bx3OybchUV7/03ZFqMhlzs5zNX6MJa+G2RVwp 654XcY07fALP5ZXaN/YlvrFCHm1VifOXZhmP4b8KVE+qTOP7Mh64ZeWvoy/+j16J GCw19fUGiEEAQtxMySHCAddcpUgLjknlHO8nb/KwERNsVJaftU+9EtmWYrdfLb5s M7haspYoxw1irtMk8qG6NTchUQAuEh+SFqNa3iKu7oock1BY5QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMqDlQ+xqWTpv3iqTpgckU572FEqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTUzMWU0OTYtOGY2MC0z NjVhLTlmNzEtOTdmNDI5YmVhNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAR7c8BsExlQU3RFXiycg53KRQfwde2yZ1GuD2rTmyL9qzV2VcwrQE8 0PVbkthM6zPWOv5p1QXKuRKlCeuADNBxU3qRX4dEXobwSjvVJKsakgBiBM0l9B5q 1Jttj2TWId4pyX6zH3AbsBNIIVedYqNAFXjDLaLCrMz/sExHHxR6pShGbbsKrpu1 Sf26y7U3nDpoXany27hkSzdC2n6KS6s0Tqj0Oc2GoSBkj5rjpHRQImI2bamx4CPZ calIN6BCOvogmY/mUaKOyW5F6YAc6wp1GlGJveeJFGJGF5//gi7o6I3gkqP3Wje/ RLJvGBdeeXEz4prp0sOZxyMmM+2QWvkY -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:03 2026 by rpki-client