$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531e496-8f60-365a-9f71-97f429bea4f3.roa File: a531e496-8f60-365a-9f71-97f429bea4f3.roa (raw, json) Hash identifier: g9CXxVoKG4WhPsFur0VkHWB2A2g2MtyVuhDpt54uJss= Subject key identifier: 42:A6:3E:2F:B0:04:14:D0:FF:7A:9F:83:5B:48:4A:FA:8C:6D:51:51 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F16155773F7AF8CC7400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531e496-8f60-365a-9f71-97f429bea4f3.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 40717 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f1:61:55:77:3f:7a:f8:cc:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=8fcfc56f-fce0-455a-81f5-457fc5045a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ef:ac:13:6c:ad:f9:6d:ee:40:c9:5c:77:a6: 36:53:d3:12:f1:53:ff:b6:d7:ab:97:58:7b:96:1d: b4:3f:e7:af:48:f1:92:0b:09:48:a4:7f:22:cb:19: fa:48:cb:e0:ee:97:ac:3b:48:85:5b:24:05:76:f3: 33:5f:e3:84:57:1d:79:5c:87:8e:04:fb:ce:d8:10: bd:78:b2:64:db:5a:6b:cd:b5:a3:3c:7f:c8:4e:ff: 0c:0c:ab:63:9f:50:95:f7:ff:1c:06:50:6c:a7:28: ed:f4:7c:9f:ac:53:5c:45:ae:a5:91:db:5a:2f:ac: 2a:2c:76:4c:b0:17:23:f1:51:2c:e7:b1:c9:eb:87: 12:dd:74:0a:2a:00:e9:0c:f7:74:25:7d:d4:36:20: 98:a9:60:02:73:a4:27:62:33:f2:65:4d:a1:0d:2c: 71:9d:b8:9e:52:21:28:36:ac:74:94:1a:b0:33:43: 55:10:01:71:db:59:57:8a:f4:af:e9:7d:00:b4:f7: 62:02:a4:a5:48:92:e9:4b:3f:af:cf:24:cd:b6:f0: 9b:7f:db:3c:27:6f:cc:c1:de:76:af:6f:dd:16:56: ee:c7:00:e2:4f:14:66:7d:1f:4f:e8:61:08:7e:fa: 5e:6d:d1:4c:7c:7e:19:82:cc:2a:c0:e8:5b:15:9e: 82:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A6:3E:2F:B0:04:14:D0:FF:7A:9F:83:5B:48:4A:FA:8C:6D:51:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531e496-8f60-365a-9f71-97f429bea4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:35:7c:b5:0e:30:3a:ec:50:84:fd:b0:9b:59:ad:75:ed:3e: e7:ab:66:ee:c6:8e:38:c6:ae:5a:01:d8:8b:bd:6f:d4:96:b6: 4b:a8:9f:c1:dd:b0:2e:3c:88:79:be:1a:5f:3f:cf:a0:38:ed: 98:32:24:5c:da:b4:f7:f4:56:1f:7d:be:3c:4b:74:db:d6:91: 23:4c:5e:c7:7b:60:c5:b6:0a:8f:54:07:55:0b:53:e4:cf:4b: 5d:7e:dd:77:83:26:39:a4:18:7b:fa:06:5a:0c:b4:f1:a5:7d: ba:15:d4:7d:c8:15:77:e7:1e:53:73:5d:42:3a:d9:fb:4a:1b: b1:34:8a:7a:04:0c:fc:f7:80:bc:62:5a:32:4e:4f:da:15:cd: f4:d9:69:78:a6:76:84:64:52:1d:16:6e:16:5e:c0:9f:6c:ee: 64:af:db:1a:cc:87:f1:0e:98:7c:56:f7:0f:3d:05:d8:41:6f: d9:46:f7:ba:e1:4f:93:28:c0:95:26:30:50:08:7d:de:61:7c: 7f:9e:cc:9f:01:4f:62:11:34:ab:e3:bf:aa:6a:45:c3:84:52: ce:3a:e6:18:d2:cf:65:45:c8:ed:ba:55:f5:63:2f:81:8a:b5: 48:ae:72:32:fd:dd:06:33:7b:12:fc:c3:8c:5f:69:a0:57:e2: 5a:04:e0:79 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvFhVXc/evjMdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OGZjZmM1NmYtZmNlMC00NTVhLTgxZjUtNDU3ZmM1MDQ1YTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu+sE2yt+W3uQMlcd6Y2U9MS8VP/tterl1h7 lh20P+evSPGSCwlIpH8iyxn6SMvg7pesO0iFWyQFdvMzX+OEVx15XIeOBPvO2BC9 eLJk21przbWjPH/ITv8MDKtjn1CV9/8cBlBspyjt9HyfrFNcRa6lkdtaL6wqLHZM sBcj8VEs57HJ64cS3XQKKgDpDPd0JX3UNiCYqWACc6QnYjPyZU2hDSxxnbieUiEo Nqx0lBqwM0NVEAFx21lXivSv6X0AtPdiAqSlSJLpSz+vzyTNtvCbf9s8J2/Mwd52 r2/dFlbuxwDiTxRmfR9P6GEIfvpebdFMfH4ZgswqwOhbFZ6CcQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEKmPi+wBBTQ/3qfg1tISvqMbVFRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTUzMWU0OTYtOGY2MC0z NjVhLTlmNzEtOTdmNDI5YmVhNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBbNXy1DjA67FCE/bCbWa117T7nq2buxo44xq5aAdiLvW/UlrZLqJ/B 3bAuPIh5vhpfP8+gOO2YMiRc2rT39FYffb48S3Tb1pEjTF7He2DFtgqPVAdVC1Pk z0tdft13gyY5pBh7+gZaDLTxpX26FdR9yBV35x5Tc11COtn7ShuxNIp6BAz894C8 YloyTk/aFc302Wl4pnaEZFIdFm4WXsCfbO5kr9sazIfxDph8VvcPPQXYQW/ZRve6 4U+TKMCVJjBQCH3eYXx/nsyfAU9iETSr47+qakXDhFLOOuYY0s9lRcjtulX1Yy+B irVIrnIy/d0GM3sS/MOMX2mgV+JaBOB5 -----END CERTIFICATE-----Generated at Tue Oct 6 18:15:25 2026 by rpki-client