$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a82095ef-4e8d-3fc4-8ea7-95790abb5a93.roa File: a82095ef-4e8d-3fc4-8ea7-95790abb5a93.roa (raw, json) Hash identifier: N+cRSqaTnnOLxVFZSsGN66gasD29rnA4fXXpCctJSio= Subject key identifier: 28:57:AB:76:6E:34:85:3F:9B:CB:BE:DB:7F:FC:CE:3C:86:61:9D:F0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F13E17F36183E22D38E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a82095ef-4e8d-3fc4-8ea7-95790abb5a93.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 36619 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f1:3e:17:f3:61:83:e2:2d:38:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=f1976cb4-5d1a-4286-bdc4-1d7f18a4dbbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4e:97:eb:07:6d:eb:0e:86:26:ef:67:af:53: 20:16:75:20:2b:77:75:f3:53:5f:fc:90:5d:20:4e: 8a:22:63:d6:35:fe:73:dc:6d:8a:c1:57:38:78:36: 05:6d:ad:bb:8e:1a:f5:85:87:c6:f2:c3:4f:80:5c: 1d:7d:e2:a6:c6:7c:98:50:80:d3:a2:b1:4a:f0:98: 9b:a7:e5:43:ae:14:9e:ad:6a:d7:f1:af:3a:1a:23: 6f:17:3c:12:e6:cd:d4:d3:97:5f:14:44:f5:e8:39: 25:a8:b7:34:72:70:ca:59:6d:85:26:7c:bc:97:3e: 2a:2f:65:49:26:46:1f:49:b3:09:57:cf:9b:ad:a7: d1:e2:58:d8:52:ac:37:0d:33:20:78:10:1e:45:12: fc:59:0e:0a:69:a2:d5:ac:45:94:34:e8:ca:e9:ab: 1b:9c:57:ca:3d:66:28:2e:31:46:cc:e2:7b:c9:92: a6:05:aa:61:1d:7f:77:48:cc:0b:94:73:18:03:98: d6:b1:48:ca:cd:f0:28:bf:ca:48:b8:4c:30:53:13: ec:fe:36:0b:e1:58:89:6f:07:90:37:d1:f0:07:6d: 79:07:51:6d:a8:e2:11:d0:f3:41:7a:55:d4:cc:b5: fd:9b:8d:48:8e:72:27:17:84:a0:01:09:14:cf:f2: b7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:57:AB:76:6E:34:85:3F:9B:CB:BE:DB:7F:FC:CE:3C:86:61:9D:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a82095ef-4e8d-3fc4-8ea7-95790abb5a93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:b5:a0:71:b4:aa:21:16:98:95:7a:67:fc:87:4f:33:ab:a6: 46:9a:d3:a6:eb:33:96:c1:95:5d:64:f1:f0:78:6f:6d:92:a8: f9:8b:2f:11:49:18:a1:3e:e8:9f:4b:f2:23:d2:b4:d5:ab:ed: 03:15:04:00:3f:04:8c:f6:58:10:7a:16:af:d3:93:f4:2f:de: 6c:92:25:b3:ac:cd:e2:6b:98:6f:a4:c1:c8:42:76:28:67:ea: c4:7b:ca:79:20:42:a9:c2:3b:45:c3:fe:d7:15:70:b3:c1:14: 3c:07:27:7f:41:d9:28:63:fe:a9:c0:e5:7f:d1:1b:3e:47:f2: 43:e5:d3:1e:4b:2f:94:33:7d:71:bb:57:24:ca:cf:ef:11:13: b1:d6:34:96:d0:00:3d:fb:7e:cb:93:d9:12:01:bf:1a:ba:31: 74:16:4c:2a:52:d7:23:7c:30:dc:82:8b:11:b9:c2:50:90:23: cb:40:e8:57:2f:d6:4d:58:ad:f0:2e:6d:45:2e:bf:a4:4f:9e: 59:6d:a3:0e:d9:a6:65:62:27:30:df:17:4d:b4:67:36:96:7c: 9d:d0:de:4a:25:38:49:11:0e:d4:32:47:51:06:3b:b0:83:ac: b6:8e:95:62:d0:f7:6b:5e:79:c4:dd:51:e7:d3:b2:21:d2:fb: 21:56:c4:5e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvE+F/Nhg+ItOOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZjE5NzZjYjQtNWQxYS00Mjg2LWJkYzQtMWQ3ZjE4YTRkYmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok6X6wdt6w6GJu9nr1MgFnUgK3d181Nf/JBd IE6KImPWNf5z3G2KwVc4eDYFba27jhr1hYfG8sNPgFwdfeKmxnyYUIDTorFK8Jib p+VDrhSerWrX8a86GiNvFzwS5s3U05dfFET16DklqLc0cnDKWW2FJny8lz4qL2VJ JkYfSbMJV8+brafR4ljYUqw3DTMgeBAeRRL8WQ4KaaLVrEWUNOjK6asbnFfKPWYo LjFGzOJ7yZKmBaphHX93SMwLlHMYA5jWsUjKzfAov8pIuEwwUxPs/jYL4ViJbweQ N9HwB215B1FtqOIR0PNBelXUzLX9m41IjnInF4SgAQkUz/K34wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFChXq3ZuNIU/m8u+23/8zjyGYZ3wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTgyMDk1ZWYtNGU4ZC0z ZmM0LThlYTctOTU3OTBhYmI1YTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBFtaBxtKohFpiVemf8h08zq6ZGmtOm6zOWwZVdZPHweG9tkqj5iy8R SRihPuifS/Ij0rTVq+0DFQQAPwSM9lgQehav05P0L95skiWzrM3ia5hvpMHIQnYo Z+rEe8p5IEKpwjtFw/7XFXCzwRQ8Byd/QdkoY/6pwOV/0Rs+R/JD5dMeSy+UM31x u1ckys/vEROx1jSW0AA9+37Lk9kSAb8aujF0FkwqUtcjfDDcgosRucJQkCPLQOhX L9ZNWK3wLm1FLr+kT55ZbaMO2aZlYicw3xdNtGc2lnyd0N5KJThJEQ7UMkdRBjuw g6y2jpVi0PdrXnnE3VHn07Ih0vshVsRe -----END CERTIFICATE-----Generated at Wed Oct 7 07:58:33 2026 by rpki-client