$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9fbb6c1-a6be-3366-abe7-c752cb2ec528.roa File: a9fbb6c1-a6be-3366-abe7-c752cb2ec528.roa (raw, json) Hash identifier: mqAEZIdbZ1WestwrkYX7plv+6vcZrOzQ/0dWyStO2Dg= Subject key identifier: 11:AC:8A:6F:CB:CE:B7:0A:37:C3:62:88:17:2D:78:82:C8:17:DC:CE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EC0A741B6C28580E8EF9BF980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9fbb6c1-a6be-3366-abe7-c752cb2ec528.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 396590 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:41:b6:c2:85:80:e8:ef:9b:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=5cd6c1d1-1134-4f41-99ea-2271afea1e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:66:68:6b:37:eb:bd:8c:ad:69:ec:00:69:16: 56:13:47:65:c9:e6:ce:86:f7:4d:f8:04:f6:65:00: d3:cc:ec:e9:be:36:03:a4:7b:46:9b:82:69:f2:b5: 78:24:6c:45:14:5a:e7:69:77:93:c6:b0:17:1d:af: 6c:0c:b8:e5:09:aa:8a:c9:c9:10:1b:b9:d7:1d:d6: 6b:27:2c:c6:62:2d:28:f6:f2:82:3a:c2:3a:48:84: db:b0:e5:36:86:58:ab:ee:61:76:07:84:b0:03:7a: c0:d6:aa:b1:b4:8a:ac:1f:e3:b8:05:c2:53:02:3b: 5c:d1:21:9c:bf:7d:54:6f:9a:7c:e5:b3:4b:1c:c9: 88:8f:b2:5f:8c:f7:fb:fe:32:f4:07:28:6f:43:fd: c7:3f:ba:2e:32:05:f9:4d:1a:e1:54:51:fe:78:d6: e5:21:d4:c5:9c:69:2c:dd:0c:dd:83:9e:33:25:0e: 62:71:d2:82:86:e4:13:5e:26:a4:52:d7:73:bc:42: e7:ff:dc:e4:0f:a2:3e:ad:1d:3e:aa:5d:68:d3:ab: bb:9b:3f:df:5a:d4:df:c5:ba:5b:42:8e:7c:98:a9: 5d:a2:f8:9d:48:3b:ed:6f:a5:16:8d:5f:8a:b4:0e: bb:2c:38:6f:25:5a:c5:bc:82:ed:87:60:99:69:64: 4e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AC:8A:6F:CB:CE:B7:0A:37:C3:62:88:17:2D:78:82:C8:17:DC:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9fbb6c1-a6be-3366-abe7-c752cb2ec528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:bd:dd:23:b8:6b:a2:c1:f7:8e:43:e0:0b:8f:1e:79:29:72: 0f:c2:8e:9d:4e:da:bc:f2:12:a2:82:af:a1:98:72:ba:85:38: 67:25:10:4d:47:9a:34:82:14:c2:3c:d3:8a:1c:92:0f:d4:81: 90:da:da:f8:cb:a8:6b:8f:7f:da:d0:46:cb:98:e7:5c:f4:d5: a5:1d:ce:e7:33:d3:3f:16:19:7b:e2:ed:d6:8a:1e:91:4d:e5: 6f:ac:51:15:44:3d:f8:6f:8f:d6:04:28:59:df:ae:8a:74:5b: ef:9a:08:86:a9:45:ce:42:1b:b7:a8:ae:03:6e:a4:7d:ed:4a: b6:75:dd:34:df:a0:f0:cb:4e:d5:80:9f:18:a1:4f:87:12:ce: 26:e4:1c:5f:c5:9e:b0:42:fa:4a:31:21:ef:53:3b:23:ad:9c: 9b:fd:df:b3:d9:02:34:be:9a:31:42:09:8a:94:52:5c:cf:db: 17:83:ce:25:0f:0c:b9:ee:4c:26:f6:05:26:e2:17:c7:28:d7: 70:29:2f:d7:44:64:ad:33:34:9d:79:9f:98:91:c8:44:ba:d0: 49:41:e0:97:2c:c3:de:2a:f5:7d:79:29:d5:e5:ae:34:53:1b: 49:24:d6:17:ae:ba:7c:82:96:9b:0b:07:4a:16:17:80:bb:11: b0:15:bc:74 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7Ap0G2woWA6O+b+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk NWNkNmMxZDEtMTEzNC00ZjQxLTk5ZWEtMjI3MWFmZWExZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGZoazfrvYytaewAaRZWE0dlyebOhvdN+AT2 ZQDTzOzpvjYDpHtGm4Jp8rV4JGxFFFrnaXeTxrAXHa9sDLjlCaqKyckQG7nXHdZr JyzGYi0o9vKCOsI6SITbsOU2hlir7mF2B4SwA3rA1qqxtIqsH+O4BcJTAjtc0SGc v31Ub5p85bNLHMmIj7JfjPf7/jL0ByhvQ/3HP7ouMgX5TRrhVFH+eNblIdTFnGks 3Qzdg54zJQ5icdKChuQTXiakUtdzvELn/9zkD6I+rR0+ql1o06u7mz/fWtTfxbpb Qo58mKldovidSDvtb6UWjV+KtA67LDhvJVrFvILth2CZaWROBwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBGsim/LzrcKN8NiiBcteILIF9zOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTlmYmI2YzEtYTZiZS0z MzY2LWFiZTctYzc1MmNiMmVjNTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAFvd0juGuiwfeOQ+ALjx55KXIPwo6dTtq88hKigq+hmHK6hThnJRBN R5o0ghTCPNOKHJIP1IGQ2tr4y6hrj3/a0EbLmOdc9NWlHc7nM9M/Fhl74u3Wih6R TeVvrFEVRD34b4/WBChZ366KdFvvmgiGqUXOQhu3qK4DbqR97Uq2dd0036Dwy07V gJ8YoU+HEs4m5BxfxZ6wQvpKMSHvUzsjrZyb/d+z2QI0vpoxQgmKlFJcz9sXg84l Dwy57kwm9gUm4hfHKNdwKS/XRGStMzSdeZ+YkchEutBJQeCXLMPeKvV9eSnV5a40 UxtJJNYXrrp8gpabCwdKFheAuxGwFbx0 -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:42 2026 by rpki-client