$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa796d64-0ef9-3391-be74-a11a52a4376f.roa File: aa796d64-0ef9-3391-be74-a11a52a4376f.roa (raw, json) Hash identifier: 2rPgxToelM7H5vjlTw2wXAIzC1SCj+bgNvmZ/2oZPvU= Subject key identifier: 16:14:0B:6B:E3:80:3B:36:15:63:9B:F8:BE:01:27:6E:AD:D9:C3:52 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F1182DEECFDAC75F5400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa796d64-0ef9-3391-be74-a11a52a4376f.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396550 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f1:18:2d:ee:cf:da:c7:5f:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=e8a8eab7-bb81-4c73-bf4a-2d5cbae0132c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:44:03:ac:c1:06:2f:d2:6f:e0:c7:cd:b4:8f: 03:b4:1b:ab:6d:05:cc:8d:a7:d8:e4:07:1f:59:fd: eb:ab:f1:74:e2:08:90:71:18:7b:28:77:b9:f4:78: 01:cf:42:87:06:d0:5b:8d:c7:a5:fe:38:71:e2:c9: f5:16:1c:67:aa:c0:60:0d:7d:cf:09:d6:b1:4f:9a: 82:49:38:fd:2c:41:5a:45:de:88:89:ab:f1:89:96: 26:8e:0c:15:04:7a:10:64:7d:37:cd:97:81:ee:bb: 12:4f:03:36:f9:9d:7b:fe:fc:63:96:e5:1e:71:ca: 6e:e3:56:fa:c2:28:44:90:f4:27:f7:86:59:38:ab: 16:e7:f8:ab:fd:d9:71:98:32:c6:1d:03:fd:fa:96: 59:7f:49:26:64:e8:e4:3f:4f:e4:43:ed:73:c2:6e: c0:83:dc:0f:c2:68:d2:8e:74:f9:17:32:4a:fd:27: 32:21:de:34:2f:cc:6d:0f:bf:e8:1f:52:e4:4c:ab: 22:07:32:c5:a6:10:ac:7b:fd:13:13:27:a8:e7:bc: a5:db:de:06:51:c5:ea:d0:23:f9:30:ba:4e:d4:7c: 44:c5:47:53:26:32:23:e3:e9:ca:83:49:5d:f0:1d: c2:f7:3e:fc:82:45:c0:32:65:c3:1a:36:7e:a4:64: 4e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:14:0B:6B:E3:80:3B:36:15:63:9B:F8:BE:01:27:6E:AD:D9:C3:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa796d64-0ef9-3391-be74-a11a52a4376f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a6:65:4d:1f:5c:f8:60:dd:f6:06:4c:a2:ac:0e:02:33:b4: 31:e1:7d:a9:06:bb:bf:2c:4c:8b:3c:1f:a2:fb:78:9e:5d:04: de:6b:e0:8c:bc:47:d9:d3:ad:53:1a:35:a4:b5:08:e8:a5:a2: 47:dd:b8:18:ab:ae:9e:8a:96:4b:5d:ea:b4:71:17:a4:e7:dd: 10:76:4a:dc:f0:55:0c:06:09:59:31:0c:f6:95:ed:9f:e5:4b: a4:ce:98:0e:16:ca:ef:bb:17:ce:67:9a:8f:68:8d:3d:4c:1c: 2f:66:cc:ed:f1:60:d0:c9:66:2d:a3:9b:f0:4c:b2:80:13:39: 40:e0:c5:a7:01:af:f1:66:97:e4:d4:ed:1a:e6:43:9c:82:6e: 31:ee:e0:18:a2:65:57:1c:7d:74:8d:88:f2:5d:68:46:59:ef: fc:9d:4e:17:a9:70:7d:59:34:d7:0c:82:d9:00:62:af:bb:2f: 43:79:18:77:ed:27:8d:8a:66:c0:01:70:3e:e2:14:94:93:c6: 99:04:cb:66:e8:fe:56:f9:b0:d3:9d:d0:e7:06:c8:0d:b8:aa: b7:52:21:18:be:e9:92:7d:cf:73:70:be:d6:7c:ab:5f:5b:f0: d9:c6:11:15:d6:8f:d4:42:1e:80:89:bc:ec:1a:4c:c1:2b:c2: d2:f0:0b:0d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvEYLe7P2sdfVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZThhOGVhYjctYmI4MS00YzczLWJmNGEtMmQ1Y2JhZTAxMzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00QDrMEGL9Jv4MfNtI8DtBurbQXMjafY5Acf Wf3rq/F04giQcRh7KHe59HgBz0KHBtBbjcel/jhx4sn1FhxnqsBgDX3PCdaxT5qC STj9LEFaRd6IiavxiZYmjgwVBHoQZH03zZeB7rsSTwM2+Z17/vxjluUeccpu41b6 wihEkPQn94ZZOKsW5/ir/dlxmDLGHQP9+pZZf0kmZOjkP0/kQ+1zwm7Ag9wPwmjS jnT5FzJK/ScyId40L8xtD7/oH1LkTKsiBzLFphCse/0TEyeo57yl294GUcXq0CP5 MLpO1HxExUdTJjIj4+nKg0ld8B3C9z78gkXAMmXDGjZ+pGROzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBYUC2vjgDs2FWOb+L4BJ26t2cNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWE3OTZkNjQtMGVmOS0z MzkxLWJlNzQtYTExYTUyYTQzNzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBopmVNH1z4YN32BkyirA4CM7Qx4X2pBru/LEyLPB+i+3ieXQTea+CM vEfZ061TGjWktQjopaJH3bgYq66eipZLXeq0cRek590Qdkrc8FUMBglZMQz2le2f 5UukzpgOFsrvuxfOZ5qPaI09TBwvZszt8WDQyWYto5vwTLKAEzlA4MWnAa/xZpfk 1O0a5kOcgm4x7uAYomVXHH10jYjyXWhGWe/8nU4XqXB9WTTXDILZAGKvuy9DeRh3 7SeNimbAAXA+4hSUk8aZBMtm6P5W+bDTndDnBsgNuKq3UiEYvumSfc9zcL7WfKtf W/DZxhEV1o/UQh6AibzsGkzBK8LS8AsN -----END CERTIFICATE-----Generated at Wed Oct 7 02:22:05 2026 by rpki-client