$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa6de5e-1ece-32fe-ba13-6bee32a73eac.roa File: aaa6de5e-1ece-32fe-ba13-6bee32a73eac.roa (raw, json) Hash identifier: ncvatXwwYgl0Yvz2U1D8XXUFhV0YbTpAsHL1s0Lg2XM= Subject key identifier: 58:2B:99:B3:CD:78:F0:4B:E7:AD:E9:BE:33:67:49:92:EE:64:E1:02 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F03D2E22BB9D0761F800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa6de5e-1ece-32fe-ba13-6bee32a73eac.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396585 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f0:3d:2e:22:bb:9d:07:61:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=187fee6d-0b49-4792-9dac-8c18cb262a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8b:a5:db:79:7d:4a:4b:c4:39:08:fa:d3:b4: d7:7d:71:31:b9:c3:1d:de:2b:4e:5e:46:37:5a:10: 94:f9:db:03:df:1d:7d:3d:9e:c7:59:52:61:25:6d: 8b:52:97:c0:a7:0a:1c:62:d5:73:2f:1c:20:49:6c: 08:f4:c7:f9:ef:4b:d8:c6:ae:4c:3f:c2:8d:3c:9d: 22:59:cd:2f:4a:81:25:29:e7:7a:fa:59:22:88:57: c6:ea:83:fe:77:b6:ef:52:96:28:cf:12:1d:22:ea: e0:94:ba:e5:ca:9e:d3:2f:6a:4f:5d:63:96:63:ab: 16:5c:47:83:bb:d1:24:33:ba:ee:ba:05:b5:2a:c5: d7:56:cf:b3:9a:06:74:5e:7b:2e:b5:2a:c2:28:49: 2f:60:6f:14:a0:42:df:c4:ea:ee:e5:7f:40:90:4d: 8c:4c:d3:94:e1:83:26:34:a1:db:5f:25:1f:7b:04: 2c:a1:3d:f4:4d:5f:95:c0:5f:86:c6:6b:c3:04:a3: b3:89:fd:fe:d9:a6:d6:67:79:86:d1:5e:3a:97:21: 70:48:37:b2:20:86:70:1a:5f:da:53:c8:44:c9:43: 7b:f1:89:c5:7e:27:8a:76:99:a9:48:00:77:a6:32: 18:ee:e6:49:12:6a:68:f6:34:2a:75:ee:81:47:e9: fd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2B:99:B3:CD:78:F0:4B:E7:AD:E9:BE:33:67:49:92:EE:64:E1:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa6de5e-1ece-32fe-ba13-6bee32a73eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:41:f6:25:75:59:36:44:72:fe:08:f4:69:de:89:72:5d:4c: fa:eb:7e:90:25:04:57:85:b1:d7:9a:1e:03:87:81:fc:39:0e: 33:5e:59:02:2e:80:db:34:a1:0e:6d:29:e3:6c:a1:a1:00:f1: 77:f6:e1:21:be:fd:16:a3:e8:f4:9a:fc:29:84:8e:dd:c9:1d: 9f:a2:61:7f:6a:b0:cf:67:76:cc:3d:02:9d:bd:e3:db:53:29: 64:61:20:9c:86:31:35:59:6c:4e:8b:a1:d6:36:71:13:43:ab: 3a:da:9a:8a:8d:6b:60:e2:1b:59:21:31:35:a3:25:13:29:d8: 7b:14:93:78:60:5c:c3:7e:d7:a0:2d:91:fc:cc:1c:bc:64:8b: cf:c3:5b:68:e5:d2:b5:cd:6e:24:e5:fd:d9:d6:7c:da:03:4a: 91:60:66:60:12:60:b8:5a:28:5e:7f:b9:de:1d:c1:f1:3b:18: bf:5f:47:0c:27:44:b7:2f:ad:11:a3:70:c1:24:d3:a0:62:9e: dd:e5:7d:11:85:5a:05:0e:d2:d3:12:3d:34:60:6d:c8:86:38: 60:70:ec:9d:52:c7:e6:8b:3c:08:50:f1:0d:af:be:22:bb:f3: aa:bf:09:14:0b:ac:e8:a3:64:d1:5d:0d:98:7a:64:1a:64:01: 53:64:88:33 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvA9LiK7nQdh+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MTg3ZmVlNmQtMGI0OS00NzkyLTlkYWMtOGMxOGNiMjYyYTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYul23l9SkvEOQj607TXfXExucMd3itOXkY3 WhCU+dsD3x19PZ7HWVJhJW2LUpfApwocYtVzLxwgSWwI9Mf570vYxq5MP8KNPJ0i Wc0vSoElKed6+lkiiFfG6oP+d7bvUpYozxIdIurglLrlyp7TL2pPXWOWY6sWXEeD u9EkM7ruugW1KsXXVs+zmgZ0XnsutSrCKEkvYG8UoELfxOru5X9AkE2MTNOU4YMm NKHbXyUfewQsoT30TV+VwF+GxmvDBKOzif3+2abWZ3mG0V46lyFwSDeyIIZwGl/a U8hEyUN78YnFfieKdpmpSAB3pjIY7uZJEmpo9jQqde6BR+n9wwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFgrmbPNePBL563pvjNnSZLuZOECMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWFhNmRlNWUtMWVjZS0z MmZlLWJhMTMtNmJlZTMyYTczZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCDQfYldVk2RHL+CPRp3olyXUz6636QJQRXhbHXmh4Dh4H8OQ4zXlkC LoDbNKEObSnjbKGhAPF39uEhvv0Wo+j0mvwphI7dyR2fomF/arDPZ3bMPQKdvePb UylkYSCchjE1WWxOi6HWNnETQ6s62pqKjWtg4htZITE1oyUTKdh7FJN4YFzDfteg LZH8zBy8ZIvPw1to5dK1zW4k5f3Z1nzaA0qRYGZgEmC4Wihef7neHcHxOxi/X0cM J0S3L60Ro3DBJNOgYp7d5X0RhVoFDtLTEj00YG3IhjhgcOydUsfmizwIUPENr74i u/OqvwkUC6zoo2TRXQ2YemQaZAFTZIgz -----END CERTIFICATE-----Generated at Wed Oct 7 07:59:28 2026 by rpki-client