$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac8b9d2f-71c6-3041-b802-43e34e7a8e49.roa File: ac8b9d2f-71c6-3041-b802-43e34e7a8e49.roa (raw, json) Hash identifier: ujP2F267lwQEWysktnfHDVoUemrsQduiGMtKxsY6ov0= Subject key identifier: 77:D3:BB:7E:58:48:4C:E2:A6:52:77:67:74:10:46:EF:96:CD:C0:FB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA78877795DC76F018391E480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac8b9d2f-71c6-3041-b802-43e34e7a8e49.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397209 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:77:79:5d:c7:6f:01:83:91:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9fb0c3ac-09f8-4a31-894d-66996c0591b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6b:9c:ec:5f:54:f5:02:6d:12:df:87:18:50: 56:a1:48:5c:8b:dc:d0:68:61:63:8a:ff:e7:33:97: 56:13:da:7a:e2:77:57:16:2b:3f:ae:ad:f2:3d:26: 9a:b5:55:e7:a9:a9:9d:95:59:39:94:1d:c9:65:d8: a3:6c:e0:67:29:7c:c6:7f:bd:5f:25:e0:f4:24:68: ce:75:3a:bc:d7:9d:95:fb:b2:46:df:4e:72:8c:73: bd:88:78:e2:5c:ad:2b:17:5b:48:e9:24:af:84:1e: 59:2a:5e:66:a3:71:fe:bf:b6:e2:85:92:53:ef:c4: e0:e0:27:75:c6:45:ef:46:ee:e3:c7:53:9b:64:d8: 15:64:cc:23:60:46:b7:76:f1:ff:ee:f0:5e:0f:81: 97:5b:ba:8a:06:53:55:a3:3b:30:32:f8:97:c7:f9: 8e:08:32:38:76:4a:77:c7:cf:30:e6:cf:70:f7:28: b7:03:1a:f4:fc:fb:6e:aa:84:07:c7:26:5a:21:68: fa:db:12:52:44:cb:a5:7d:0d:88:0e:7c:bf:55:eb: 42:d0:ff:e4:b1:3d:ab:bf:ad:8f:f2:e6:27:9a:ac: 53:d9:95:cf:ed:f9:a5:6d:f4:d7:80:56:ca:6d:9a: c4:dd:02:47:cb:3f:64:2a:d4:d5:f5:78:c8:c5:f4: 38:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D3:BB:7E:58:48:4C:E2:A6:52:77:67:74:10:46:EF:96:CD:C0:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ac8b9d2f-71c6-3041-b802-43e34e7a8e49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:56:fe:78:46:15:88:bc:74:d6:05:25:0f:67:aa:be:80:b8: e9:24:c7:3d:05:1a:df:31:c7:e0:be:fe:63:bd:b6:17:a4:dc: f8:77:1c:ce:96:d3:9c:d1:f2:c2:ec:4d:9d:8b:78:03:09:53: 29:8f:9d:33:ed:f3:9c:6b:dd:e5:bb:bd:85:bb:df:76:f3:d4: 30:07:d9:d2:2d:8b:84:3f:13:d1:c3:8f:92:99:e6:a0:83:e2: 3c:90:ec:8b:a1:2f:53:52:85:c3:a4:5f:e9:a5:92:de:39:82: 9a:84:bc:bd:0c:78:cf:5b:46:a8:aa:29:43:11:f0:76:ee:2e: 92:7d:a1:61:df:14:60:d0:b0:2d:7f:6f:35:39:d0:6e:0a:31: e1:28:8a:5f:17:fd:84:71:7f:0e:fb:e2:28:38:09:50:3b:ee: d7:c0:a8:05:f5:3e:21:b6:e9:7e:fe:f5:4c:9f:18:73:e0:43: 25:be:cf:83:2e:a4:0f:96:bb:d0:f9:55:2a:60:b2:7a:a9:a8: 40:da:ad:cd:4b:77:33:b3:33:44:27:1f:6a:33:3d:82:68:e5: de:6f:82:b4:53:d5:6c:da:f7:ea:06:cb:e1:3d:80:4c:91:3e: fc:b4:24:f3:7d:6b:0b:16:c1:36:97:cb:3c:09:91:f5:ea:af: d8:44:ce:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niHd5XcdvAYOR5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWZiMGMzYWMtMDlmOC00YTMxLTg5NGQtNjY5OTZjMDU5MWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWuc7F9U9QJtEt+HGFBWoUhci9zQaGFjiv/n M5dWE9p64ndXFis/rq3yPSaatVXnqamdlVk5lB3JZdijbOBnKXzGf71fJeD0JGjO dTq8152V+7JG305yjHO9iHjiXK0rF1tI6SSvhB5ZKl5mo3H+v7bihZJT78Tg4Cd1 xkXvRu7jx1ObZNgVZMwjYEa3dvH/7vBeD4GXW7qKBlNVozswMviXx/mOCDI4dkp3 x88w5s9w9yi3Axr0/PtuqoQHxyZaIWj62xJSRMulfQ2IDny/VetC0P/ksT2rv62P 8uYnmqxT2ZXP7fmlbfTXgFbKbZrE3QJHyz9kKtTV9XjIxfQ4bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfTu35YSEziplJ3Z3QQRu+WzcD7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWM4YjlkMmYtNzFjNi0z MDQxLWI4MDItNDNlMzRlN2E4ZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpW/nhGFYi8dNYFJQ9nqr6AuOkkxz0FGt8xx+C+/mO9thek3Ph3HM6W 05zR8sLsTZ2LeAMJUymPnTPt85xr3eW7vYW733bz1DAH2dIti4Q/E9HDj5KZ5qCD 4jyQ7IuhL1NShcOkX+mlkt45gpqEvL0MeM9bRqiqKUMR8HbuLpJ9oWHfFGDQsC1/ bzU50G4KMeEoil8X/YRxfw774ig4CVA77tfAqAX1PiG26X7+9UyfGHPgQyW+z4Mu pA+Wu9D5VSpgsnqpqEDarc1LdzOzM0QnH2ozPYJo5d5vgrRT1Wza9+oGy+E9gEyR Pvy0JPN9awsWwTaXyzwJkfXqr9hEzmU= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:04 2026 by rpki-client