$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0f0d0e0-ed68-3170-9dea-609fd5622e55.roa File: b0f0d0e0-ed68-3170-9dea-609fd5622e55.roa (raw, json) Hash identifier: fuLQhcjXdrpjCNipS6LvhfK6mkgMzkwxmhMMITGbm5c= Subject key identifier: 64:3B:AA:10:C6:6F:0B:EA:6C:66:E1:A8:73:8C:A6:B1:E2:C8:84:42 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F0F45D42C1E137E86840 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0f0d0e0-ed68-3170-9dea-609fd5622e55.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 20172 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f0:f4:5d:42:c1:e1:37:e8:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=6c14ea93-a3d7-4318-afaa-5bb1c2dc941e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2c:c4:02:f2:b5:9c:db:81:69:bb:2a:ea:db: ca:4b:49:36:3d:60:e3:ee:24:f2:28:30:5e:3f:af: 1c:a3:69:83:07:c8:7b:0a:5a:2b:98:e6:af:88:72: 11:3d:29:e3:dd:d8:7a:2f:0e:93:3d:58:24:ee:af: 7a:56:98:a8:e0:d8:a4:ae:dd:48:6d:60:48:a4:27: 8e:65:4e:9a:00:2f:98:78:7f:60:49:4b:c9:6f:ec: dd:81:ff:3d:c7:e5:f4:ee:d3:4d:bf:69:51:57:20: 67:e5:a3:64:aa:71:f1:2d:9a:fe:70:7d:b6:e6:a5: 50:f4:be:10:71:d8:a4:60:79:96:25:80:33:07:eb: f8:7f:b5:6f:3e:42:57:f2:05:ed:98:21:82:4d:a2: e2:b9:6e:10:b1:ce:8a:22:1f:20:18:27:6a:f6:e6: 38:32:d3:ec:e4:d0:0b:c0:bb:ad:87:b1:8c:8e:d0: cd:a9:cc:67:96:2c:0b:0d:98:62:ba:8c:45:48:36: cb:cd:db:3e:aa:05:70:d6:07:69:b4:df:fb:af:01: d5:8b:59:c9:b4:f4:05:71:e1:e8:b8:46:6d:9a:39: a1:fb:71:88:15:1b:15:e0:af:5e:eb:ce:8c:40:c3: 97:80:d9:91:be:43:27:d2:2f:6b:54:4c:f1:99:b2: d4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3B:AA:10:C6:6F:0B:EA:6C:66:E1:A8:73:8C:A6:B1:E2:C8:84:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0f0d0e0-ed68-3170-9dea-609fd5622e55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f3:12:9a:10:8e:b0:48:ad:0f:19:69:da:17:c7:ff:21:38: 20:09:ea:71:fe:8b:b2:ac:0d:7f:6b:58:7c:37:bd:3d:d4:d9: 75:7a:dd:ef:ff:6e:62:e3:41:25:b2:44:15:3b:02:68:b7:87: 7b:d3:41:16:0e:67:a9:0e:bf:ea:45:1a:40:6e:cb:95:27:96: 83:20:39:f0:b4:b7:88:7a:52:c4:a8:d3:7a:bd:26:c9:d3:f6: b8:51:5c:d7:9d:1a:4b:66:e9:32:5a:14:90:8b:f0:8c:81:4a: 79:d1:5d:df:a2:fd:4a:f8:d9:45:c3:99:e7:d7:7b:5b:37:2c: 1d:bb:26:79:4e:dc:f0:62:14:4d:e8:36:f5:90:50:1b:46:ba: db:6b:0d:18:25:07:39:12:0c:cb:dd:ff:9b:8f:aa:a3:5d:0f: 25:27:9b:75:3b:4d:0b:8e:93:e6:9a:eb:0d:08:a2:8e:59:28: 55:44:dc:93:f9:6c:f6:c9:54:51:c3:45:ff:8e:f5:08:9d:16: cd:e0:c0:da:cf:fc:68:1b:cc:af:c3:af:35:6a:7f:9d:f4:81: 79:9b:a5:a3:fe:d5:61:84:fd:93:7f:fd:07:d6:14:97:cb:60: 9d:7b:5f:78:ad:15:14:46:c4:7a:0c:98:ee:d1:c0:05:6a:a3: a9:52:40:03 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvD0XULB4TfoaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NmMxNGVhOTMtYTNkNy00MzE4LWFmYWEtNWJiMWMyZGM5NDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArizEAvK1nNuBabsq6tvKS0k2PWDj7iTyKDBe P68co2mDB8h7ClormOaviHIRPSnj3dh6Lw6TPVgk7q96Vpio4Nikrt1IbWBIpCeO ZU6aAC+YeH9gSUvJb+zdgf89x+X07tNNv2lRVyBn5aNkqnHxLZr+cH225qVQ9L4Q cdikYHmWJYAzB+v4f7VvPkJX8gXtmCGCTaLiuW4Qsc6KIh8gGCdq9uY4MtPs5NAL wLuth7GMjtDNqcxnliwLDZhiuoxFSDbLzds+qgVw1gdptN/7rwHVi1nJtPQFceHo uEZtmjmh+3GIFRsV4K9e686MQMOXgNmRvkMn0i9rVEzxmbLUvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGQ7qhDGbwvqbGbhqHOMprHiyIRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjBmMGQwZTAtZWQ2OC0z MTcwLTlkZWEtNjA5ZmQ1NjIyZTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAA8xKaEI6wSK0PGWnaF8f/ITggCepx/ouyrA1/a1h8N7091Nl1et3v /25i40ElskQVOwJot4d700EWDmepDr/qRRpAbsuVJ5aDIDnwtLeIelLEqNN6vSbJ 0/a4UVzXnRpLZukyWhSQi/CMgUp50V3fov1K+NlFw5nn13tbNywduyZ5TtzwYhRN 6Db1kFAbRrrbaw0YJQc5EgzL3f+bj6qjXQ8lJ5t1O00LjpPmmusNCKKOWShVRNyT +Wz2yVRRw0X/jvUInRbN4MDaz/xoG8yvw681an+d9IF5m6Wj/tVhhP2Tf/0H1hSX y2Cde194rRUURsR6DJju0cAFaqOpUkAD -----END CERTIFICATE-----Generated at Tue Oct 6 14:42:52 2026 by rpki-client