$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1bc8b20-7f23-3d1e-a758-dee058aa7e80.roa File: b1bc8b20-7f23-3d1e-a758-dee058aa7e80.roa (raw, json) Hash identifier: igFWs27UNbBc5F97HDCMt/83MR7UpF7MX8CZMgiOoqY= Subject key identifier: D7:6C:48:7A:A2:7C:88:B2:AE:BA:1D:16:25:B1:D9:A4:55:DA:50:4E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F7FB121E271A1DD751C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1bc8b20-7f23-3d1e-a758-dee058aa7e80.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 397208 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f7:fb:12:1e:27:1a:1d:d7:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=33536c33-7a30-4979-bb5b-0495a7f79261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5d:4a:b1:21:58:ef:ac:3a:77:b9:19:19:42: 0a:3c:1b:87:ab:5a:bf:7a:7e:43:fa:5e:dd:0f:f1: 92:55:50:28:8b:90:45:b2:f7:22:f5:70:f5:82:4f: 01:71:4e:a4:8f:44:38:65:ba:d7:9b:68:a3:07:de: 37:07:10:35:f5:e5:1c:3e:03:e2:7e:0d:4f:de:10: 52:e6:50:41:92:28:59:78:a7:07:9a:1f:3e:cf:3d: da:60:8c:13:ac:c5:5f:46:95:8d:78:a6:83:30:bf: e5:33:48:1c:0e:fe:c4:1b:a7:c6:8b:97:85:28:bd: c3:91:95:f9:ed:a5:da:4c:64:0b:9e:4d:75:c2:22: bc:f8:8d:ef:8d:d8:ed:ec:65:4e:fe:50:c8:f6:c1: cb:ca:76:de:8e:24:36:f2:60:a4:08:f5:b1:45:9f: 19:49:44:67:b5:94:cb:c3:a0:53:5f:aa:c1:43:dc: 2b:ff:f0:29:8e:bc:e4:8a:12:c2:85:58:bd:ae:5d: 40:ad:39:95:86:32:38:91:8a:8b:51:4a:f1:d5:99: d5:d6:77:79:07:d0:a1:12:c9:60:88:ac:31:8d:ce: 56:b3:6b:f6:02:3d:67:d2:7e:75:10:39:4c:ae:27: 8d:a4:36:22:0c:98:a5:f7:a8:67:33:38:20:93:c6: 56:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6C:48:7A:A2:7C:88:B2:AE:BA:1D:16:25:B1:D9:A4:55:DA:50:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1bc8b20-7f23-3d1e-a758-dee058aa7e80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:7b:cd:a8:d5:f9:df:28:10:b8:bd:d6:9a:9b:a0:f3:83:74: dd:53:19:dd:7a:a0:9a:52:5a:b1:29:1f:70:e9:0c:c4:cf:72: 15:e8:85:04:fd:d9:f8:37:66:66:7f:64:ba:9b:08:d2:16:48: f8:f3:d9:53:f5:ad:a0:2f:24:12:1d:dc:25:e2:ad:2b:ee:5e: 66:ee:c7:c5:f8:8d:3a:41:31:b9:46:85:1a:13:03:0f:0d:5c: 15:6d:85:bf:cb:a3:66:a9:14:8e:d6:6c:d2:dd:c8:17:f8:1a: 92:97:d2:50:23:2c:be:e7:3b:d9:f2:f7:16:6e:14:3b:15:eb: 5c:37:00:98:64:8f:44:bc:80:a6:34:d3:ae:be:63:d2:b9:79: 08:ce:06:07:49:d9:a1:97:7d:64:57:1f:1f:3c:ce:b5:0b:1e: 25:52:48:9e:bf:fb:c2:52:ee:61:cb:47:74:fa:e4:93:ac:7a: 88:c2:57:8f:93:9f:32:ef:77:0d:7b:3a:57:a6:53:b9:e5:18: c1:cd:e3:39:2c:ec:67:c4:b8:6e:1a:b1:20:c4:ee:7d:41:5c: 35:18:91:32:b7:0c:b4:6e:8b:0c:8e:d4:76:83:ae:d6:c8:97: 13:4d:6a:c4:5f:d2:e8:c1:62:a9:7a:10:74:0c:74:13:db:20: 5c:ed:0f:99 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvf7Eh4nGh3XUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MzM1MzZjMzMtN2EzMC00OTc5LWJiNWItMDQ5NWE3Zjc5MjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr11KsSFY76w6d7kZGUIKPBuHq1q/en5D+l7d D/GSVVAoi5BFsvci9XD1gk8BcU6kj0Q4ZbrXm2ijB943BxA19eUcPgPifg1P3hBS 5lBBkihZeKcHmh8+zz3aYIwTrMVfRpWNeKaDML/lM0gcDv7EG6fGi5eFKL3DkZX5 7aXaTGQLnk11wiK8+I3vjdjt7GVO/lDI9sHLynbejiQ28mCkCPWxRZ8ZSURntZTL w6BTX6rBQ9wr//ApjrzkihLChVi9rl1ArTmVhjI4kYqLUUrx1ZnV1nd5B9ChEslg iKwxjc5Ws2v2Aj1n0n51EDlMrieNpDYiDJil96hnMzggk8ZWhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNdsSHqifIiyrrodFiWx2aRV2lBOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjFiYzhiMjAtN2YyMy0z ZDFlLWE3NTgtZGVlMDU4YWE3ZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBbe82o1fnfKBC4vdaam6Dzg3TdUxndeqCaUlqxKR9w6QzEz3IV6IUE /dn4N2Zmf2S6mwjSFkj489lT9a2gLyQSHdwl4q0r7l5m7sfF+I06QTG5RoUaEwMP DVwVbYW/y6NmqRSO1mzS3cgX+BqSl9JQIyy+5zvZ8vcWbhQ7FetcNwCYZI9EvICm NNOuvmPSuXkIzgYHSdmhl31kVx8fPM61Cx4lUkiev/vCUu5hy0d0+uSTrHqIwleP k58y73cNezpXplO55RjBzeM5LOxnxLhuGrEgxO59QVw1GJEytwy0bosMjtR2g67W yJcTTWrEX9LowWKpehB0DHQT2yBc7Q+Z -----END CERTIFICATE-----Generated at Tue Oct 6 19:54:43 2026 by rpki-client