$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b56f7d81-9051-36a6-8a45-aa2311e3df96.roa File: b56f7d81-9051-36a6-8a45-aa2311e3df96.roa (raw, json) Hash identifier: 9mCWfiayjqt0/ouVmXZF4jYvL6hdCc3iXurlid5f3xg= Subject key identifier: AF:FA:0E:E5:91:62:DD:2D:0F:FA:D4:9C:2E:B0:95:81:B9:0C:CB:06 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F025DD5ABEBF2BD1A680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b56f7d81-9051-36a6-8a45-aa2311e3df96.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396582 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f0:25:dd:5a:be:bf:2b:d1:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=d305e303-1fb0-4422-be5e-f9e5ef0af93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a7:63:dc:35:6d:e0:78:93:df:fc:08:ee:99: 82:52:91:11:d8:95:43:75:e7:f6:b0:e9:db:3c:85: f9:85:50:c0:cb:63:76:4b:2e:11:47:06:08:6a:57: 9b:f2:09:d4:fa:ac:8a:0a:89:78:a7:e5:d2:84:0a: 4e:3a:25:5e:7f:27:a8:84:af:70:1d:e1:88:ad:ad: 40:01:84:98:b3:cf:26:73:c9:21:c6:78:f2:c1:95: 55:5f:b6:19:57:02:e7:49:7b:94:41:a5:b1:e4:a9: 12:28:24:b3:dd:f3:46:89:0c:0a:7c:08:d7:c3:f8: df:39:69:bf:11:5e:e1:bc:9a:96:e4:d6:62:3b:5d: bb:e3:37:13:c5:d7:2f:38:45:5b:44:ca:08:e3:70: 00:83:9f:d4:5b:a5:0f:11:f3:97:9a:a3:da:76:e5: 89:d2:97:0e:83:45:74:cf:c1:d9:9e:43:9b:eb:a9: 97:e4:04:d7:86:cb:b8:ff:a4:cb:6b:1b:94:92:f4: 70:01:d9:a4:88:3c:36:bf:b0:c8:28:3a:91:46:62: ca:14:17:7a:8b:3c:79:87:bb:ef:4a:c4:48:87:84: a3:c8:f6:c4:ec:f0:a8:0c:49:5a:f5:69:c9:bd:21: e9:ca:86:d5:d2:57:37:0f:d6:9c:4f:98:4e:97:c5: 43:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FA:0E:E5:91:62:DD:2D:0F:FA:D4:9C:2E:B0:95:81:B9:0C:CB:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b56f7d81-9051-36a6-8a45-aa2311e3df96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a4:08:65:15:29:af:44:34:3f:dd:59:64:fc:ec:2b:58:f8: 6f:f4:6e:f9:af:d0:15:ac:dd:90:e8:e0:c6:84:b3:04:87:ce: f7:91:74:fb:0a:36:3a:bf:a6:ab:50:e6:8c:35:e5:d3:50:3a: 78:af:96:96:5a:3b:5f:e2:cc:db:e9:c6:66:41:d3:9b:7f:fc: 56:e2:09:7e:90:8e:35:58:ff:c9:f8:6e:83:10:d3:26:90:b6: 26:15:b9:9e:b6:be:5c:85:e1:09:0b:0e:56:bd:9d:7a:73:96: cc:fe:c2:b1:ab:e0:f7:2f:43:15:c6:68:29:3b:12:8f:26:27: ec:fe:c9:36:71:a4:38:f6:bf:1c:5e:d0:c1:a0:e1:fd:96:80: c5:bf:ed:35:e0:c6:a1:84:98:c8:16:7c:ce:c3:57:a3:eb:6d: 8a:f7:9a:ee:61:bb:77:51:16:9c:52:cb:f6:59:12:f8:5d:73: 3b:cd:24:ed:7d:32:e1:48:50:ba:c2:58:a3:af:18:20:1f:29: 93:f7:89:fa:51:f8:aa:c6:8d:86:62:9f:63:f7:64:2c:78:63: 90:4e:73:96:27:d4:53:1a:d5:92:71:0b:40:af:01:98:f6:e8: 81:3f:4c:f3:7c:2b:2f:36:f9:47:66:a9:f5:06:e5:b7:7e:77: 5f:8b:2c:50 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvAl3Vq+vyvRpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZDMwNWUzMDMtMWZiMC00NDIyLWJlNWUtZjllNWVmMGFmOTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Kdj3DVt4HiT3/wI7pmCUpER2JVDdef2sOnb PIX5hVDAy2N2Sy4RRwYIaleb8gnU+qyKCol4p+XShApOOiVefyeohK9wHeGIra1A AYSYs88mc8khxnjywZVVX7YZVwLnSXuUQaWx5KkSKCSz3fNGiQwKfAjXw/jfOWm/ EV7hvJqW5NZiO1274zcTxdcvOEVbRMoI43AAg5/UW6UPEfOXmqPaduWJ0pcOg0V0 z8HZnkOb66mX5ATXhsu4/6TLaxuUkvRwAdmkiDw2v7DIKDqRRmLKFBd6izx5h7vv SsRIh4SjyPbE7PCoDEla9WnJvSHpyobV0lc3D9acT5hOl8VD1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK/6DuWRYt0tD/rUnC6wlYG5DMsGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjU2ZjdkODEtOTA1MS0z NmE2LThhNDUtYWEyMzExZTNkZjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQATpAhlFSmvRDQ/3Vlk/OwrWPhv9G75r9AVrN2Q6ODGhLMEh873kXT7 CjY6v6arUOaMNeXTUDp4r5aWWjtf4szb6cZmQdObf/xW4gl+kI41WP/J+G6DENMm kLYmFbmetr5cheEJCw5WvZ16c5bM/sKxq+D3L0MVxmgpOxKPJifs/sk2caQ49r8c XtDBoOH9loDFv+014MahhJjIFnzOw1ej622K95ruYbt3URacUsv2WRL4XXM7zSTt fTLhSFC6wlijrxggHymT94n6Ufiqxo2GYp9j92QseGOQTnOWJ9RTGtWScQtArwGY 9uiBP0zzfCsvNvlHZqn1BuW3fndfiyxQ -----END CERTIFICATE-----Generated at Tue Oct 6 18:16:08 2026 by rpki-client