$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba5fa9b1-1046-3dd2-b8a0-b01994be841b.roa File: ba5fa9b1-1046-3dd2-b8a0-b01994be841b.roa (raw, json) Hash identifier: Qq3VruPge7taUgXoos6vg1cBjBfwoGAuYy/fzb6KtAU= Subject key identifier: EC:E5:22:33:5A:48:0C:5F:6A:66:AD:AA:C5:CF:CF:8C:91:52:A4:D6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA78875BF02873675935B1350 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba5fa9b1-1046-3dd2-b8a0-b01994be841b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396599 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:75:bf:02:87:36:75:93:5b:13:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d82d33b7-e324-4f8f-9ac6-a036c904c7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b6:35:02:30:2d:ff:51:4d:2d:cc:69:1a:66: 37:a4:13:e6:dc:16:d9:30:5f:53:2b:82:e4:e3:d5: 43:7c:b5:47:e1:ba:86:cf:83:01:26:dd:c9:56:f7: f3:0c:b7:1b:6b:3f:1a:94:86:8d:c3:fe:6d:0e:ec: 2e:43:d0:91:10:a1:67:d3:41:ac:93:bb:fd:ce:6a: 21:e5:68:ca:34:62:cf:a6:0d:22:a8:71:5f:56:18: 20:29:f9:8c:46:b5:2a:09:e8:c8:19:98:07:32:f2: ac:df:f5:e4:88:01:e8:5a:1a:78:9c:d4:b8:75:1a: 90:00:c9:bc:4f:5b:b1:c2:24:d4:42:7a:23:8f:2e: 39:2b:32:92:d6:29:b1:ed:06:17:d2:75:ee:b0:86: 5a:20:30:4c:83:c6:e0:57:0f:d2:f7:48:16:8e:43: 20:de:b3:0d:9b:f4:f2:9b:a0:7c:93:b2:0b:4a:1f: 7d:b9:e2:4a:e6:54:e6:41:c4:ab:01:c2:b8:a0:3f: cc:e2:34:f6:27:10:90:7a:ba:e1:09:69:bd:74:35: 34:7c:d8:fa:99:7e:71:f2:a3:2c:8d:e3:5a:d9:f8: d4:c7:08:21:de:cb:9a:4b:e1:9a:a0:aa:c9:bd:5c: a3:ad:5c:67:a3:89:21:dd:bd:d2:12:01:31:e6:50: e7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E5:22:33:5A:48:0C:5F:6A:66:AD:AA:C5:CF:CF:8C:91:52:A4:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba5fa9b1-1046-3dd2-b8a0-b01994be841b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:2d:31:a1:d1:0b:f7:ce:49:27:77:1e:c2:cd:32:fa:0b:2e: 14:9a:42:8c:de:91:1f:12:08:c7:11:96:c6:11:27:c5:67:d8: a6:dd:19:6a:44:b2:2f:f4:ee:b0:83:43:15:f5:c2:2d:7e:8c: 02:69:11:c9:cb:9f:0d:3a:f5:be:05:ea:83:0d:65:9c:a7:85: ff:74:08:13:1b:6c:e0:d3:6e:33:4a:a7:17:20:7b:28:98:af: 48:db:9c:d4:f2:5c:ad:f8:c5:e1:2b:59:7e:40:26:d0:1f:fc: a4:39:7f:5f:34:63:d7:13:41:33:e7:49:07:9e:b4:14:1b:55: 12:49:70:34:3e:63:61:83:15:34:c0:df:fa:93:b7:19:cf:b0: e5:77:ce:7d:22:06:5a:c4:22:4a:4b:a1:79:ed:cc:3b:bd:d6: c7:e6:2a:b2:dc:40:b8:ac:a0:8b:43:1e:d3:18:c7:72:84:9d: d7:b9:e6:7e:bf:ce:06:89:68:15:b9:1f:06:4d:e1:b8:2b:b2: 3e:2d:9b:96:70:b5:34:50:43:ec:de:b0:67:8f:66:56:71:e6: 81:f0:80:21:d1:36:e7:67:86:9c:da:ff:07:fc:af:ff:95:2b: bc:d9:91:43:de:0a:df:fa:bd:39:d0:fc:b2:ca:ec:9d:eb:28: 9b:17:4d:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niHW/Aoc2dZNbE1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDgyZDMzYjctZTMyNC00ZjhmLTlhYzYtYTAzNmM5MDRjN2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorY1AjAt/1FNLcxpGmY3pBPm3BbZMF9TK4Lk 49VDfLVH4bqGz4MBJt3JVvfzDLcbaz8alIaNw/5tDuwuQ9CREKFn00Gsk7v9zmoh 5WjKNGLPpg0iqHFfVhggKfmMRrUqCejIGZgHMvKs3/XkiAHoWhp4nNS4dRqQAMm8 T1uxwiTUQnojjy45KzKS1imx7QYX0nXusIZaIDBMg8bgVw/S90gWjkMg3rMNm/Ty m6B8k7ILSh99ueJK5lTmQcSrAcK4oD/M4jT2JxCQerrhCWm9dDU0fNj6mX5x8qMs jeNa2fjUxwgh3suaS+GaoKrJvVyjrVxno4kh3b3SEgEx5lDnzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzlIjNaSAxfamatqsXPz4yRUqTWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmE1ZmE5YjEtMTA0Ni0z ZGQyLWI4YTAtYjAxOTk0YmU4NDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABItMaHRC/fOSSd3HsLNMvoLLhSaQozekR8SCMcRlsYRJ8Vn2KbdGWpE si/07rCDQxX1wi1+jAJpEcnLnw069b4F6oMNZZynhf90CBMbbODTbjNKpxcgeyiY r0jbnNTyXK34xeErWX5AJtAf/KQ5f180Y9cTQTPnSQeetBQbVRJJcDQ+Y2GDFTTA 3/qTtxnPsOV3zn0iBlrEIkpLoXntzDu91sfmKrLcQLisoItDHtMYx3KEnde55n6/ zgaJaBW5HwZN4bgrsj4tm5ZwtTRQQ+zesGePZlZx5oHwgCHRNudnhpza/wf8r/+V K7zZkUPeCt/6vTnQ/LLK7J3rKJsXTco= -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:52 2026 by rpki-client