$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba5fa9b1-1046-3dd2-b8a0-b01994be841b.roa File: ba5fa9b1-1046-3dd2-b8a0-b01994be841b.roa (raw, json) Hash identifier: YkXf6f+xkPth5asf1ggTWiN11uhTjarDtnK3GVv7yV0= Subject key identifier: CD:44:5A:14:E4:9C:B8:05:82:CF:C7:3C:17:C9:CA:BA:F3:55:D8:A9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49730B7795931AA2AC0330C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba5fa9b1-1046-3dd2-b8a0-b01994be841b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396599 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:0b:77:95:93:1a:a2:ac:03:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0a4b0afe-c397-4dec-b130-71f7b27b8fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:83:63:25:d5:7e:d5:f2:06:69:f5:0c:07:de: 04:5d:4a:91:37:56:9d:65:c3:7a:d6:cf:3d:89:0e: da:e7:fb:ed:99:c4:8a:fb:eb:d4:5b:69:77:b5:9a: 47:eb:ed:d7:fc:ce:d6:ee:a1:10:79:96:1a:5b:4c: 97:16:72:81:93:cc:56:c8:78:aa:f8:63:28:6f:cb: 80:91:f5:75:db:9a:51:5c:ae:35:64:9c:70:fc:28: 3f:1f:8d:53:9f:4d:c2:fe:5a:56:58:85:a5:c9:13: 74:72:d1:c4:3f:1c:73:9b:a7:30:91:13:63:f3:43: 64:54:74:ad:f7:72:2b:90:78:99:ac:d7:e9:0f:64: 8c:03:e5:c1:15:42:35:bd:80:e8:73:e2:74:55:31: 62:2a:4c:cd:2c:e6:ae:eb:1b:2c:f9:85:56:1a:4a: 5c:e4:d4:86:e1:3c:50:0a:0e:48:1f:cc:58:b2:78: f0:1f:77:83:19:a0:e1:31:57:4a:ad:5b:73:07:4e: 58:e3:a2:ca:75:5a:35:3c:a2:81:8b:2e:0e:6f:04: 1a:3b:42:19:54:ec:23:e4:04:8b:dc:ec:d3:16:0d: 00:7d:68:cc:16:36:40:e7:ca:75:ce:25:39:b1:a7: 79:31:0f:8d:ec:3d:ce:a5:d8:83:e7:7a:3f:f0:3e: 0c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:44:5A:14:E4:9C:B8:05:82:CF:C7:3C:17:C9:CA:BA:F3:55:D8:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba5fa9b1-1046-3dd2-b8a0-b01994be841b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ee:c3:de:8f:df:ce:0c:4e:d2:f2:38:32:52:0e:62:bd:a4: 37:63:54:b8:87:36:43:f1:ee:b3:f4:5a:86:ef:02:f5:78:0d: 04:47:e3:41:e3:48:2f:7f:c4:32:74:6e:e1:87:31:62:e7:99: 0b:3a:15:c0:1a:ab:6d:64:60:ef:9a:36:09:ca:19:99:54:5f: 08:de:65:1a:f6:03:44:89:75:42:0d:c0:8f:b4:b2:3a:5f:cb: ee:dd:51:5b:b8:a3:46:dc:20:77:e8:74:69:33:05:08:4b:2a: be:b6:bf:88:d9:40:a4:01:ea:f9:79:28:44:f1:74:2d:21:4a: 22:ce:58:bb:36:0f:ea:73:78:ca:c7:97:a1:ae:16:95:7a:7b: fd:a2:76:b3:4a:f4:24:ac:29:f6:3a:4b:af:c4:31:34:3d:39: 2d:31:ab:0a:e4:31:0b:2e:ec:71:db:a5:a3:c5:d2:c4:b2:21: 73:3c:34:b6:6a:53:77:1b:f6:1f:72:01:2f:20:6a:e8:0e:6f: 74:53:31:c5:9c:7d:6d:2d:81:80:52:3b:b4:8a:40:61:34:ff: 76:c4:9e:45:aa:18:25:9b:55:e0:e4:94:ba:81:c2:37:ea:c4: 65:cf:a0:b6:eb:34:1d:1a:28:93:db:be:64:79:b1:ce:d8:18: 2a:b2:69:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcwt3lZMaoqwDMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGE0YjBhZmUtYzM5Ny00ZGVjLWIxMzAtNzFmN2IyN2I4ZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0INjJdV+1fIGafUMB94EXUqRN1adZcN61s89 iQ7a5/vtmcSK++vUW2l3tZpH6+3X/M7W7qEQeZYaW0yXFnKBk8xWyHiq+GMob8uA kfV125pRXK41ZJxw/Cg/H41Tn03C/lpWWIWlyRN0ctHEPxxzm6cwkRNj80NkVHSt 93IrkHiZrNfpD2SMA+XBFUI1vYDoc+J0VTFiKkzNLOau6xss+YVWGkpc5NSG4TxQ Cg5IH8xYsnjwH3eDGaDhMVdKrVtzB05Y46LKdVo1PKKBiy4ObwQaO0IZVOwj5ASL 3OzTFg0AfWjMFjZA58p1ziU5sad5MQ+N7D3OpdiD53o/8D4MVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1EWhTknLgFgs/HPBfJyrrzVdipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmE1ZmE5YjEtMTA0Ni0z ZGQyLWI4YTAtYjAxOTk0YmU4NDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLuw96P384MTtLyODJSDmK9pDdjVLiHNkPx7rP0WobvAvV4DQRH40Hj SC9/xDJ0buGHMWLnmQs6FcAaq21kYO+aNgnKGZlUXwjeZRr2A0SJdUINwI+0sjpf y+7dUVu4o0bcIHfodGkzBQhLKr62v4jZQKQB6vl5KETxdC0hSiLOWLs2D+pzeMrH l6GuFpV6e/2idrNK9CSsKfY6S6/EMTQ9OS0xqwrkMQsu7HHbpaPF0sSyIXM8NLZq U3cb9h9yAS8gaugOb3RTMcWcfW0tgYBSO7SKQGE0/3bEnkWqGCWbVeDklLqBwjfq xGXPoLbrNB0aKJPbvmR5sc7YGCqyaQU= -----END CERTIFICATE-----Generated at Wed Oct 7 08:00:25 2026 by rpki-client