$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb809186-0a1a-3eb8-9a5f-50ae1b0c4a1d.roa File: bb809186-0a1a-3eb8-9a5f-50ae1b0c4a1d.roa (raw, json) Hash identifier: qR7N8DVJomdz5kSaRLMxV80jQR6Xm/el0iF3QAt2XCw= Subject key identifier: 95:04:C0:79:13:E5:26:C3:A4:08:1D:55:49:60:1A:4D:26:08:39:A9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EC0A7403A3181DA73FCFA3800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb809186-0a1a-3eb8-9a5f-50ae1b0c4a1d.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 397197 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:40:3a:31:81:da:73:fc:fa:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=2cbc667e-d18e-4ecb-b2a0-39e535be959d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:22:42:1a:8c:74:ff:b5:0f:62:ec:b2:ff:ea: 5e:39:92:03:8d:bf:08:47:5b:bc:6b:6c:3e:8c:1e: 82:44:e2:c8:c1:33:c0:82:ab:bf:7b:08:28:95:f6: 62:c8:7e:cf:0e:b2:b8:48:d9:b9:a2:8b:0e:ff:99: a7:fe:49:4c:1a:05:46:0f:41:8b:36:0d:99:61:f3: e3:44:47:5b:94:51:9f:a2:0c:99:68:ea:a2:71:7a: 51:b6:a2:d6:cf:c7:bb:ea:85:c9:ad:0b:fa:bc:ba: 09:0e:6b:c4:d6:81:c1:6d:1b:78:56:26:9d:47:6d: 04:f2:26:52:0a:51:48:cf:13:22:15:c5:95:be:8e: 9d:95:8c:d8:f2:1b:98:0c:8d:fe:ac:f4:78:69:8d: f5:64:5d:03:c2:f9:71:1e:22:05:f4:99:66:d7:5e: 47:ab:0a:18:6d:c3:b8:01:55:32:d1:5c:49:9d:b4: 7d:22:60:79:45:87:cc:63:8a:04:5a:d7:63:58:24: ce:75:c5:16:ae:29:cf:2d:63:92:b6:de:cc:4a:8a: a3:27:00:82:1b:1b:0a:1c:f4:36:7e:f9:d1:f9:4a: 89:03:f8:de:98:d0:36:07:95:13:94:c2:b5:0e:0e: aa:93:37:56:2e:74:12:40:a6:86:2d:ef:f1:53:a6: f8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:04:C0:79:13:E5:26:C3:A4:08:1D:55:49:60:1A:4D:26:08:39:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb809186-0a1a-3eb8-9a5f-50ae1b0c4a1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:53:6b:82:72:e8:5c:7c:e8:a3:d5:eb:9b:70:60:04:55:4f: 84:d0:a2:c1:d9:a0:e4:8b:09:88:37:23:fd:3b:4c:08:9f:40: d8:6e:44:61:c6:da:77:10:f6:56:f5:94:77:6a:ad:17:bb:a0: fa:1f:f9:a6:39:36:31:b9:e9:ce:c4:66:82:06:dd:ac:2d:56: a6:68:97:80:0f:32:25:2f:42:7b:ab:c4:61:40:13:36:04:64: bf:8b:87:26:84:e3:c9:f5:95:37:7e:21:39:18:f8:72:71:5e: 4d:0b:ca:5e:d1:dc:2b:8f:6e:9c:cb:40:7f:4d:c8:76:35:00: 51:4b:a4:30:d1:8c:6c:ab:e9:75:5b:99:bf:cd:6e:f4:c0:03: 65:d4:98:5c:c2:08:7b:8c:5f:ce:de:56:1b:1e:90:db:fc:3f: d7:e3:32:82:8b:f6:2a:18:87:4f:54:c0:3f:9d:44:f2:aa:0a: 0c:14:d2:30:4e:56:62:30:f8:6e:71:6c:46:bb:20:84:6b:e6: 70:2a:6b:a9:7e:eb:5a:45:1b:92:46:5c:11:8f:45:7c:7c:71: 46:77:3c:3e:93:94:96:3f:fa:72:00:14:14:52:c5:61:0f:7c: a2:1a:42:ee:94:2f:32:38:21:a1:68:8f:6a:08:ae:ee:b1:08: b8:36:3f:4e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7Ap0A6MYHac/z6OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk MmNiYzY2N2UtZDE4ZS00ZWNiLWIyYTAtMzllNTM1YmU5NTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSJCGox0/7UPYuyy/+peOZIDjb8IR1u8a2w+ jB6CROLIwTPAgqu/ewgolfZiyH7PDrK4SNm5oosO/5mn/klMGgVGD0GLNg2ZYfPj REdblFGfogyZaOqicXpRtqLWz8e76oXJrQv6vLoJDmvE1oHBbRt4ViadR20E8iZS ClFIzxMiFcWVvo6dlYzY8huYDI3+rPR4aY31ZF0DwvlxHiIF9Jlm115HqwoYbcO4 AVUy0VxJnbR9ImB5RYfMY4oEWtdjWCTOdcUWrinPLWOStt7MSoqjJwCCGxsKHPQ2 fvnR+UqJA/jemNA2B5UTlMK1Dg6qkzdWLnQSQKaGLe/xU6b4awIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJUEwHkT5SbDpAgdVUlgGk0mCDmpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmI4MDkxODYtMGExYS0z ZWI4LTlhNWYtNTBhZTFiMGM0YTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6U2uCcuhcfOij1eubcGAEVU+E0KLB2aDkiwmINyP9O0wIn0DYbkRh xtp3EPZW9ZR3aq0Xu6D6H/mmOTYxuenOxGaCBt2sLVamaJeADzIlL0J7q8RhQBM2 BGS/i4cmhOPJ9ZU3fiE5GPhycV5NC8pe0dwrj26cy0B/Tch2NQBRS6Qw0Yxsq+l1 W5m/zW70wANl1Jhcwgh7jF/O3lYbHpDb/D/X4zKCi/YqGIdPVMA/nUTyqgoMFNIw TlZiMPhucWxGuyCEa+ZwKmupfutaRRuSRlwRj0V8fHFGdzw+k5SWP/pyABQUUsVh D3yiGkLulC8yOCGhaI9qCK7usQi4Nj9O -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:29 2026 by rpki-client