$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5521b7b-5f32-3762-9366-9c7f948e9eac.roa File: c5521b7b-5f32-3762-9366-9c7f948e9eac.roa (raw, json) Hash identifier: A/fvSucWFu2aDrtco1SqAKphlF/Wyx/cNf+4AWEA7bk= Subject key identifier: 84:59:35:62:CB:1A:37:B2:93:DF:AE:66:31:06:8A:61:5E:DB:6D:CA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292EF2D9616C4A66AA4C880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5521b7b-5f32-3762-9366-9c7f948e9eac.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 36627 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ef:2d:96:16:c4:a6:6a:a4:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=5563e38b-6b0d-4da4-b9dc-19f9e43912c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1c:a0:b8:ca:0e:bc:91:42:a2:a6:43:ab:7a: 8a:e2:17:58:67:7b:a9:d5:99:8c:7c:bb:42:c0:68: 6e:cf:5d:2c:3a:28:de:d0:e2:80:7d:43:09:b6:21: 9b:57:ea:d9:92:6d:d9:6b:65:ec:ad:02:10:e6:14: 60:97:20:87:2d:22:a6:0d:d9:fc:fc:7d:70:2f:68: 6e:e2:99:6b:a6:40:d6:92:bd:17:c5:9e:ff:c3:20: 73:fb:f4:b1:b5:9c:c7:46:60:3c:54:11:32:5a:d2: 9b:fd:ca:e5:ef:11:dc:b3:e5:c0:d3:83:ea:88:2c: c0:d5:e5:15:79:ad:6e:11:68:ba:a6:82:46:ab:58: 91:8c:30:88:8e:b7:55:2a:fe:21:f7:b1:b2:64:da: cb:17:0f:bb:2f:e3:14:8f:87:78:a6:c9:08:5c:6e: c6:23:ef:95:fb:5d:e4:54:51:cf:94:3a:9b:20:48: 2c:0c:1e:55:46:63:ef:0f:a1:37:8a:5c:ed:86:65: 58:ce:fa:14:b3:29:d4:61:c9:6b:06:c8:d4:26:4a: 74:08:77:8c:93:60:0e:9d:81:ae:92:b4:ca:8f:7a: e0:06:4c:99:8a:61:91:06:56:ba:ea:2f:8c:50:73: f0:0e:50:df:8a:4c:6f:4e:67:ed:39:78:cf:88:94: d0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:59:35:62:CB:1A:37:B2:93:DF:AE:66:31:06:8A:61:5E:DB:6D:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5521b7b-5f32-3762-9366-9c7f948e9eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:07:96:07:65:f6:98:dd:e9:2a:a0:ed:fb:2d:ce:ef:e0:38: e1:d8:88:6e:4e:f1:8d:db:58:80:73:1b:1e:d9:0c:f8:36:63: 57:10:57:82:56:d8:f4:e4:c0:53:6b:1b:d6:36:a4:8d:dc:6e: dd:ed:40:e3:95:fb:c5:d3:01:e6:e8:30:cd:b2:b8:ba:63:18: c4:7c:28:87:eb:50:da:d3:c2:2a:91:b2:40:8a:ca:9c:6a:0a: 53:86:ca:df:ae:d8:e7:65:d7:0c:9a:be:cf:40:01:9a:a2:f3: c3:b0:9b:3e:f1:eb:03:7c:90:ff:b6:84:f2:ad:a7:09:82:2f: 8f:c2:88:dd:24:2f:0c:e7:1f:24:69:8d:2a:1a:52:1a:64:70: 7e:ab:33:1b:a1:92:86:fe:54:c2:de:4f:3b:78:21:bf:be:83: e6:f4:ba:c9:b8:61:72:a2:ad:5d:42:c5:89:8c:e4:0c:cf:8c: 56:99:cf:45:e2:4c:2c:62:a7:03:a4:be:25:9e:df:c1:aa:bc: 6b:2e:bd:d3:5d:e7:3d:d6:a8:38:a4:1e:36:6a:d0:d2:4c:03: 57:72:6d:e8:fc:00:a5:17:44:8a:7f:f5:18:ff:dd:d4:4a:c7: bb:33:88:0f:00:f7:1a:3e:2a:53:cf:6f:13:4a:bd:9d:ac:5c: e6:d9:61:57 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9iku8tlhbEpmqkyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NTU2M2UzOGItNmIwZC00ZGE0LWI5ZGMtMTlmOWU0MzkxMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphyguMoOvJFCoqZDq3qK4hdYZ3up1ZmMfLtC wGhuz10sOije0OKAfUMJtiGbV+rZkm3Za2XsrQIQ5hRglyCHLSKmDdn8/H1wL2hu 4plrpkDWkr0XxZ7/wyBz+/SxtZzHRmA8VBEyWtKb/crl7xHcs+XA04PqiCzA1eUV ea1uEWi6poJGq1iRjDCIjrdVKv4h97GyZNrLFw+7L+MUj4d4pskIXG7GI++V+13k VFHPlDqbIEgsDB5VRmPvD6E3ilzthmVYzvoUsynUYclrBsjUJkp0CHeMk2AOnYGu krTKj3rgBkyZimGRBla66i+MUHPwDlDfikxvTmftOXjPiJTQCwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIRZNWLLGjeyk9+uZjEGimFe223KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzU1MjFiN2ItNWYzMi0z NzYyLTkzNjYtOWM3Zjk0OGU5ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBYB5YHZfaY3ekqoO37Lc7v4Djh2IhuTvGN21iAcxse2Qz4NmNXEFeC Vtj05MBTaxvWNqSN3G7d7UDjlfvF0wHm6DDNsri6YxjEfCiH61Da08IqkbJAisqc agpThsrfrtjnZdcMmr7PQAGaovPDsJs+8esDfJD/toTyracJgi+PwojdJC8M5x8k aY0qGlIaZHB+qzMboZKG/lTC3k87eCG/voPm9LrJuGFyoq1dQsWJjOQMz4xWmc9F 4kwsYqcDpL4lnt/BqrxrLr3TXec91qg4pB42atDSTANXcm3o/AClF0SKf/UY/93U Sse7M4gPAPcaPipTz28TSr2drFzm2WFX -----END CERTIFICATE-----Generated at Wed Oct 7 12:31:57 2026 by rpki-client