$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c85db3f3-9e15-3e74-b37e-3830eb19a42c.roa File: c85db3f3-9e15-3e74-b37e-3830eb19a42c.roa (raw, json) Hash identifier: eqn3ks1Eqh1EA49tdyWI/IO6mxpQjYXcitN/2LyQ1Rg= Subject key identifier: 85:45:E0:52:43:7C:A6:E0:C1:0A:8D:0A:D0:3C:7C:BC:C4:4C:FA:24 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498A0F3CD92547E6996AEC40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c85db3f3-9e15-3e74-b37e-3830eb19a42c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396613 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:0f:3c:d9:25:47:e6:99:6a:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a07aac96-30bf-414c-b747-6c65c90da880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:12:09:e6:7b:39:6d:f3:57:ef:4a:af:d7:66: ab:b7:b0:cc:4f:30:b2:5f:71:f6:8f:ce:bb:d2:d4: 47:a9:b2:7b:13:ab:6c:e0:1e:49:b2:ed:93:d0:31: 55:5a:15:e5:21:ff:2a:ba:c5:23:d7:a2:99:6d:af: 3c:15:2c:c4:ee:19:51:3a:98:f3:a6:9f:89:1c:77: ae:fc:a1:59:1b:2b:67:07:26:30:f3:86:5f:51:16: fa:8b:4a:4b:1b:67:b5:d0:9d:0c:e5:64:2c:49:3d: 7b:26:32:d1:3c:62:fb:54:44:76:c6:04:a2:ac:5a: 7c:7d:01:a8:cc:35:29:a4:06:0a:82:43:96:d4:d6: c5:e5:fb:9d:1d:90:94:81:62:4b:78:70:45:c3:14: eb:84:3c:85:6e:61:d1:25:42:37:d0:f8:0d:e7:81: 89:09:a2:03:a8:6a:4f:e0:2a:93:4f:63:48:1a:ac: bb:8e:6c:c8:1e:89:9d:8e:11:fb:1a:88:4d:eb:42: de:3a:aa:ef:af:74:64:6d:c2:63:4a:59:78:2d:da: f4:32:6e:ca:1e:a6:fd:37:05:32:51:5e:5e:d3:f0: 21:49:43:d8:4c:97:43:b8:93:e3:60:b8:d8:a6:2f: 1e:8c:fa:89:1a:4c:62:aa:d5:88:54:da:4e:3f:b9: ba:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:45:E0:52:43:7C:A6:E0:C1:0A:8D:0A:D0:3C:7C:BC:C4:4C:FA:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c85db3f3-9e15-3e74-b37e-3830eb19a42c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:79:17:1b:c4:19:e7:d9:66:38:bf:ac:90:a2:50:49:a6:ed: 8a:30:c2:38:13:2d:a8:21:6e:91:52:40:0a:c2:c7:e4:d2:b7: f8:8f:f6:f8:60:f7:01:de:e5:64:09:b7:91:2f:21:fd:ff:a6: 2b:86:e0:e6:08:9b:98:ce:13:df:1e:7f:2f:7f:39:76:2a:7f: 83:53:d7:3a:cd:7d:a1:4f:6a:44:d8:8d:c0:66:60:67:f4:34: 71:a2:18:41:44:34:3f:fa:28:8a:86:fb:fe:47:b6:c0:05:98: 40:88:2d:62:aa:39:39:e1:af:2f:eb:70:d9:ca:89:37:5c:5e: bc:f7:14:9a:bc:fe:06:52:54:0f:40:e8:06:4b:a0:22:4a:80: 16:54:11:a8:55:16:24:7c:a9:e9:56:16:22:81:5d:3c:e7:38: 9f:95:fb:1c:a5:c9:8c:5d:8e:05:83:46:3a:6f:18:6c:7c:39: 00:e6:7d:6d:fd:b6:fe:15:33:64:65:34:3c:86:c7:a1:cd:7b: 1e:a3:c9:b9:1d:cc:f3:94:19:bb:67:67:e3:31:fb:95:2a:53: 9f:2d:78:b3:9a:7f:bc:14:c9:7f:dd:cb:d9:2f:1b:ff:9f:f4: 9c:83:2f:c3:e2:8a:0c:fd:fd:38:2e:48:54:7b:a3:61:52:65: 23:12:39:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jig882SVH5plq7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTA3YWFjOTYtMzBiZi00MTRjLWI3NDctNmM2NWM5MGRhODgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRIJ5ns5bfNX70qv12art7DMTzCyX3H2j867 0tRHqbJ7E6ts4B5Jsu2T0DFVWhXlIf8qusUj16KZba88FSzE7hlROpjzpp+JHHeu /KFZGytnByYw84ZfURb6i0pLG2e10J0M5WQsST17JjLRPGL7VER2xgSirFp8fQGo zDUppAYKgkOW1NbF5fudHZCUgWJLeHBFwxTrhDyFbmHRJUI30PgN54GJCaIDqGpP 4CqTT2NIGqy7jmzIHomdjhH7GohN60LeOqrvr3RkbcJjSll4Ldr0Mm7KHqb9NwUy UV5e0/AhSUPYTJdDuJPjYLjYpi8ejPqJGkxiqtWIVNpOP7m6sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVF4FJDfKbgwQqNCtA8fLzETPokMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzg1ZGIzZjMtOWUxNS0z ZTc0LWIzN2UtMzgzMGViMTlhNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD95FxvEGefZZji/rJCiUEmm7YowwjgTLaghbpFSQArCx+TSt/iP9vhg 9wHe5WQJt5EvIf3/piuG4OYIm5jOE98efy9/OXYqf4NT1zrNfaFPakTYjcBmYGf0 NHGiGEFEND/6KIqG+/5HtsAFmECILWKqOTnhry/rcNnKiTdcXrz3FJq8/gZSVA9A 6AZLoCJKgBZUEahVFiR8qelWFiKBXTznOJ+V+xylyYxdjgWDRjpvGGx8OQDmfW39 tv4VM2RlNDyGx6HNex6jybkdzPOUGbtnZ+Mx+5UqU58teLOaf7wUyX/dy9kvG/+f 9JyDL8Piigz9/TguSFR7o2FSZSMSOUE= -----END CERTIFICATE-----Generated at Wed Oct 7 02:21:53 2026 by rpki-client