$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c85db3f3-9e15-3e74-b37e-3830eb19a42c.roa File: c85db3f3-9e15-3e74-b37e-3830eb19a42c.roa (raw, json) Hash identifier: RQxEj0lwCgiwS/dAzB7rw9fEx/VqKyKJ3UmBbkKV+Kk= Subject key identifier: BF:8D:09:13:FD:BB:B7:83:D1:81:61:65:75:0A:8E:4F:1F:CD:4E:FE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7888D309E33B47E044041C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c85db3f3-9e15-3e74-b37e-3830eb19a42c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396613 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:8d:30:9e:33:b4:7e:04:40:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=09454aee-3f3e-4102-a828-05a7d4d6b04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4a:4a:2d:f9:af:09:81:1b:49:a0:0d:e9:10: 74:0d:3c:f2:67:96:0b:6f:b4:e6:ed:17:16:ac:36: d5:d7:10:ef:ff:fe:71:b5:4c:64:23:26:50:c1:7e: fb:7a:18:ae:a8:80:55:15:7a:80:cf:6b:63:4c:5e: 83:75:90:4a:67:b7:78:e9:b6:2f:f3:80:da:a0:6c: 59:2a:3d:2e:de:10:0d:c4:03:79:93:f1:16:01:f6: c6:50:10:69:ed:13:63:48:32:c9:76:14:92:11:78: d4:a5:0f:25:9d:2d:c4:05:46:19:8c:c7:99:1f:92: 31:f7:5f:0f:6c:68:39:d8:86:a2:c5:40:1d:b0:e6: ab:0a:72:d7:33:90:5e:48:34:f9:29:2b:1a:f6:e2: 87:ba:8f:b8:32:4b:39:5b:4c:a8:76:3e:46:58:8f: d8:35:e7:b5:33:4f:0b:86:84:2a:6a:7e:6f:31:71: f9:3e:a9:fc:0b:ff:de:d6:9a:9b:03:ad:e7:a7:ac: 14:65:4d:cd:68:c6:16:e8:39:29:45:3b:c7:a2:a1: 70:9e:f7:e7:2c:ba:c1:2c:df:ee:34:01:5d:f9:94: 4b:f0:95:04:43:a7:b5:85:dc:2a:75:9c:c7:2b:86: 27:c1:e6:32:5d:42:79:aa:67:4f:d7:79:da:39:35: db:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8D:09:13:FD:BB:B7:83:D1:81:61:65:75:0A:8E:4F:1F:CD:4E:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c85db3f3-9e15-3e74-b37e-3830eb19a42c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:6a:03:7b:0e:3d:46:e8:8e:ac:0a:94:f9:7e:1e:5b:9e:c9: 05:46:05:74:f1:8c:3e:7a:1b:37:d6:50:23:e4:71:bd:ff:9f: 4e:0b:e1:e2:03:17:c1:a7:10:1d:96:ee:9e:e6:e4:2c:af:b7: 51:ec:d4:c9:88:21:22:97:cd:ea:5f:53:27:5e:19:a7:33:f0: 77:84:91:f0:e1:23:9f:d4:de:4d:ad:fa:0a:5f:39:46:27:80: 4f:d2:00:8c:48:7c:67:4b:31:db:88:24:72:7b:27:fc:97:17: bb:c5:64:16:b5:6d:95:bc:9e:10:39:f2:f6:38:6b:04:4f:ce: aa:4a:2e:56:41:dc:e7:a1:49:39:51:a2:1a:cc:b0:b9:0d:73: bf:a4:1a:a5:52:4b:20:d5:16:06:31:f8:71:65:0c:c2:de:18: 4b:cc:97:bf:bc:58:00:54:35:74:01:41:87:e5:b8:d9:c5:93: ba:e6:b2:79:e1:08:7a:22:72:9f:8b:e9:e9:a7:ec:c8:cc:af: b2:ed:b0:3f:09:f8:36:6c:20:3d:89:f0:5c:a6:6f:60:df:97: b1:20:a7:ad:33:a3:56:d4:48:27:75:9e:aa:f5:5b:5a:32:87: 36:a3:84:ec:f3:81:09:62:54:e8:ec:49:10:81:1b:86:d9:dd: 36:49:6b:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niI0wnjO0fgRAQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDk0NTRhZWUtM2YzZS00MTAyLWE4MjgtMDVhN2Q0ZDZiMDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUpKLfmvCYEbSaAN6RB0DTzyZ5YLb7Tm7RcW rDbV1xDv//5xtUxkIyZQwX77ehiuqIBVFXqAz2tjTF6DdZBKZ7d46bYv84DaoGxZ Kj0u3hANxAN5k/EWAfbGUBBp7RNjSDLJdhSSEXjUpQ8lnS3EBUYZjMeZH5Ix918P bGg52IaixUAdsOarCnLXM5BeSDT5KSsa9uKHuo+4Mks5W0yodj5GWI/YNee1M08L hoQqan5vMXH5Pqn8C//e1pqbA63np6wUZU3NaMYW6DkpRTvHoqFwnvfnLLrBLN/u NAFd+ZRL8JUEQ6e1hdwqdZzHK4YnweYyXUJ5qmdP13naOTXb6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+NCRP9u7eD0YFhZXUKjk8fzU7+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzg1ZGIzZjMtOWUxNS0z ZTc0LWIzN2UtMzgzMGViMTlhNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRqA3sOPUbojqwKlPl+HlueyQVGBXTxjD56GzfWUCPkcb3/n04L4eID F8GnEB2W7p7m5Cyvt1Hs1MmIISKXzepfUydeGacz8HeEkfDhI5/U3k2t+gpfOUYn gE/SAIxIfGdLMduIJHJ7J/yXF7vFZBa1bZW8nhA58vY4awRPzqpKLlZB3OehSTlR ohrMsLkNc7+kGqVSSyDVFgYx+HFlDMLeGEvMl7+8WABUNXQBQYfluNnFk7rmsnnh CHoicp+L6emn7MjMr7LtsD8J+DZsID2J8Fymb2Dfl7Egp60zo1bUSCd1nqr1W1oy hzajhOzzgQliVOjsSRCBG4bZ3TZJa30= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:34 2026 by rpki-client