$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9bdb552-3747-3060-8c91-220dceab6cf6.roa File: c9bdb552-3747-3060-8c91-220dceab6cf6.roa (raw, json) Hash identifier: 5BmfejNnjZUxnLLPmXi1s2POLA7KxS+DnQEzkOr8Oq0= Subject key identifier: 00:2E:E3:1E:4C:8F:A1:DA:F3:EB:36:EE:1B:48:10:3F:83:1F:8A:EE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292EE8EB96E5C247A42FC40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9bdb552-3747-3060-8c91-220dceab6cf6.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 397196 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ee:8e:b9:6e:5c:24:7a:42:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=dce516a2-2773-4321-8300-32494da9a014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:48:74:de:e6:8d:d4:10:4a:68:24:c0:99:6a: 21:c2:d7:71:9d:8a:af:ce:c7:c4:1d:4d:85:a2:27: cd:dd:90:52:d5:39:82:02:f4:e9:d5:d0:1b:3a:fd: 1b:00:bf:f5:6d:20:1f:fb:c1:cc:76:e9:83:68:f2: 3c:be:30:cc:c5:65:7d:80:1e:7a:92:b5:44:fb:ef: ee:e7:9b:c2:a0:37:d8:e4:ed:ce:59:bf:ca:1a:fd: 9c:00:84:a8:30:53:54:a9:5b:56:d7:86:50:b5:7a: fe:9b:7f:46:b1:84:09:64:8f:bf:39:67:a5:d7:45: 2a:0c:76:61:f9:0b:30:f9:56:d7:f3:49:33:0a:4a: 54:63:62:c1:a5:ae:e8:a0:43:93:eb:ad:94:d1:68: 77:5a:83:39:e6:90:60:a8:b8:27:0f:cd:95:bf:c1: f0:9c:77:46:6d:10:9f:49:cd:0e:b1:b6:39:39:bb: da:eb:00:d0:b4:35:30:84:81:63:c0:b8:0f:65:82: 30:58:55:e3:af:74:06:19:35:c6:a5:8f:68:c9:4d: 8c:08:dd:96:8c:44:02:86:b4:d1:e1:4f:31:7f:5d: bf:3b:49:7c:cf:8c:d6:49:fa:db:7f:9c:89:c2:df: 90:1d:66:90:0c:70:28:a1:5f:e0:a0:2d:ca:ee:21: 49:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2E:E3:1E:4C:8F:A1:DA:F3:EB:36:EE:1B:48:10:3F:83:1F:8A:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9bdb552-3747-3060-8c91-220dceab6cf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d5:98:2c:bd:fe:fd:5e:d4:51:28:15:50:f5:19:64:63:a5: 03:cc:a6:ca:b8:8a:7e:08:fe:df:0d:37:fe:a2:58:65:1d:5a: 11:e8:5e:89:2e:67:fd:ac:5d:2b:a8:df:01:d7:56:c6:63:93: 49:51:2d:5d:26:c3:25:bf:ab:db:e6:21:aa:b3:c3:01:a2:4c: 4a:ed:72:c2:97:42:f5:f8:21:db:59:98:2d:a6:82:5b:5a:9e: a0:03:6e:6e:a7:cf:fc:06:e1:19:c1:39:7d:c5:20:aa:80:a7: 7a:d8:15:08:85:ce:88:67:f8:5a:64:d0:ac:1e:ef:1b:21:25: b4:27:21:cd:cd:36:8b:e1:5f:1b:d3:e0:2b:a9:99:29:68:36: 69:ec:ab:3d:c7:b4:43:a7:fc:e6:1f:91:e0:04:cb:0c:f0:1d: d1:8a:44:77:6c:ff:aa:cb:a5:26:10:6a:80:e6:33:0a:cb:6d: f7:52:41:70:e5:07:e3:c3:f3:a2:26:ca:80:f1:d0:ab:c2:98: 91:7d:f6:0b:92:37:d4:33:fe:2b:97:b8:a6:e1:00:57:72:95: ff:5b:4b:ec:53:8c:b4:51:cb:5f:93:88:9a:e6:e1:73:14:bf: cc:2d:8f:39:8b:9e:0e:57:37:90:ef:fb:7a:12:0b:9e:e2:af: 1d:ab:fc:46 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9iku6OuW5cJHpC/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZGNlNTE2YTItMjc3My00MzIxLTgzMDAtMzI0OTRkYTlhMDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEh03uaN1BBKaCTAmWohwtdxnYqvzsfEHU2F oifN3ZBS1TmCAvTp1dAbOv0bAL/1bSAf+8HMdumDaPI8vjDMxWV9gB56krVE++/u 55vCoDfY5O3OWb/KGv2cAISoMFNUqVtW14ZQtXr+m39GsYQJZI+/OWel10UqDHZh +Qsw+VbX80kzCkpUY2LBpa7ooEOT662U0Wh3WoM55pBgqLgnD82Vv8HwnHdGbRCf Sc0OsbY5Obva6wDQtDUwhIFjwLgPZYIwWFXjr3QGGTXGpY9oyU2MCN2WjEQChrTR 4U8xf12/O0l8z4zWSfrbf5yJwt+QHWaQDHAooV/goC3K7iFJeQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAAu4x5Mj6Ha8+s27htIED+DH4ruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzliZGI1NTItMzc0Ny0z MDYwLThjOTEtMjIwZGNlYWI2Y2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB/1Zgsvf79XtRRKBVQ9RlkY6UDzKbKuIp+CP7fDTf+olhlHVoR6F6J Lmf9rF0rqN8B11bGY5NJUS1dJsMlv6vb5iGqs8MBokxK7XLCl0L1+CHbWZgtpoJb Wp6gA25up8/8BuEZwTl9xSCqgKd62BUIhc6IZ/haZNCsHu8bISW0JyHNzTaL4V8b 0+ArqZkpaDZp7Ks9x7RDp/zmH5HgBMsM8B3RikR3bP+qy6UmEGqA5jMKy233UkFw 5Qfjw/OiJsqA8dCrwpiRffYLkjfUM/4rl7im4QBXcpX/W0vsU4y0Uctfk4ia5uFz FL/MLY85i54OVzeQ7/t6Egue4q8dq/xG -----END CERTIFICATE-----Generated at Wed Oct 7 02:30:02 2026 by rpki-client