$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa File: cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa (raw, json) Hash identifier: bB46LIusPctT4gxrcOppwy/AWINXpf8VHVj6qiYNPXQ= Subject key identifier: 17:05:11:FD:C8:ED:98:95:AF:22:9E:37:B6:DF:34:40:CF:7C:A6:3C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EC0A73AEE6141CD20D79460A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 397200 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:3a:ee:61:41:cd:20:d7:94:60:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=a0f60c69-8fcb-4e69-b6a9-75c72a615451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f6:42:de:6b:1f:92:14:cb:21:c5:01:ab:27: 56:30:6c:48:8c:a0:31:a3:c4:dc:36:37:fa:02:6d: 67:ef:e5:8c:19:a3:a3:ef:f7:bf:e3:56:08:ea:9d: d4:00:f7:c2:ec:74:53:f2:4c:9a:44:de:23:02:d1: 1b:62:bc:7f:5f:ce:8b:8a:04:e3:fe:3b:93:1f:b1: 8d:18:13:81:92:5b:05:22:95:15:02:4f:11:cc:32: dd:a9:77:a0:7a:82:a2:27:35:57:e5:3b:4b:a1:7a: 26:fb:a6:f5:2f:5d:f4:47:c5:9e:26:df:72:e3:c7: a1:a5:89:2d:65:f0:9f:1f:e3:cf:d4:4c:bf:11:de: 87:ae:ab:55:c3:2b:b8:f4:4a:fc:60:27:52:b4:10: 62:4a:71:27:52:ed:a0:df:b0:fd:34:d4:09:6e:66: d8:b3:ff:69:3d:bd:cf:3f:fb:ef:f4:a8:79:d4:5e: 75:6c:c3:e8:90:93:aa:18:83:6d:df:74:68:cd:64: 63:00:a8:66:51:b6:8e:f0:17:ca:0f:ad:2b:51:78: ce:28:f4:07:8a:66:f4:50:97:3a:f7:1d:e7:ae:82: 5b:2d:b8:27:3c:f1:ef:36:f9:12:ae:ff:71:e7:45: ac:10:0b:1d:d4:3d:d8:83:81:81:bb:e8:1c:25:e3: df:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:05:11:FD:C8:ED:98:95:AF:22:9E:37:B6:DF:34:40:CF:7C:A6:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:16:53:2f:99:dc:a8:a6:2e:6d:8a:78:88:d7:ab:8e:d1:9a: 1e:f9:af:46:1d:d3:34:81:c5:39:88:d9:d8:58:86:a9:9e:cf: 03:ab:fa:53:82:80:dc:e7:3a:7d:77:b8:92:09:50:cb:87:4e: d8:6f:bd:b3:1b:30:7a:5b:73:88:bf:f6:1a:93:88:95:30:f8: 63:07:07:51:b4:9a:18:ad:a7:ef:8c:ff:46:74:37:57:e9:19: 00:38:44:44:85:74:85:6f:18:51:e5:df:e8:fd:35:dc:13:7f: 83:36:2f:e0:ea:de:1a:15:f0:01:df:3c:5e:dc:ab:00:12:1a: ec:22:cc:2a:2a:dd:a7:2f:96:a3:40:d0:bf:b6:0a:41:77:aa: 9e:18:41:38:fa:f0:39:f8:e1:cb:36:d7:d9:1a:c4:9d:37:a2: 27:88:1f:9e:44:3f:8d:01:14:6b:34:0f:bb:d5:85:16:74:4c: 85:ac:53:c9:c5:bf:0d:7b:e5:ce:05:68:b8:38:c1:53:60:33: aa:da:bb:07:58:f8:31:b0:a3:69:fe:9b:d8:26:77:c1:54:f6: e1:3b:bc:f3:c8:aa:66:c8:88:a1:46:3a:5d:ed:02:bc:da:c9: d0:0a:ce:ec:be:0e:09:e5:a7:84:b5:44:28:3e:84:76:6c:1f: f9:0b:d4:8e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7ApzruYUHNINeUYKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk YTBmNjBjNjktOGZjYi00ZTY5LWI2YTktNzVjNzJhNjE1NDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPZC3msfkhTLIcUBqydWMGxIjKAxo8TcNjf6 Am1n7+WMGaOj7/e/41YI6p3UAPfC7HRT8kyaRN4jAtEbYrx/X86LigTj/juTH7GN GBOBklsFIpUVAk8RzDLdqXegeoKiJzVX5TtLoXom+6b1L130R8WeJt9y48ehpYkt ZfCfH+PP1Ey/Ed6HrqtVwyu49Er8YCdStBBiSnEnUu2g37D9NNQJbmbYs/9pPb3P P/vv9Kh51F51bMPokJOqGINt33RozWRjAKhmUbaO8BfKD60rUXjOKPQHimb0UJc6 9x3nroJbLbgnPPHvNvkSrv9x50WsEAsd1D3Yg4GBu+gcJePfFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBcFEf3I7ZiVryKeN7bfNEDPfKY8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2I4ZTc0ZjgtN2EyZi0z ZDg1LTk0NWEtZDNlMTU5MGJiYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQASFlMvmdyopi5tiniI16uO0Zoe+a9GHdM0gcU5iNnYWIapns8Dq/pT goDc5zp9d7iSCVDLh07Yb72zGzB6W3OIv/Yak4iVMPhjBwdRtJoYrafvjP9GdDdX 6RkAOEREhXSFbxhR5d/o/TXcE3+DNi/g6t4aFfAB3zxe3KsAEhrsIswqKt2nL5aj QNC/tgpBd6qeGEE4+vA5+OHLNtfZGsSdN6IniB+eRD+NARRrNA+71YUWdEyFrFPJ xb8Ne+XOBWi4OMFTYDOq2rsHWPgxsKNp/pvYJnfBVPbhO7zzyKpmyIihRjpd7QK8 2snQCs7svg4J5aeEtUQoPoR2bB/5C9SO -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:22 2026 by rpki-client