$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1b95b7d-ad09-3d7e-b7cf-af67bb04a901.roa File: d1b95b7d-ad09-3d7e-b7cf-af67bb04a901.roa (raw, json) Hash identifier: F6vcOEpHftu0U8SHr3BIWRGt0mFlmlY2v4Sa9CH0R/M= Subject key identifier: 49:79:88:35:75:5D:42:51:5F:30:0D:6C:81:1D:F3:7D:B6:38:E9:90 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292EEA694003F90FC7A1C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1b95b7d-ad09-3d7e-b7cf-af67bb04a901.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 36630 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ee:a6:94:00:3f:90:fc:7a:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=d1609e78-9c34-414c-9a09-0e1a6854eb5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e4:52:eb:bb:69:d7:c5:5b:7c:ad:ce:f9:b9: 05:91:93:be:e8:8f:2b:2d:45:1e:54:c5:7f:33:2b: 88:b9:b2:b8:27:a0:b6:b5:32:43:52:09:f3:61:eb: 45:27:03:30:2f:da:f4:2d:cf:dc:9d:16:b2:14:bd: 35:04:43:72:bb:60:8e:60:9d:4f:8f:8f:28:f1:94: 51:aa:c0:54:cb:ea:d8:6c:4c:a7:e8:a3:f8:59:5a: aa:98:09:b2:f4:42:ab:05:34:b9:d3:1b:c9:38:47: c5:63:3a:44:c6:7e:ee:23:80:43:33:3b:22:d8:c2: 39:0b:30:9c:69:ed:60:0f:96:f5:2e:15:d8:d9:e1: 6d:c6:06:c4:36:4c:94:e0:c5:f9:65:14:56:db:34: 13:92:39:7f:84:99:e9:2b:3c:02:57:74:ee:67:b2: 8e:e5:23:90:87:72:6a:95:c6:8f:35:65:3e:d8:c0: 9a:24:0a:a4:4f:97:fd:61:01:e0:3f:3c:b2:86:0a: f1:62:be:ec:6a:a1:22:35:6c:94:23:12:3e:1e:72: 4a:1b:aa:af:f7:f4:ea:21:af:ce:81:0d:48:28:7f: c6:30:aa:54:f5:96:75:fe:a1:5a:35:ca:33:39:46: c4:c8:f3:42:05:49:6b:59:46:86:37:ca:ad:fd:19: 9a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:79:88:35:75:5D:42:51:5F:30:0D:6C:81:1D:F3:7D:B6:38:E9:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1b95b7d-ad09-3d7e-b7cf-af67bb04a901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:bb:bf:84:73:28:5b:c8:b6:7a:f1:b9:30:df:cf:72:20:4b: 20:cc:3c:18:42:c7:a5:3e:ed:e0:49:29:6b:73:54:8f:28:bc: 16:00:ef:59:73:b0:20:a6:39:a1:25:3e:ac:52:9e:34:47:1f: be:b6:15:e7:44:5e:59:c5:6f:34:ac:dc:45:77:37:f9:65:b6: 4b:0e:a4:45:e4:84:52:e9:3d:ce:1f:6e:d5:79:89:9f:2f:5d: 33:ee:0a:73:59:a0:0f:f5:48:aa:83:10:2d:a0:40:ff:f5:fc: 07:db:21:ab:bd:6d:9a:65:55:a1:6f:d0:50:d9:64:18:ab:da: 70:97:6f:84:c0:a4:c4:80:99:23:23:66:51:9b:e6:12:1c:dc: c7:52:85:5a:de:97:eb:23:72:a3:23:88:bf:64:75:63:98:92: 5d:ca:69:11:a3:22:71:b7:09:e8:d8:2b:6a:31:3d:f3:b2:6a: 8b:f5:6c:9d:08:75:db:5b:42:2d:80:af:3a:2d:1c:a7:6f:73: 5d:5a:c0:7a:2e:0a:22:ce:9b:fe:db:23:68:c6:6c:6a:6a:86: 74:0a:13:23:03:1e:e5:ef:74:30:30:c3:2a:7d:74:e8:54:a5: 12:ed:ff:38:c5:74:63:d8:09:6b:49:6d:7e:55:ce:2e:0f:82: b2:76:2a:83 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9iku6mlAA/kPx6HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZDE2MDllNzgtOWMzNC00MTRjLTlhMDktMGUxYTY4NTRlYjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuRS67tp18VbfK3O+bkFkZO+6I8rLUUeVMV/ MyuIubK4J6C2tTJDUgnzYetFJwMwL9r0Lc/cnRayFL01BENyu2COYJ1Pj48o8ZRR qsBUy+rYbEyn6KP4WVqqmAmy9EKrBTS50xvJOEfFYzpExn7uI4BDMzsi2MI5CzCc ae1gD5b1LhXY2eFtxgbENkyU4MX5ZRRW2zQTkjl/hJnpKzwCV3TuZ7KO5SOQh3Jq lcaPNWU+2MCaJAqkT5f9YQHgPzyyhgrxYr7saqEiNWyUIxI+HnJKG6qv9/TqIa/O gQ1IKH/GMKpU9ZZ1/qFaNcozOUbEyPNCBUlrWUaGN8qt/RmaTQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEl5iDV1XUJRXzANbIEd8322OOmQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDFiOTViN2QtYWQwOS0z ZDdlLWI3Y2YtYWY2N2JiMDRhOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDu7+EcyhbyLZ68bkw389yIEsgzDwYQselPu3gSSlrc1SPKLwWAO9Z c7AgpjmhJT6sUp40Rx++thXnRF5ZxW80rNxFdzf5ZbZLDqRF5IRS6T3OH27VeYmf L10z7gpzWaAP9UiqgxAtoED/9fwH2yGrvW2aZVWhb9BQ2WQYq9pwl2+EwKTEgJkj I2ZRm+YSHNzHUoVa3pfrI3KjI4i/ZHVjmJJdymkRoyJxtwno2CtqMT3zsmqL9Wyd CHXbW0ItgK86LRynb3NdWsB6Lgoizpv+2yNoxmxqaoZ0ChMjAx7l73QwMMMqfXTo VKUS7f84xXRj2AlrSW1+Vc4uD4KydiqD -----END CERTIFICATE-----Generated at Tue Oct 6 18:50:50 2026 by rpki-client