$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3d98473-927e-303b-8f85-d4838579f165.roa File: d3d98473-927e-303b-8f85-d4838579f165.roa (raw, json) Hash identifier: S3FBIVDj0FqMl3xAJ7ZvUg9HiYmFj17u8HJd4A6Q81Q= Subject key identifier: 96:5E:15:ED:6D:08:BC:E8:97:92:68:93:01:CF:7A:71:72:1B:AF:25 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F5252EBD80A32CD47A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3d98473-927e-303b-8f85-d4838579f165.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396571 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f5:25:2e:bd:80:a3:2c:d4:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=0edc2899-3b9c-490d-a9ec-ab4dab2d9d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:17:66:31:9e:12:05:b0:78:69:30:f7:d6:68: 2b:21:8e:d3:0c:da:dc:2b:6b:c7:c3:96:a6:70:5f: be:1e:94:40:16:a0:bd:09:b5:25:c1:40:cf:db:d6: fe:53:17:58:0c:c9:3b:1d:8d:2c:ba:a5:44:6a:0e: 66:40:fe:74:fe:98:1e:7a:a1:ab:3c:bb:6d:53:90: cf:19:b4:77:94:6c:90:85:35:51:a7:ee:39:82:25: 72:41:65:55:68:6a:a8:10:75:a3:11:9a:9f:2e:2c: f2:3b:9a:57:4f:70:ed:12:a7:c9:66:7d:82:54:22: 88:43:62:c0:f2:25:45:79:b7:36:6b:25:49:05:6c: 96:1e:1b:54:8b:a3:04:f8:9b:7c:ef:f1:46:93:ae: ed:ce:54:a4:7c:e8:37:9c:ec:b2:ab:b6:ae:13:2c: eb:94:28:b3:5b:12:59:0e:96:07:1b:16:aa:30:2f: 0c:35:cb:e0:db:68:bd:8e:18:a9:bb:65:19:57:b0: e3:bb:25:79:95:d5:75:db:f4:46:01:d5:5b:de:8d: 43:9f:dd:45:c2:63:c9:e3:fd:bf:0a:d9:c4:1b:5b: 00:d4:22:4b:6a:52:f2:51:95:4e:92:9d:a2:a2:81: e1:da:2c:1e:31:c5:99:45:75:67:c3:c8:3b:a2:1f: 9c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5E:15:ED:6D:08:BC:E8:97:92:68:93:01:CF:7A:71:72:1B:AF:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3d98473-927e-303b-8f85-d4838579f165.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:36:4a:37:95:17:59:94:90:df:db:47:c1:d1:14:1d:a1:af: d7:46:e3:26:73:23:98:b0:67:f6:b7:c3:2b:e7:fc:01:37:88: 8a:59:8b:fb:ec:e5:83:6b:59:70:84:9c:a4:34:df:07:d3:71: 3e:33:20:c0:df:ba:e3:4e:98:f5:40:41:60:54:43:d2:94:12: 68:1d:1b:6f:b0:5a:e8:f6:ac:f3:3a:ce:4b:10:ba:bc:9c:ad: 7b:d5:b4:38:f8:ab:70:a6:09:29:8f:8e:ec:a0:ab:d5:7b:54: 9f:57:be:34:6e:16:7a:7f:8c:fd:1c:14:79:1e:d6:06:13:6f: 1b:9d:6f:9f:78:26:74:f5:bc:59:c6:e6:34:51:96:24:c3:6b: 55:19:12:a6:e9:3a:5b:63:ee:d6:20:d8:af:fa:3b:7c:04:3b: e6:9f:3f:e0:a3:4b:9b:64:2a:9e:fd:02:a8:aa:c7:9b:75:fc: 5c:46:72:23:c9:ad:c4:18:53:41:91:c0:07:45:60:ae:c6:17: e9:5c:5f:fc:11:52:f0:7b:3d:e6:59:cf:c4:8b:ea:64:f1:c3: 56:35:34:65:2d:2a:05:59:2e:86:1b:68:e9:86:e2:b1:72:28: 37:65:f2:28:8b:78:00:d1:47:4a:8a:a1:9b:02:f3:6c:a6:f5: 4c:49:70:b9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvUlLr2AoyzUeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MGVkYzI4OTktM2I5Yy00OTBkLWE5ZWMtYWI0ZGFiMmQ5ZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxdmMZ4SBbB4aTD31mgrIY7TDNrcK2vHw5am cF++HpRAFqC9CbUlwUDP29b+UxdYDMk7HY0suqVEag5mQP50/pgeeqGrPLttU5DP GbR3lGyQhTVRp+45giVyQWVVaGqoEHWjEZqfLizyO5pXT3DtEqfJZn2CVCKIQ2LA 8iVFebc2ayVJBWyWHhtUi6ME+Jt87/FGk67tzlSkfOg3nOyyq7auEyzrlCizWxJZ DpYHGxaqMC8MNcvg22i9jhipu2UZV7DjuyV5ldV12/RGAdVb3o1Dn91FwmPJ4/2/ CtnEG1sA1CJLalLyUZVOkp2iooHh2iweMcWZRXVnw8g7oh+cCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJZeFe1tCLzol5JokwHPenFyG68lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDNkOTg0NzMtOTI3ZS0z MDNiLThmODUtZDQ4Mzg1NzlmMTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAlNko3lRdZlJDf20fB0RQdoa/XRuMmcyOYsGf2t8Mr5/wBN4iKWYv7 7OWDa1lwhJykNN8H03E+MyDA37rjTpj1QEFgVEPSlBJoHRtvsFro9qzzOs5LELq8 nK171bQ4+Ktwpgkpj47soKvVe1SfV740bhZ6f4z9HBR5HtYGE28bnW+feCZ09bxZ xuY0UZYkw2tVGRKm6TpbY+7WINiv+jt8BDvmnz/go0ubZCqe/QKoqsebdfxcRnIj ya3EGFNBkcAHRWCuxhfpXF/8EVLwez3mWc/Ei+pk8cNWNTRlLSoFWS6GG2jphuKx cig3ZfIoi3gA0UdKiqGbAvNspvVMSXC5 -----END CERTIFICATE-----Generated at Tue Oct 6 16:00:27 2026 by rpki-client