$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dab43f4f-91c1-3990-b625-979d518dd1bd.roa File: dab43f4f-91c1-3990-b625-979d518dd1bd.roa (raw, json) Hash identifier: NUvupbb11XmP2fRH+qZClFUlsQDUcRaAvTrG6iKvJWI= Subject key identifier: E7:82:0E:8D:19:EF:60:CB:8D:E1:7C:F5:C3:82:37:88:DC:CC:8C:FF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F501F3AF9776F6F1DE00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dab43f4f-91c1-3990-b625-979d518dd1bd.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 36622 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f5:01:f3:af:97:76:f6:f1:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=49443ba3-6a42-473f-874b-d82f106dc6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d1:dc:81:2f:64:0d:1e:f2:70:1f:15:84:48: d6:5a:44:80:b3:53:21:2b:6b:17:81:ba:f2:5a:be: 25:79:e1:42:6d:a5:48:59:6a:1a:ee:c3:0d:92:11: 9d:de:08:7f:d2:28:ca:54:b3:ac:df:16:98:0d:f1: 74:60:3f:21:e0:9b:86:a4:71:80:6e:8e:25:7d:3d: 46:99:6e:9e:48:6b:6b:00:65:e7:39:f0:cc:e3:ee: a0:d7:0f:67:c5:38:d7:23:fb:1f:5c:e5:42:bd:dd: 7f:fe:83:1c:f8:72:da:17:b2:78:73:55:0c:f1:22: 52:f1:bb:e2:f6:07:ac:8f:bc:9d:d6:a8:91:0d:07: b2:c0:99:1e:03:22:f0:f2:36:aa:ef:0b:9a:98:d0: fb:9f:3e:35:d4:38:b0:3f:65:b4:70:1c:dc:6c:a1: 4a:25:3c:e2:39:95:54:80:e5:bf:93:07:ca:54:67: ee:13:66:d3:56:20:05:93:a0:2f:08:34:72:d4:b3: 0b:0d:da:0b:20:6a:5e:70:52:ea:7a:43:7b:1f:09: 59:bd:4a:8a:d0:b6:eb:4d:8b:6f:9b:62:12:83:a6: 41:20:d2:3a:17:d7:d4:d8:5f:30:34:aa:b9:16:02: 7e:28:68:9e:7c:62:87:c0:f3:e8:28:45:3f:8d:32: 60:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:82:0E:8D:19:EF:60:CB:8D:E1:7C:F5:C3:82:37:88:DC:CC:8C:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dab43f4f-91c1-3990-b625-979d518dd1bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:3d:ec:cf:b5:2c:a0:28:b5:4f:eb:15:19:56:1a:10:19:38: a3:7c:18:24:aa:c5:cf:ab:16:46:c5:b5:e5:80:52:4a:c1:0b: e3:a6:c1:52:28:70:93:58:5b:a5:66:87:e0:a6:82:ca:63:55: f0:d8:5d:8e:b4:9a:32:57:69:ce:c9:c8:df:58:16:44:f7:43: 8d:33:f7:48:f0:c5:1f:b5:3f:9c:61:72:a8:32:46:f9:10:74: 95:ae:f8:58:28:75:a5:3a:52:b5:a5:18:97:e9:80:cb:5e:7d: 88:28:36:b8:1c:11:66:8d:cf:9a:65:8a:32:c1:de:b9:be:73: 30:44:25:37:07:7a:a6:0f:84:eb:d2:5c:2c:34:94:cd:0c:36: c5:69:cd:30:e6:6b:13:c1:83:8c:01:4d:5b:e7:7e:ef:ab:42: 30:78:89:51:74:b1:97:2d:5a:fc:2b:4c:1a:0c:df:96:5c:90: e9:a2:4f:78:9a:04:7c:2c:e0:16:a0:36:9e:65:d2:42:ff:50: b0:4d:5d:cf:b4:32:c5:0d:7e:7c:e6:b1:5b:0f:e1:d0:cf:a3: 29:ac:a0:aa:75:28:b0:86:28:be:b1:5a:bf:e5:b4:c3:bc:c4: de:aa:70:55:92:bd:5d:09:e3:b2:5b:34:17:d9:05:4f:da:d8: 06:22:ff:34 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvUB86+Xdvbx3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NDk0NDNiYTMtNmE0Mi00NzNmLTg3NGItZDgyZjEwNmRjNmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9HcgS9kDR7ycB8VhEjWWkSAs1MhK2sXgbry Wr4leeFCbaVIWWoa7sMNkhGd3gh/0ijKVLOs3xaYDfF0YD8h4JuGpHGAbo4lfT1G mW6eSGtrAGXnOfDM4+6g1w9nxTjXI/sfXOVCvd1//oMc+HLaF7J4c1UM8SJS8bvi 9gesj7yd1qiRDQeywJkeAyLw8jaq7wuamND7nz411DiwP2W0cBzcbKFKJTziOZVU gOW/kwfKVGfuE2bTViAFk6AvCDRy1LMLDdoLIGpecFLqekN7HwlZvUqK0LbrTYtv m2ISg6ZBINI6F9fU2F8wNKq5FgJ+KGiefGKHwPPoKEU/jTJgewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOeCDo0Z72DLjeF89cOCN4jczIz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGFiNDNmNGYtOTFjMS0z OTkwLWI2MjUtOTc5ZDUxOGRkMWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA6PezPtSygKLVP6xUZVhoQGTijfBgkqsXPqxZGxbXlgFJKwQvjpsFS KHCTWFulZofgpoLKY1Xw2F2OtJoyV2nOycjfWBZE90ONM/dI8MUftT+cYXKoMkb5 EHSVrvhYKHWlOlK1pRiX6YDLXn2IKDa4HBFmjc+aZYoywd65vnMwRCU3B3qmD4Tr 0lwsNJTNDDbFac0w5msTwYOMAU1b537vq0IweIlRdLGXLVr8K0waDN+WXJDpok94 mgR8LOAWoDaeZdJC/1CwTV3PtDLFDX585rFbD+HQz6MprKCqdSiwhii+sVq/5bTD vMTeqnBVkr1dCeOyWzQX2QVP2tgGIv80 -----END CERTIFICATE-----Generated at Tue Oct 6 11:42:10 2026 by rpki-client