$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ddb928dd-83a5-3dd8-8cb7-a67c03eaf490.roa File: ddb928dd-83a5-3dd8-8cb7-a67c03eaf490.roa (raw, json) Hash identifier: H+hRw7HPFT62bJKaBCG05ZfIh2BMZlbCvzCBt/KHvZg= Subject key identifier: C5:EB:20:79:10:0F:F0:3B:1B:9F:8D:66:38:12:4B:2F:C5:D6:0E:B9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA78875C9DC855D3339E0D6E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ddb928dd-83a5-3dd8-8cb7-a67c03eaf490.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36624 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:75:c9:dc:85:5d:33:39:e0:d6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3dc87ecc-14cb-43d6-9b91-930af510ac84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:71:bd:71:51:84:7e:05:99:01:fb:91:ce:43: 94:bb:e4:15:06:1e:67:2b:68:42:98:b1:d8:68:25: d7:02:fd:34:97:53:e8:e6:1a:84:98:18:6a:c5:91: d2:be:20:57:31:c9:68:4e:80:29:54:98:a6:8d:77: c1:f1:72:73:fb:19:af:c0:f0:f2:38:e7:8b:02:ee: 15:a4:03:cb:47:8a:5b:e6:e4:8e:34:e0:ae:7b:fe: d4:34:d5:d2:c3:81:30:5d:41:2f:96:9b:04:bb:45: 87:cc:dd:10:eb:cd:29:9b:a6:67:b2:6c:ce:36:00: 5f:89:d9:17:36:44:55:d6:db:86:7c:38:51:e7:b9: 8a:84:33:d6:ac:9a:06:b1:f2:fb:57:85:c0:cb:34: 7c:4b:1b:f7:11:41:62:eb:04:8b:18:b0:2d:e7:57: 9d:3b:75:6b:1f:54:d9:eb:2d:85:b3:57:50:ca:33: 3f:6f:f6:1f:a7:11:c5:7c:50:cd:0c:30:f2:be:7f: 20:61:21:59:53:d2:4b:48:08:f6:e0:c7:6f:04:ea: 15:61:f6:8c:50:be:9d:44:96:f3:77:40:79:cd:69: 47:89:b5:41:01:d4:f6:8b:6b:10:db:14:65:11:fa: c7:10:ff:e9:2c:04:36:8d:58:1b:02:7f:e4:c0:38: 50:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EB:20:79:10:0F:F0:3B:1B:9F:8D:66:38:12:4B:2F:C5:D6:0E:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ddb928dd-83a5-3dd8-8cb7-a67c03eaf490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d6:12:a9:8a:72:5e:ac:bc:cc:eb:ac:fc:77:ec:31:ae:3c: 09:de:3c:8b:02:98:c9:84:e8:f2:c9:bc:95:b2:00:04:e2:42: ee:43:ec:3b:2c:8b:a5:dd:7d:f5:d4:bd:7e:f0:24:e6:69:89: 4b:51:f7:33:06:3d:f5:cd:10:20:42:7f:96:9e:a4:de:91:66: 05:64:67:7f:90:98:9b:ca:e7:48:e9:a5:0e:32:bb:c2:5b:bd: 02:63:2e:cd:38:f1:3f:f7:78:54:eb:45:b0:2d:24:70:ac:86: cb:d3:22:d8:91:cc:ef:df:96:f2:cc:e5:fe:0d:f1:77:8c:ce: 25:97:95:17:3c:bb:d5:58:0a:0f:69:ab:d0:51:eb:09:26:5d: 78:eb:be:95:26:33:f5:4b:1b:2a:1f:79:ec:ff:68:46:fd:86: 1f:e1:ba:b2:d3:17:37:66:14:f4:12:e5:67:ac:4d:cc:a4:d3: 2f:16:21:8f:69:bb:ef:c2:c4:8f:37:32:68:89:86:d5:5f:51: b4:33:6d:d4:d0:bf:8a:34:26:72:cb:64:dc:30:47:9c:c9:54: 1f:b9:eb:7a:ee:4f:00:07:79:a4:5a:b0:9c:7a:82:5e:8d:45: 4d:fb:3c:8d:ad:57:5a:7d:ea:d7:1b:b4:49:ff:7c:ee:0e:77: 3a:d9:51:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niHXJ3IVdMzng1uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2RjODdlY2MtMTRjYi00M2Q2LTliOTEtOTMwYWY1MTBhYzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nG9cVGEfgWZAfuRzkOUu+QVBh5nK2hCmLHY aCXXAv00l1Po5hqEmBhqxZHSviBXMcloToApVJimjXfB8XJz+xmvwPDyOOeLAu4V pAPLR4pb5uSONOCue/7UNNXSw4EwXUEvlpsEu0WHzN0Q680pm6ZnsmzONgBfidkX NkRV1tuGfDhR57mKhDPWrJoGsfL7V4XAyzR8Sxv3EUFi6wSLGLAt51edO3VrH1TZ 6y2Fs1dQyjM/b/YfpxHFfFDNDDDyvn8gYSFZU9JLSAj24MdvBOoVYfaMUL6dRJbz d0B5zWlHibVBAdT2i2sQ2xRlEfrHEP/pLAQ2jVgbAn/kwDhQMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXrIHkQD/A7G5+NZjgSSy/F1g65MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGRiOTI4ZGQtODNhNS0z ZGQ4LThjYjctYTY3YzAzZWFmNDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPWEqmKcl6svMzrrPx37DGuPAnePIsCmMmE6PLJvJWyAATiQu5D7Dss i6XdffXUvX7wJOZpiUtR9zMGPfXNECBCf5aepN6RZgVkZ3+QmJvK50jppQ4yu8Jb vQJjLs048T/3eFTrRbAtJHCshsvTItiRzO/flvLM5f4N8XeMziWXlRc8u9VYCg9p q9BR6wkmXXjrvpUmM/VLGyofeez/aEb9hh/hurLTFzdmFPQS5WesTcyk0y8WIY9p u+/CxI83MmiJhtVfUbQzbdTQv4o0JnLLZNwwR5zJVB+563ruTwAHeaRasJx6gl6N RU37PI2tV1p96tcbtEn/fO4OdzrZUdM= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:00 2026 by rpki-client