$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de129a61-130f-3c6a-a5f8-4e5cc77abb17.roa File: de129a61-130f-3c6a-a5f8-4e5cc77abb17.roa (raw, json) Hash identifier: laNqcWzZVTR10i/ccIimQtWh+/jNBw5grgYcgZBpadg= Subject key identifier: A5:B4:50:88:61:E7:74:FE:0E:B7:43:AC:D8:D1:41:88:48:BA:50:4E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F04890D1CB68A84B0000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de129a61-130f-3c6a-a5f8-4e5cc77abb17.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396563 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f0:48:90:d1:cb:68:a8:4b:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=ebc80e74-aab5-452a-8d07-79368e01b5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fd:4e:84:7f:22:9f:a3:d6:41:01:cb:9e:62: b2:57:1f:f5:93:cd:b7:4b:c5:a4:eb:0f:5f:7a:27: a8:49:13:84:bc:4c:43:49:f3:ef:78:f2:97:04:2a: bb:98:b3:d0:83:57:5b:5e:dc:c6:7f:d7:d7:7c:e9: 81:ba:f6:e6:5c:5b:e1:fe:89:22:f6:a1:c0:e5:e6: c4:da:5a:91:af:06:b5:2b:8e:cd:3a:33:20:6a:34: fd:d8:0f:47:94:cd:8a:43:7c:3c:33:8d:23:c5:c9: c1:0d:57:4b:02:bf:4c:27:92:97:2c:d6:93:c5:dd: 7f:c6:9f:71:d7:af:d3:a5:52:32:d1:2f:db:51:ec: 85:91:e1:a0:bf:a8:a3:4c:5b:fa:82:20:59:40:19: 0d:f0:e0:2e:3d:7f:e5:dc:60:37:69:a4:e3:f5:87: f4:40:e4:d7:8d:03:9c:68:5f:03:bb:18:43:4a:af: 1f:5b:9b:66:54:e4:4a:c2:e1:dc:91:38:d0:d0:05: f6:17:72:00:80:3f:21:b1:ab:6b:5f:7b:30:67:a0: 02:82:4a:a0:7a:fb:5d:59:ab:49:fd:13:5b:2f:ab: 6c:1d:e5:65:20:a4:5d:2f:91:4d:85:71:3c:03:b5: ac:b2:e3:a0:38:0b:24:38:36:a4:a7:4d:60:a1:c0: 92:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B4:50:88:61:E7:74:FE:0E:B7:43:AC:D8:D1:41:88:48:BA:50:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de129a61-130f-3c6a-a5f8-4e5cc77abb17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b6:d6:3f:b9:9e:bf:29:e3:15:3c:ce:bc:72:46:04:2f:69: cf:cd:7a:b4:69:72:8e:d3:95:19:f3:2c:0c:f4:07:a5:42:e3: 23:5a:6e:23:59:7b:9e:79:3e:37:53:0f:20:99:50:f1:a5:d9: 97:cc:a7:4d:45:db:aa:6d:55:0e:fd:ed:ff:05:7f:47:1f:cd: 85:30:a6:02:ce:24:1c:58:48:ca:ca:ed:e5:5f:78:bd:be:8b: 03:26:ad:d9:f3:40:61:25:d4:2f:c7:70:b5:04:9a:6c:6b:3f: ae:d2:66:8e:11:e2:7f:64:43:9e:14:12:90:c4:4f:2b:9c:3a: 0e:d5:5d:3d:80:75:b6:e2:63:8a:5b:0a:5f:22:8e:0a:96:c5: b4:75:22:1a:4e:9c:b4:23:6d:45:a2:5f:ae:c7:67:15:fb:df: b5:d9:7b:a0:cf:c2:4d:59:f9:c8:0f:72:c2:b5:92:0e:70:1d: 6d:2e:7a:3c:ac:3c:01:d6:f8:e8:22:5c:e9:78:f3:ba:85:6b: 26:88:21:1d:92:ab:bf:f8:4c:f8:f6:8b:86:86:54:e1:88:90: 37:ff:ba:53:a5:fe:b2:bf:44:ef:41:1e:d5:6a:0f:0a:35:59: 9a:f5:4c:34:b5:01:db:aa:5d:c5:98:0d:97:52:fb:22:cb:90: f3:61:90:1c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvBIkNHLaKhLAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZWJjODBlNzQtYWFiNS00NTJhLThkMDctNzkzNjhlMDFiNWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f1OhH8in6PWQQHLnmKyVx/1k823S8Wk6w9f eieoSROEvExDSfPvePKXBCq7mLPQg1dbXtzGf9fXfOmBuvbmXFvh/oki9qHA5ebE 2lqRrwa1K47NOjMgajT92A9HlM2KQ3w8M40jxcnBDVdLAr9MJ5KXLNaTxd1/xp9x 16/TpVIy0S/bUeyFkeGgv6ijTFv6giBZQBkN8OAuPX/l3GA3aaTj9Yf0QOTXjQOc aF8DuxhDSq8fW5tmVORKwuHckTjQ0AX2F3IAgD8hsatrX3swZ6ACgkqgevtdWatJ /RNbL6tsHeVlIKRdL5FNhXE8A7WssuOgOAskODakp01gocCSTQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKW0UIhh53T+DrdDrNjRQYhIulBOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGUxMjlhNjEtMTMwZi0z YzZhLWE1ZjgtNGU1Y2M3N2FiYjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBlttY/uZ6/KeMVPM68ckYEL2nPzXq0aXKO05UZ8ywM9AelQuMjWm4j WXueeT43Uw8gmVDxpdmXzKdNRduqbVUO/e3/BX9HH82FMKYCziQcWEjKyu3lX3i9 vosDJq3Z80BhJdQvx3C1BJpsaz+u0maOEeJ/ZEOeFBKQxE8rnDoO1V09gHW24mOK WwpfIo4KlsW0dSIaTpy0I21Fol+ux2cV+9+12Xugz8JNWfnID3LCtZIOcB1tLno8 rDwB1vjoIlzpePO6hWsmiCEdkqu/+Ez49ouGhlThiJA3/7pTpf6yv0TvQR7Vag8K NVma9Uw0tQHbql3FmA2XUvsiy5DzYZAc -----END CERTIFICATE-----Generated at Tue Oct 6 15:58:57 2026 by rpki-client