$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e09b631f-1eaa-36c6-9856-54d82485ac05.roa File: e09b631f-1eaa-36c6-9856-54d82485ac05.roa (raw, json) Hash identifier: r6E3cXXrZIcb2lwIYSez284ixhRn/fI5dhUza4DHJJg= Subject key identifier: 8F:9F:5D:4D:0E:6B:B1:00:D1:98:61:20:B4:A3:1A:E2:A0:0C:C2:07 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F10B228BA94D5923BA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e09b631f-1eaa-36c6-9856-54d82485ac05.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396610 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f1:0b:22:8b:a9:4d:59:23:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=2cfb42ab-831d-4fc3-a172-1e0e07db68a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:6e:ed:9a:0a:a3:fd:0f:22:e8:27:b7:79: d8:b5:2d:ee:e0:2e:d4:1d:4a:2b:9e:eb:6f:d8:28: 42:3a:11:40:1b:45:0d:78:80:db:2b:08:2e:4b:44: b6:ea:ba:18:f2:dc:fd:38:9d:6f:c1:97:64:50:8a: 41:37:20:cf:26:fa:7b:f4:9b:96:bd:88:b9:0b:f3: 6b:bb:35:04:aa:5a:1a:6e:f0:45:22:a7:21:b9:91: 6e:b5:79:1a:96:97:08:6e:69:be:e9:75:85:fe:76: 36:9b:ee:2e:01:23:34:db:b6:6e:90:3b:da:21:45: a3:64:35:80:d7:01:3a:14:3b:86:b4:f8:c5:e7:f0: 8e:8d:7f:0e:7e:31:da:b2:8f:26:32:07:57:aa:5f: 32:c9:6f:85:90:47:7a:36:a3:0a:97:5b:57:68:73: b8:34:b6:7b:36:9e:52:7f:7b:37:05:03:3e:a8:5b: 3c:17:a2:3c:3e:48:df:a8:5a:6c:f3:29:03:06:18: 48:8c:0e:8d:dc:d1:66:36:9a:b6:31:68:dd:70:c6: ec:7f:4a:c4:48:40:3b:a2:7f:8d:e7:2d:fe:aa:02: e4:e0:b5:12:a6:15:5b:04:05:79:b7:9a:0e:c6:fd: 70:67:47:5f:87:ce:fd:7e:12:ec:10:49:0c:30:14: cc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9F:5D:4D:0E:6B:B1:00:D1:98:61:20:B4:A3:1A:E2:A0:0C:C2:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e09b631f-1eaa-36c6-9856-54d82485ac05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:17:3c:e8:74:0c:42:98:c6:64:0c:e5:4d:fe:1a:85:d4:0b: 46:96:8e:32:04:b0:64:63:e6:5a:4c:00:9f:c6:d1:da:8e:54: e6:db:8a:5a:d6:91:a0:59:8f:ea:18:8d:f9:26:f4:6b:c9:21: c9:9a:8b:3d:36:63:15:16:b0:a0:03:3f:2d:82:9e:88:d7:1f: 9f:3c:a7:57:28:b4:47:ba:2c:91:60:85:ae:ee:bb:05:fe:de: 35:27:18:ef:52:12:1f:04:00:ef:03:6d:a3:b6:0a:60:bd:ad: fc:1e:b2:fc:b8:63:c6:56:3c:69:b7:65:49:52:67:13:23:95: ee:43:7d:6f:cc:d3:86:46:3a:7d:4c:f3:99:9e:cf:b4:f6:c2: 0d:6e:3f:7b:8a:19:a1:63:f7:f0:d9:a1:eb:25:93:a0:7c:18: 41:3b:8e:d7:90:bf:24:75:dd:68:b4:5d:b7:f8:b5:21:d2:ad: c1:db:0a:26:0f:34:b8:52:d7:fc:61:68:38:f4:35:c6:d7:98: 04:d3:8f:3c:b8:8e:3b:14:b2:f6:43:62:c1:26:dc:c8:71:74: e5:37:7e:73:8a:c7:59:11:69:90:b4:10:df:2d:bf:94:22:da: d1:48:80:43:b3:59:a7:cd:62:b4:b9:6e:0d:6e:3c:4b:e7:7e: b8:74:e6:01 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvELIoupTVkjuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MmNmYjQyYWItODMxZC00ZmMzLWExNzItMWUwZTA3ZGI2OGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/5u7ZoKo/0PIugnt3nYtS3u4C7UHUornutv 2ChCOhFAG0UNeIDbKwguS0S26roY8tz9OJ1vwZdkUIpBNyDPJvp79JuWvYi5C/Nr uzUEqloabvBFIqchuZFutXkalpcIbmm+6XWF/nY2m+4uASM027ZukDvaIUWjZDWA 1wE6FDuGtPjF5/COjX8OfjHaso8mMgdXql8yyW+FkEd6NqMKl1tXaHO4NLZ7Np5S f3s3BQM+qFs8F6I8PkjfqFps8ykDBhhIjA6N3NFmNpq2MWjdcMbsf0rESEA7on+N 5y3+qgLk4LUSphVbBAV5t5oOxv1wZ0dfh879fhLsEEkMMBTMAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI+fXU0Oa7EA0ZhhILSjGuKgDMIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTA5YjYzMWYtMWVhYS0z NmM2LTk4NTYtNTRkODI0ODVhYzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB+FzzodAxCmMZkDOVN/hqF1AtGlo4yBLBkY+ZaTACfxtHajlTm24pa 1pGgWY/qGI35JvRrySHJmos9NmMVFrCgAz8tgp6I1x+fPKdXKLRHuiyRYIWu7rsF /t41JxjvUhIfBADvA22jtgpgva38HrL8uGPGVjxpt2VJUmcTI5XuQ31vzNOGRjp9 TPOZns+09sINbj97ihmhY/fw2aHrJZOgfBhBO47XkL8kdd1otF23+LUh0q3B2wom DzS4Utf8YWg49DXG15gE0488uI47FLL2Q2LBJtzIcXTlN35zisdZEWmQtBDfLb+U ItrRSIBDs1mnzWK0uW4NbjxL5364dOYB -----END CERTIFICATE-----Generated at Tue Oct 6 23:10:01 2026 by rpki-client