$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eaa5300a-2847-350a-b1b9-d0dbb909e491.roa File: eaa5300a-2847-350a-b1b9-d0dbb909e491.roa (raw, json) Hash identifier: /0m0pDOlmpzm32inE8hycXdwVVAMz5UWtRT638uGcXU= Subject key identifier: 9C:95:36:10:B1:38:B4:C7:9A:8C:FC:63:1F:4B:D7:1B:AD:41:96:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974E8FADC45C60738F00E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eaa5300a-2847-350a-b1b9-d0dbb909e491.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 27544 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:e8:fa:dc:45:c6:07:38:f0:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bbed1f1b-f57e-44cb-885e-e3edb908c5f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:46:6a:8e:d6:96:7e:cc:4a:1a:c9:2a:09:33: 69:1e:56:33:c5:6d:49:e8:5f:86:6b:e8:02:0c:0d: 51:0f:7e:89:47:15:ce:38:ee:80:b1:cb:0c:1d:9e: 18:e1:be:00:cb:9a:c9:12:67:4a:de:db:02:13:bc: 33:af:26:ec:3d:e0:09:16:e3:d5:2e:08:ce:37:db: 56:d2:5d:3b:ec:3f:5e:7a:d8:04:4d:4a:a0:fc:52: 03:89:96:0c:09:d5:fb:fe:a9:92:98:c2:3c:8a:eb: 7d:e4:79:f6:77:7c:05:74:a1:ab:ff:86:fe:b1:98: b4:6d:53:44:64:09:f6:15:d9:6f:3e:4e:b0:ee:c2: aa:7b:af:ba:60:b3:ca:71:e8:b9:22:7d:94:80:98: a4:47:bf:f8:15:ae:3e:ad:02:04:c1:dc:ae:b6:ff: 1e:f5:bf:a8:82:73:e4:23:78:54:0a:ed:bb:63:97: 81:cf:39:70:f5:71:a1:f9:7d:55:9f:a3:bb:77:da: fa:6b:20:f0:d7:bf:cb:9c:91:37:d5:a8:f2:55:ba: b1:7c:0e:6c:be:39:6f:74:5e:de:5a:8a:11:0d:f5: d9:31:86:ae:26:17:d3:29:9f:2c:47:38:ec:6f:ec: 2c:a2:3a:33:be:f5:53:9f:9a:b3:c5:89:3a:51:6c: bf:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:95:36:10:B1:38:B4:C7:9A:8C:FC:63:1F:4B:D7:1B:AD:41:96:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eaa5300a-2847-350a-b1b9-d0dbb909e491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:93:1d:64:e5:37:e4:34:f7:5c:36:94:e7:16:2a:2d:31:be: 2c:bc:1b:d4:af:15:2b:6d:06:f9:51:fd:af:63:e2:80:fe:51: e0:cd:95:83:0d:96:d2:d9:c1:f3:45:79:6f:91:37:d3:71:c0: 8d:b7:1a:40:34:34:c2:53:ab:6c:10:24:a3:a8:b5:db:b1:73: b2:78:4a:04:4b:80:76:33:2e:b0:18:4f:4e:79:66:22:61:bf: e7:cb:59:9b:a5:2d:af:ef:09:42:bc:98:98:3a:2d:cb:8a:72: 37:14:1e:1e:a2:45:dc:77:c8:00:e2:51:e3:35:04:01:09:a1: 6d:97:8b:1a:84:e5:1a:5d:1c:6d:5f:e0:5a:77:8e:e9:16:f0: 62:7b:06:bc:65:30:d5:a4:bb:a0:cd:d4:4d:ab:e5:b6:0a:a1: a1:46:94:38:49:d8:1c:14:f4:17:af:e0:12:67:98:ad:4a:72: c3:1e:6a:84:c7:cb:ee:63:9b:80:2e:ba:b0:06:19:41:5b:20: 67:bf:12:53:9b:df:b8:1c:b9:db:ba:fe:28:20:71:61:54:e0: 5f:57:ea:3c:47:8b:b2:63:7b:94:20:3a:12:7e:32:5c:8b:16: fd:79:99:61:f3:17:4f:44:9d:93:9d:39:29:55:95:a0:fb:bc: 7e:07:71:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdOj63EXGBzjwDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmJlZDFmMWItZjU3ZS00NGNiLTg4NWUtZTNlZGI5MDhjNWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUZqjtaWfsxKGskqCTNpHlYzxW1J6F+Ga+gC DA1RD36JRxXOOO6AscsMHZ4Y4b4Ay5rJEmdK3tsCE7wzrybsPeAJFuPVLgjON9tW 0l077D9eetgETUqg/FIDiZYMCdX7/qmSmMI8iut95Hn2d3wFdKGr/4b+sZi0bVNE ZAn2FdlvPk6w7sKqe6+6YLPKcei5In2UgJikR7/4Fa4+rQIEwdyutv8e9b+ognPk I3hUCu27Y5eBzzlw9XGh+X1Vn6O7d9r6ayDw17/LnJE31ajyVbqxfA5svjlvdF7e WooRDfXZMYauJhfTKZ8sRzjsb+wsojozvvVTn5qzxYk6UWy/3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyVNhCxOLTHmoz8Yx9L1xutQZaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWFhNTMwMGEtMjg0Ny0z NTBhLWIxYjktZDBkYmI5MDllNDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOTHWTlN+Q091w2lOcWKi0xviy8G9SvFSttBvlR/a9j4oD+UeDNlYMN ltLZwfNFeW+RN9NxwI23GkA0NMJTq2wQJKOotduxc7J4SgRLgHYzLrAYT055ZiJh v+fLWZulLa/vCUK8mJg6LcuKcjcUHh6iRdx3yADiUeM1BAEJoW2XixqE5RpdHG1f 4Fp3jukW8GJ7BrxlMNWku6DN1E2r5bYKoaFGlDhJ2BwU9Bev4BJnmK1KcsMeaoTH y+5jm4AuurAGGUFbIGe/ElOb37gcudu6/iggcWFU4F9X6jxHi7Jje5QgOhJ+MlyL Fv15mWHzF09EnZOdOSlVlaD7vH4HcRM= -----END CERTIFICATE-----Generated at Thu Oct 8 05:24:58 2026 by rpki-client