$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec280705-c7b3-339c-8b74-41412840f8bb.roa File: ec280705-c7b3-339c-8b74-41412840f8bb.roa (raw, json) Hash identifier: aoZ8s55F4K6J02GhYxmjzfcBu2wLLnW1KJFj5c+0rfM= Subject key identifier: A9:D7:87:A5:30:C8:12:D6:CD:A2:A4:2E:B6:E2:D4:BF:DD:25:15:B6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F38C70C861B20DB8E260 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec280705-c7b3-339c-8b74-41412840f8bb.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396578 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f3:8c:70:c8:61:b2:0d:b8:e2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=b2a74c7e-6ea8-46a6-8354-2b7268d8deb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ef:d1:da:ce:58:d4:88:a9:d2:63:67:06:2e: 76:55:91:52:39:34:d6:5a:4a:10:af:f9:e3:1d:08: 42:6d:d3:86:75:c2:87:bb:0e:de:f0:13:47:cd:29: 71:f3:37:9b:29:a8:3a:23:03:5d:76:5f:fd:fb:71: 4c:63:27:79:c8:ce:b1:fd:fd:7e:a6:54:33:da:dd: 97:46:a4:ef:9b:de:df:ed:17:a6:91:27:c5:2f:01: f9:83:dd:2e:3e:0d:d6:cd:07:3c:78:05:85:70:8f: b1:89:29:85:31:d1:59:d3:13:ba:30:0e:02:42:ca: b7:f1:0a:fd:8b:6d:97:a7:99:e5:d7:74:09:24:3d: cb:d5:4f:41:32:c2:39:0d:88:2c:de:d6:43:21:ac: 4f:51:7b:7d:be:ea:f5:e8:f4:06:98:2f:a7:eb:31: e5:01:ea:6d:50:8b:8e:c3:f6:4f:28:a4:ec:79:07: 5a:28:e5:7b:98:be:98:66:ef:ef:4a:32:1a:bf:8a: b2:21:7e:0f:b3:c5:d6:be:fd:46:e7:94:c4:6a:e8: 31:05:0d:2b:34:5a:11:58:d9:10:e0:60:10:41:01: da:c3:50:b9:00:cf:6a:42:cf:c2:8c:26:9a:1f:b5: fc:6a:74:52:88:be:00:33:81:4f:f5:d1:e7:96:f4: a4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D7:87:A5:30:C8:12:D6:CD:A2:A4:2E:B6:E2:D4:BF:DD:25:15:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec280705-c7b3-339c-8b74-41412840f8bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a3:e3:65:a8:db:f8:da:d9:2f:6f:7c:34:39:55:fd:76:2c: 27:1e:01:6e:78:07:2c:d3:70:11:da:c8:b1:b3:97:6a:3c:3d: 36:1b:a2:1e:42:f6:e9:c8:0c:ef:ce:66:fa:43:f2:ed:ec:0e: d8:98:cf:0b:5e:a9:02:fe:72:df:d3:fc:4f:42:aa:a6:e5:6d: 06:44:be:cf:eb:3d:22:a3:d0:13:b0:3b:a6:4b:14:e6:46:f0: bc:bb:18:f6:d2:18:4a:75:bd:1e:37:6c:77:99:63:22:71:28: 0c:e1:a6:56:67:64:e3:b3:48:d4:df:f0:42:d3:fa:4a:3f:e0: fc:3b:c8:33:b1:d8:18:83:5f:a3:c9:2b:95:a4:79:a0:72:5a: d8:36:16:f2:34:ce:5e:18:3d:04:98:1b:7e:74:94:df:f6:20: 1d:25:cf:08:92:c7:12:88:dc:aa:df:64:38:41:61:4d:bb:e3: 2d:08:c1:51:20:bc:1d:62:a3:2d:75:97:22:50:82:76:50:a3: 0a:c5:3b:ea:bd:1e:0e:27:21:b4:77:c1:43:82:b8:2b:c9:0b: bc:13:f6:9a:fd:60:ea:6b:ea:68:d5:06:85:ed:bc:bf:16:36: a3:8e:a0:e1:88:ca:6c:f9:ef:82:d3:f4:3e:0b:3d:bc:5b:21: a1:3f:d1:f0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvOMcMhhsg244mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YjJhNzRjN2UtNmVhOC00NmE2LTgzNTQtMmI3MjY4ZDhkZWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe/R2s5Y1Iip0mNnBi52VZFSOTTWWkoQr/nj HQhCbdOGdcKHuw7e8BNHzSlx8zebKag6IwNddl/9+3FMYyd5yM6x/f1+plQz2t2X RqTvm97f7RemkSfFLwH5g90uPg3WzQc8eAWFcI+xiSmFMdFZ0xO6MA4CQsq38Qr9 i22Xp5nl13QJJD3L1U9BMsI5DYgs3tZDIaxPUXt9vur16PQGmC+n6zHlAeptUIuO w/ZPKKTseQdaKOV7mL6YZu/vSjIav4qyIX4Ps8XWvv1G55TEaugxBQ0rNFoRWNkQ 4GAQQQHaw1C5AM9qQs/CjCaaH7X8anRSiL4AM4FP9dHnlvSkEQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKnXh6UwyBLWzaKkLrbi1L/dJRW2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWMyODA3MDUtYzdiMy0z MzljLThiNzQtNDE0MTI4NDBmOGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBeo+NlqNv42tkvb3w0OVX9diwnHgFueAcs03AR2sixs5dqPD02G6Ie QvbpyAzvzmb6Q/Lt7A7YmM8LXqkC/nLf0/xPQqqm5W0GRL7P6z0io9ATsDumSxTm RvC8uxj20hhKdb0eN2x3mWMicSgM4aZWZ2Tjs0jU3/BC0/pKP+D8O8gzsdgYg1+j ySuVpHmgclrYNhbyNM5eGD0EmBt+dJTf9iAdJc8IkscSiNyq32Q4QWFNu+MtCMFR ILwdYqMtdZciUIJ2UKMKxTvqvR4OJyG0d8FDgrgryQu8E/aa/WDqa+po1QaF7by/ FjajjqDhiMps+e+C0/Q+Cz28WyGhP9Hw -----END CERTIFICATE-----Generated at Tue Oct 6 11:41:56 2026 by rpki-client