$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef598240-4523-3115-b8df-c7e60a532a58.roa File: ef598240-4523-3115-b8df-c7e60a532a58.roa (raw, json) Hash identifier: WqoqW31Bn++gEhJuOAYU/9F8koO+KleF4ke6Hi/Z3zk= Subject key identifier: 79:8A:DE:FC:EF:F1:23:77:AB:C0:E9:D5:49:62:79:CD:30:84:9A:E6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F2DDECE3FF13F663A680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef598240-4523-3115-b8df-c7e60a532a58.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396561 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f2:dd:ec:e3:ff:13:f6:63:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=49f98424-1102-4359-9fd5-9065fcd15904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d8:77:25:ae:57:04:58:ce:50:10:71:81:5f: 2f:12:96:af:6b:0d:67:df:c3:de:e8:69:2e:6a:23: de:34:25:7e:14:9d:10:c9:15:33:a2:10:39:87:69: 13:e7:65:fe:2e:cf:ea:bb:7b:21:fd:53:66:b8:f3: c1:d5:6d:11:8f:67:39:59:90:2d:42:0d:40:24:12: 8a:83:42:5d:dc:70:ee:65:2a:b4:6a:a9:44:e5:35: 5a:af:2a:aa:aa:8e:27:63:d9:48:36:58:0b:5f:86: d2:e4:02:58:77:0c:f0:d6:d0:12:54:11:04:2f:59: 05:73:b1:7c:cd:0c:08:f9:65:7c:62:14:73:b7:df: ad:80:37:0d:ee:c4:ca:6b:d4:d0:2d:a7:e9:6d:c3: 51:c0:db:27:46:ed:53:e2:b6:bd:be:7e:55:1f:42: 03:93:be:e8:2b:07:6c:11:78:c3:af:34:52:6a:4d: 87:d4:cb:25:73:f2:96:7d:de:27:98:7d:55:e0:dd: e6:8c:64:b7:01:e7:c9:5d:15:4d:bd:22:1a:0f:81: 44:34:a8:13:e1:42:05:e7:24:90:bc:9e:b9:f0:b1: 8b:8f:cd:ff:72:0c:31:7a:b2:b3:84:45:dd:ec:5c: c4:3d:5c:ca:17:37:fd:2f:b3:6a:a7:d8:e2:f5:2b: 8f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8A:DE:FC:EF:F1:23:77:AB:C0:E9:D5:49:62:79:CD:30:84:9A:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef598240-4523-3115-b8df-c7e60a532a58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:fe:7b:6c:54:a8:e5:bb:53:2f:b5:d7:fa:62:1c:4c:a7:29: a2:0e:33:5e:55:ad:08:94:9d:10:65:3d:9f:64:43:bf:37:c9: 1f:45:1d:22:3d:51:d6:66:7a:1d:28:48:43:b9:12:6f:07:92: 4d:8f:36:e7:e9:7f:4d:33:d9:24:cf:de:a3:95:e5:ef:3a:03: 32:97:e1:b1:84:56:21:8a:bd:74:a7:c6:76:d8:87:eb:bc:f2: 20:71:6a:61:56:90:0d:8b:cd:43:96:65:48:e4:6f:4b:a2:73: ea:bc:60:ee:14:a1:f5:77:8b:bd:45:e5:0a:b6:c5:4a:60:82: 46:e7:7e:a7:8a:7d:bf:e3:81:ec:cb:a1:30:ef:c0:3e:e2:68: e6:62:63:6a:e5:16:59:13:49:6f:21:c6:4b:c9:94:8a:4b:23: ef:7d:06:7e:2b:b6:60:f0:2d:47:8d:56:cc:b7:1c:25:64:d3: 42:76:96:12:42:44:79:04:4a:85:bf:2a:2b:11:11:d5:9e:41: e4:28:b2:80:ff:e4:be:c4:db:c8:b1:dc:95:6e:38:90:44:fb: 7c:b7:74:93:2e:e8:27:97:52:44:f1:de:67:af:e5:06:be:44: 99:38:01:ca:49:3c:0b:5c:7e:a6:34:0d:57:ee:23:81:4f:f4: fc:8b:ed:f9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvLd7OP/E/ZjpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NDlmOTg0MjQtMTEwMi00MzU5LTlmZDUtOTA2NWZjZDE1OTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgth3Ja5XBFjOUBBxgV8vEpavaw1n38Pe6Gku aiPeNCV+FJ0QyRUzohA5h2kT52X+Ls/qu3sh/VNmuPPB1W0Rj2c5WZAtQg1AJBKK g0Jd3HDuZSq0aqlE5TVaryqqqo4nY9lINlgLX4bS5AJYdwzw1tASVBEEL1kFc7F8 zQwI+WV8YhRzt9+tgDcN7sTKa9TQLafpbcNRwNsnRu1T4ra9vn5VH0IDk77oKwds EXjDrzRSak2H1Mslc/KWfd4nmH1V4N3mjGS3AefJXRVNvSIaD4FENKgT4UIF5ySQ vJ658LGLj83/cgwxerKzhEXd7FzEPVzKFzf9L7Nqp9ji9SuP2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHmK3vzv8SN3q8Dp1Uliec0whJrmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY1OTgyNDAtNDUyMy0z MTE1LWI4ZGYtYzdlNjBhNTMyYTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAa/ntsVKjlu1Mvtdf6YhxMpymiDjNeVa0IlJ0QZT2fZEO/N8kfRR0i PVHWZnodKEhDuRJvB5JNjzbn6X9NM9kkz96jleXvOgMyl+GxhFYhir10p8Z22Ifr vPIgcWphVpANi81DlmVI5G9LonPqvGDuFKH1d4u9ReUKtsVKYIJG536nin2/44Hs y6Ew78A+4mjmYmNq5RZZE0lvIcZLyZSKSyPvfQZ+K7Zg8C1HjVbMtxwlZNNCdpYS QkR5BEqFvyorERHVnkHkKLKA/+S+xNvIsdyVbjiQRPt8t3STLugnl1JE8d5nr+UG vkSZOAHKSTwLXH6mNA1X7iOBT/T8i+35 -----END CERTIFICATE-----Generated at Tue Oct 6 11:36:50 2026 by rpki-client