$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f20ab0a5-f910-3ea8-a01e-bcb09ea221a3.roa File: f20ab0a5-f910-3ea8-a01e-bcb09ea221a3.roa (raw, json) Hash identifier: a+cGc67CNzM7RlQk2dUjtZhS8F4CmrypU3H/85hF3jc= Subject key identifier: C1:5E:F3:33:59:8A:07:EC:82:26:01:2D:1B:5A:C4:DF:04:38:3D:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F494FA4D8E5837CAD3F6 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f20ab0a5-f910-3ea8-a01e-bcb09ea221a3.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396588 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f4:94:fa:4d:8e:58:37:ca:d3:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=b443ed68-f2e8-4573-9395-c58c16d1cfc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:79:1c:a5:ac:f5:78:fc:f7:52:d8:f3:34:df: 58:0b:f6:58:1e:46:d3:52:a6:a9:6e:1f:4c:8c:06: 31:5a:82:40:2d:77:0e:03:7d:58:66:c5:d0:82:4f: 8f:c8:15:9b:4e:f8:40:be:3b:c0:c1:f5:0f:96:44: 39:fa:b6:e0:b4:b5:f8:16:ab:3c:46:56:1f:92:d0: d0:ec:ce:16:80:bc:c4:f2:fe:b1:d9:71:ea:ff:37: 59:90:22:fc:1c:e1:c0:51:d3:6e:5b:fa:3c:ee:e8: 12:ba:f0:e1:fa:c0:fd:96:49:e6:82:72:c9:eb:2f: 11:39:64:48:b0:6d:83:b1:9d:72:62:74:a6:88:bf: f8:ed:c7:2d:b6:0f:b4:2c:8e:4f:d3:35:75:c8:9f: 09:ef:63:dc:da:02:92:53:61:56:6e:87:2c:47:87: d8:4d:ea:4d:df:cf:96:56:48:a6:ad:17:2e:7e:c4: 96:55:17:63:b0:06:64:3b:a7:83:dc:62:d2:b3:58: ab:3b:e5:c7:2e:71:e7:ac:f3:4c:71:9c:36:16:97: 18:6f:05:7c:5d:40:78:69:43:f1:d3:20:ba:7c:af: 6b:73:00:36:4b:44:ac:2b:54:3e:b3:76:82:ce:2e: 71:69:16:8b:e2:a5:81:4b:bf:87:8b:ca:80:ac:95: 29:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5E:F3:33:59:8A:07:EC:82:26:01:2D:1B:5A:C4:DF:04:38:3D:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f20ab0a5-f910-3ea8-a01e-bcb09ea221a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e3:0f:5d:bb:32:bf:31:24:28:56:e8:83:23:0f:dc:52:43: e8:34:5f:47:0b:2d:4b:df:e4:9f:26:62:19:aa:98:e5:6f:3e: a5:f3:ce:f3:a2:3d:d9:30:90:11:1b:cb:22:d4:88:da:a3:5d: 2d:28:7b:2f:72:af:97:a8:a5:ff:67:5d:3d:37:8a:1a:ca:34: c0:d7:75:4e:83:46:c4:e5:e2:31:3a:ae:5f:92:47:b2:8e:e0: 59:d8:14:c4:00:ec:a0:8a:11:23:ee:45:b7:1a:1b:78:fa:3e: be:b0:58:8a:7a:76:1f:db:31:f6:8b:32:b1:84:0f:32:52:97: 89:de:c6:42:79:45:df:70:5d:d7:4d:54:4c:8e:63:d5:ef:e6: f6:5e:62:ac:1d:1e:9e:3e:9c:ce:25:f1:ee:6e:cf:93:8d:31: c0:af:f9:16:77:d8:20:21:34:0e:e4:05:1a:14:33:b7:c7:7a: 07:d2:6b:f3:e6:55:71:f1:1c:21:69:f7:23:bc:88:57:43:eb: d6:b8:ac:a6:0c:47:f8:d8:d5:32:0b:2d:e0:c4:c3:2b:74:33: 14:75:7a:04:dc:7c:47:96:8a:0a:20:16:5e:6a:fb:38:72:b5: d7:fd:13:0f:b2:cb:dd:7a:80:2d:f7:69:d1:ce:4b:27:11:39: 06:f5:f5:a5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvSU+k2OWDfK0/YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YjQ0M2VkNjgtZjJlOC00NTczLTkzOTUtYzU4YzE2ZDFjZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXkcpaz1ePz3UtjzNN9YC/ZYHkbTUqapbh9M jAYxWoJALXcOA31YZsXQgk+PyBWbTvhAvjvAwfUPlkQ5+rbgtLX4Fqs8RlYfktDQ 7M4WgLzE8v6x2XHq/zdZkCL8HOHAUdNuW/o87ugSuvDh+sD9lknmgnLJ6y8ROWRI sG2DsZ1yYnSmiL/47ccttg+0LI5P0zV1yJ8J72Pc2gKSU2FWbocsR4fYTepN38+W VkimrRcufsSWVRdjsAZkO6eD3GLSs1irO+XHLnHnrPNMcZw2FpcYbwV8XUB4aUPx 0yC6fK9rcwA2S0SsK1Q+s3aCzi5xaRaL4qWBS7+Hi8qArJUpxwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMFe8zNZigfsgiYBLRtaxN8EOD1WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjIwYWIwYTUtZjkxMC0z ZWE4LWEwMWUtYmNiMDllYTIyMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBL4w9duzK/MSQoVuiDIw/cUkPoNF9HCy1L3+SfJmIZqpjlbz6l887z oj3ZMJARG8si1Ijao10tKHsvcq+XqKX/Z109N4oayjTA13VOg0bE5eIxOq5fkkey juBZ2BTEAOygihEj7kW3Ght4+j6+sFiKenYf2zH2izKxhA8yUpeJ3sZCeUXfcF3X TVRMjmPV7+b2XmKsHR6ePpzOJfHubs+TjTHAr/kWd9ggITQO5AUaFDO3x3oH0mvz 5lVx8RwhafcjvIhXQ+vWuKymDEf42NUyCy3gxMMrdDMUdXoE3HxHlooKIBZeavs4 crXX/RMPssvdeoAt92nRzksnETkG9fWl -----END CERTIFICATE-----Generated at Sat Oct 10 23:19:18 2026 by rpki-client