$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f78561cb-5a9a-3a11-9eab-591b860f3a41.roa File: f78561cb-5a9a-3a11-9eab-591b860f3a41.roa (raw, json) Hash identifier: W3l5AlSLAFw3+z23v2O1hRFAZOPnP67S80+qFT40xD4= Subject key identifier: 70:B4:C1:99:58:31:E1:E0:46:E4:4E:E4:0E:0B:AD:83:D0:77:E6:81 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F628585BA9AF6B296E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f78561cb-5a9a-3a11-9eab-591b860f3a41.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 36629 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f6:28:58:5b:a9:af:6b:29:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=e7d62a9d-bafd-4172-b4ff-9e9b0438cbca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ac:c3:97:9c:42:ef:96:94:c1:15:d5:0a:52: ee:c7:eb:79:1c:55:f4:47:74:07:41:1d:43:81:1b: f4:87:5a:1e:d9:6a:1a:d1:7f:10:09:4e:20:96:d0: e4:b1:14:bd:4c:1b:ee:04:a1:5a:0a:ff:e4:b7:f2: 6f:aa:04:f5:1a:e4:8d:3b:03:78:d5:44:83:fc:b1: 06:a4:45:07:11:42:fd:4d:20:d4:e1:ad:34:2b:d6: 41:76:27:ae:38:c1:91:f4:9d:d6:1c:a3:cf:22:17: 52:ca:e5:6f:8f:c7:bb:60:d5:3d:72:c8:4b:da:c7: 24:8c:a4:87:03:df:1c:05:e2:3b:c6:86:34:3b:32: f0:d3:6c:d0:54:53:dc:70:49:9b:89:65:9b:ae:09: 96:82:a3:2b:73:70:fb:ab:90:02:c3:91:b3:7f:e5: 31:a4:d7:d6:58:b5:e7:50:63:5c:14:76:9a:81:7f: 93:80:5f:47:46:ec:90:a4:b2:f4:1c:ad:a0:04:e3: 82:03:53:40:0d:32:92:41:f5:1e:fb:a4:7b:3c:b9: 42:18:f4:13:c8:7b:b6:a1:e2:60:f7:82:50:66:ef: 18:3d:63:7d:aa:08:ef:4a:2c:8f:38:85:c3:91:3e: 67:fb:b5:84:30:b2:60:77:1e:9a:6d:7e:1a:d8:66: 82:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B4:C1:99:58:31:E1:E0:46:E4:4E:E4:0E:0B:AD:83:D0:77:E6:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f78561cb-5a9a-3a11-9eab-591b860f3a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f5:e9:a4:a5:57:a0:60:39:56:4c:15:15:81:3b:77:f9:a5: 2d:b9:82:1e:76:b6:12:41:6a:08:48:ab:d6:e8:61:df:d2:e0: de:4f:26:f9:98:bb:2b:61:88:9b:1e:42:c9:6f:68:7b:eb:cd: f3:7e:8a:18:34:41:32:93:dc:bb:ec:ab:bc:91:2a:79:6d:01: 3e:3d:99:d6:60:e8:79:ec:7c:c1:0c:1a:16:23:8a:93:20:3a: 8f:b8:05:30:75:c7:29:78:a9:2b:39:a0:b6:63:24:b3:5b:f3: 11:f4:de:45:d2:3d:1e:01:f2:30:88:93:74:52:b0:ce:ba:47: 3c:80:01:9f:5a:ea:56:05:19:ca:7b:d1:4a:2d:66:21:ec:3c: ca:f1:0c:48:26:6c:06:8d:a2:10:bb:9a:e6:9b:ed:5e:c7:4d: 95:4f:fd:5b:e2:8e:90:5b:a4:dd:c4:f6:10:9c:84:6d:d5:df: 36:1a:78:82:0f:30:cb:1c:d5:a9:ce:88:a2:44:5e:66:3e:6b: 09:e3:d2:c3:5b:66:c3:c2:f7:a2:bc:07:3f:96:61:65:41:94: f0:57:2a:a8:a3:43:a0:f6:3c:80:08:75:30:af:fa:f2:ba:ef: b6:eb:69:d6:e5:8d:6f:c6:d6:93:6b:48:f3:be:c1:02:c9:3d: 8d:5a:c3:17 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvYoWFupr2spboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZTdkNjJhOWQtYmFmZC00MTcyLWI0ZmYtOWU5YjA0MzhjYmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6zDl5xC75aUwRXVClLux+t5HFX0R3QHQR1D gRv0h1oe2Woa0X8QCU4gltDksRS9TBvuBKFaCv/kt/JvqgT1GuSNOwN41USD/LEG pEUHEUL9TSDU4a00K9ZBdieuOMGR9J3WHKPPIhdSyuVvj8e7YNU9cshL2sckjKSH A98cBeI7xoY0OzLw02zQVFPccEmbiWWbrgmWgqMrc3D7q5ACw5Gzf+UxpNfWWLXn UGNcFHaagX+TgF9HRuyQpLL0HK2gBOOCA1NADTKSQfUe+6R7PLlCGPQTyHu2oeJg 94JQZu8YPWN9qgjvSiyPOIXDkT5n+7WEMLJgdx6abX4a2GaCaQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHC0wZlYMeHgRuRO5A4LrYPQd+aBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjc4NTYxY2ItNWE5YS0z YTExLTllYWItNTkxYjg2MGYzYTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBT9emkpVegYDlWTBUVgTt3+aUtuYIedrYSQWoISKvW6GHf0uDeTyb5 mLsrYYibHkLJb2h7683zfooYNEEyk9y77Ku8kSp5bQE+PZnWYOh57HzBDBoWI4qT IDqPuAUwdccpeKkrOaC2YySzW/MR9N5F0j0eAfIwiJN0UrDOukc8gAGfWupWBRnK e9FKLWYh7DzK8QxIJmwGjaIQu5rmm+1ex02VT/1b4o6QW6TdxPYQnIRt1d82GniC DzDLHNWpzoiiRF5mPmsJ49LDW2bDwveivAc/lmFlQZTwVyqoo0Og9jyACHUwr/ry uu+262nW5Y1vxtaTa0jzvsECyT2NWsMX -----END CERTIFICATE-----Generated at Tue Oct 6 20:03:01 2026 by rpki-client