$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8209dbf-5f1a-34d2-a613-64138dec78da.roa File: f8209dbf-5f1a-34d2-a613-64138dec78da.roa (raw, json) Hash identifier: ZIxCuz19h/6CTPfJ+Jwm6drsT6ZkFPh2G3N8qz/Aed4= Subject key identifier: 4D:0C:83:0A:77:40:D5:D7:90:CD:13:57:6A:2B:06:00:B8:48:C3:96 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292F1556E2E7E52AB576000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8209dbf-5f1a-34d2-a613-64138dec78da.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396590 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:f1:55:6e:2e:7e:52:ab:57:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=d65690dd-7c91-40fd-9a11-8a62416485c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:23:70:b1:8c:b7:0d:c4:77:77:1c:ee:28:a3: 85:95:e7:d3:89:c8:77:1a:08:b7:92:05:2d:9a:4f: b4:6c:a2:b6:2b:03:11:06:b3:26:ed:b1:4f:d7:ae: e8:d8:fb:79:ac:94:a7:a9:ab:5b:b3:e5:d1:54:39: 8a:b9:f0:16:8f:38:97:8a:8b:a7:a1:02:91:91:d5: 94:cb:62:24:45:dd:58:1a:ce:d1:f8:cb:5e:4a:bb: 22:68:cf:14:2b:bd:1e:f4:23:04:e6:fb:fe:8d:4d: b3:0d:b2:c2:fd:e1:30:75:e2:b1:e4:fe:0d:01:99: e4:b4:3c:1e:ca:31:bb:02:79:d0:f2:0b:47:15:b0: b3:de:30:7a:68:31:a2:bc:dd:94:e1:fc:5e:9b:da: b0:2c:a9:a8:1f:27:a3:0a:39:b1:0a:29:60:86:94: f1:9c:6d:b3:d4:53:50:57:b5:ec:91:94:22:32:8a: 92:6b:d0:1b:ce:7b:d5:54:06:75:7f:f8:c2:fc:13: f8:99:10:90:b4:38:6e:b2:c9:33:42:65:65:2b:fb: 0b:0b:5f:03:8b:7b:bd:9a:b0:92:9e:ca:b2:3d:d5: b8:68:dc:71:a6:1b:0b:fb:bc:f5:f4:d6:2d:c0:78: 8b:db:e9:91:07:fb:fd:2e:d0:e6:d6:49:15:8d:99: 94:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0C:83:0A:77:40:D5:D7:90:CD:13:57:6A:2B:06:00:B8:48:C3:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8209dbf-5f1a-34d2-a613-64138dec78da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:7a:ab:66:75:07:4d:7c:81:fe:28:0e:f9:c1:50:6b:ba:df: fb:c5:7c:5c:58:3c:2b:e2:e0:ec:37:e6:82:36:b3:a1:8b:0f: 41:f2:0d:b2:43:59:22:c4:19:4f:78:be:e2:66:58:b5:85:98: 32:75:4b:b8:da:1b:08:db:69:a3:9b:46:c3:33:b8:b2:7b:90: 2b:60:74:29:e5:0e:95:72:be:45:ed:b0:8d:41:89:20:62:40: 0d:01:e8:e5:27:8d:d6:8a:32:31:5f:a8:03:b1:8d:7d:50:c0: bc:c6:27:58:dc:16:a2:f9:4e:77:4e:4e:fa:96:65:d8:24:c5: f7:94:27:51:11:1a:79:e1:d8:d8:20:49:2a:d1:f9:c4:07:75: 0d:c4:35:d2:3c:1f:78:ff:05:f9:3c:80:ce:34:3b:55:58:f8: 3a:fb:21:d7:11:50:f3:f6:46:4d:05:87:7d:10:c3:24:d2:9a: 19:0a:4d:fa:89:61:3c:cb:33:df:bc:09:67:dc:48:93:36:ac: d9:c8:a5:3c:b5:fd:13:8f:6a:4c:08:c0:bc:12:00:d7:65:3b: 84:15:18:42:d0:92:0b:22:71:7f:3f:8a:a8:b8:5b:23:92:d4: 2e:82:cc:8a:8e:a7:d8:d4:d9:3f:72:f5:06:d5:d5:44:13:65: 66:3d:ca:67 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9ikvFVbi5+UqtXYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZDY1NjkwZGQtN2M5MS00MGZkLTlhMTEtOGE2MjQxNjQ4NWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyNwsYy3DcR3dxzuKKOFlefTich3Ggi3kgUt mk+0bKK2KwMRBrMm7bFP167o2Pt5rJSnqatbs+XRVDmKufAWjziXiounoQKRkdWU y2IkRd1YGs7R+MteSrsiaM8UK70e9CME5vv+jU2zDbLC/eEwdeKx5P4NAZnktDwe yjG7AnnQ8gtHFbCz3jB6aDGivN2U4fxem9qwLKmoHyejCjmxCilghpTxnG2z1FNQ V7XskZQiMoqSa9AbznvVVAZ1f/jC/BP4mRCQtDhusskzQmVlK/sLC18Di3u9mrCS nsqyPdW4aNxxphsL+7z19NYtwHiL2+mRB/v9LtDm1kkVjZmU0QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE0Mgwp3QNXXkM0TV2orBgC4SMOWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjgyMDlkYmYtNWYxYS0z NGQyLWE2MTMtNjQxMzhkZWM3OGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQADeqtmdQdNfIH+KA75wVBrut/7xXxcWDwr4uDsN+aCNrOhiw9B8g2y Q1kixBlPeL7iZli1hZgydUu42hsI22mjm0bDM7iye5ArYHQp5Q6Vcr5F7bCNQYkg YkANAejlJ43WijIxX6gDsY19UMC8xidY3Bai+U53Tk76lmXYJMX3lCdRERp54djY IEkq0fnEB3UNxDXSPB94/wX5PIDONDtVWPg6+yHXEVDz9kZNBYd9EMMk0poZCk36 iWE8yzPfvAln3EiTNqzZyKU8tf0Tj2pMCMC8EgDXZTuEFRhC0JILInF/P4qouFsj ktQugsyKjqfY1Nk/cvUG1dVEE2VmPcpn -----END CERTIFICATE-----Generated at Tue Oct 6 19:58:50 2026 by rpki-client