$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f87ac7e5-b52a-38be-b0c2-8a47b622a680.roa File: f87ac7e5-b52a-38be-b0c2-8a47b622a680.roa (raw, json) Hash identifier: UjI+ksBRdO43Z/7DnNXob91F2DEX8mizsWVSRoxSSpo= Subject key identifier: BE:5D:C3:FE:15:97:BA:34:F5:7C:9E:99:18:80:99:DF:1D:2E:94:E5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498AE544A6C83D132CE12780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f87ac7e5-b52a-38be-b0c2-8a47b622a680.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396543 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:e5:44:a6:c8:3d:13:2c:e1:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8a163f07-60ac-4f7e-b929-74663ec733a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c2:bb:b0:60:d4:c2:61:e1:28:bb:f6:38:56: 0a:e5:43:56:d6:b0:ac:d6:a2:ba:7f:b2:7d:be:5a: 21:42:7e:8e:dc:a3:63:94:1a:88:11:55:78:f2:2f: ae:b6:c0:a5:2c:0d:fc:9c:cb:41:fa:66:ef:34:1c: db:a2:06:a3:ac:08:80:87:eb:cc:9f:89:a6:8f:ad: fe:a6:1a:9e:4c:da:61:0c:06:9b:84:ec:30:79:86: cb:d9:06:06:a1:d4:0f:5f:05:06:c2:84:6c:0d:ec: 41:80:f5:f2:c2:26:78:99:72:85:f6:f0:b7:0b:9d: 22:67:2c:68:cb:37:f3:62:cc:ae:52:e5:d6:c7:79: e7:f8:22:ca:aa:ba:84:cd:a6:2d:45:4b:d3:07:5b: a2:1e:02:10:ed:e4:63:2b:93:57:5a:5d:da:e4:22: 3a:46:50:e2:6c:d0:e0:db:41:df:a7:f6:3f:72:97: dc:07:54:db:cc:45:0e:e9:0c:1d:02:29:99:4b:bb: 18:a2:90:e6:0c:12:2b:d8:91:d0:c5:91:48:12:1a: 67:18:d2:3e:8c:99:d2:87:6b:4c:ed:71:ce:0a:61: 40:4f:e7:5e:c3:6e:ca:57:a4:bc:94:e0:74:e8:fe: 61:a0:f1:8e:00:a3:81:8d:0e:e1:3b:20:cd:9b:e3: 11:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5D:C3:FE:15:97:BA:34:F5:7C:9E:99:18:80:99:DF:1D:2E:94:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f87ac7e5-b52a-38be-b0c2-8a47b622a680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:13:cb:0c:82:a1:d1:9c:6a:c2:6b:a0:8d:b2:33:f2:47:73: 0c:09:d6:0c:da:e0:f1:e8:3e:1e:43:9d:7b:ce:19:68:44:e5: f8:51:8f:7d:20:9b:ee:2d:86:70:46:75:ad:60:20:5b:ad:f9: b7:b0:59:35:07:95:31:e5:88:d3:71:61:4c:99:bb:46:e1:3d: db:09:d7:26:4a:f9:25:37:2a:18:bc:c7:30:37:1d:16:2e:de: e7:d6:b4:15:df:1e:50:53:83:da:fa:eb:5e:54:ae:ed:c9:b0: 81:2e:a2:6f:08:4d:cb:ab:f7:ad:f0:ad:67:63:e4:18:1b:a7: 19:28:39:1e:bd:9d:23:ef:5d:d5:f6:ea:b0:cd:8d:4d:fa:1f: c0:e3:19:f7:ee:ab:ac:ca:c9:54:86:41:40:51:8d:05:9d:2b: 64:54:df:de:d2:0b:9f:34:8f:ab:e2:9e:f0:9e:f3:30:3b:d1: 5b:03:c5:e0:df:31:3e:f0:3d:05:63:a2:34:bc:06:74:34:8d: 52:20:77:6d:49:75:84:29:d0:a1:84:4d:ed:b6:ab:7a:5a:99: b1:c0:af:8c:d7:ec:0d:0a:9e:c9:f4:24:0f:b3:95:21:ab:e9: fc:d6:19:a8:6f:bd:fc:8d:4a:c2:cf:32:55:d8:f8:5c:aa:8a: 80:ac:ce:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiuVEpsg9EyzhJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGExNjNmMDctNjBhYy00ZjdlLWI5MjktNzQ2NjNlYzczM2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcK7sGDUwmHhKLv2OFYK5UNW1rCs1qK6f7J9 vlohQn6O3KNjlBqIEVV48i+utsClLA38nMtB+mbvNBzbogajrAiAh+vMn4mmj63+ phqeTNphDAabhOwweYbL2QYGodQPXwUGwoRsDexBgPXywiZ4mXKF9vC3C50iZyxo yzfzYsyuUuXWx3nn+CLKqrqEzaYtRUvTB1uiHgIQ7eRjK5NXWl3a5CI6RlDibNDg 20Hfp/Y/cpfcB1TbzEUO6QwdAimZS7sYopDmDBIr2JHQxZFIEhpnGNI+jJnSh2tM 7XHOCmFAT+dew27KV6S8lOB06P5hoPGOAKOBjQ7hOyDNm+MRDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5dw/4Vl7o09XyemRiAmd8dLpTlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjg3YWM3ZTUtYjUyYS0z OGJlLWIwYzItOGE0N2I2MjJhNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGATywyCodGcasJroI2yM/JHcwwJ1gza4PHoPh5DnXvOGWhE5fhRj30g m+4thnBGda1gIFut+bewWTUHlTHliNNxYUyZu0bhPdsJ1yZK+SU3Khi8xzA3HRYu 3ufWtBXfHlBTg9r6615Uru3JsIEuom8ITcur963wrWdj5BgbpxkoOR69nSPvXdX2 6rDNjU36H8DjGffuq6zKyVSGQUBRjQWdK2RU397SC580j6vinvCe8zA70VsDxeDf MT7wPQVjojS8BnQ0jVIgd21JdYQp0KGETe22q3pambHAr4zX7A0Knsn0JA+zlSGr 6fzWGahvvfyNSsLPMlXY+FyqioCszrw= -----END CERTIFICATE-----Generated at Wed Oct 7 13:26:20 2026 by rpki-client