$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb1eec45-973c-3753-886a-eb35a4c92628.roa File: fb1eec45-973c-3753-886a-eb35a4c92628.roa (raw, json) Hash identifier: Ho04PB5J9XQZo24UZyiqfuszOf1exTDHTIivzJcla1Q= Subject key identifier: 70:BA:1F:95:44:2C:EB:78:51:AD:19:5C:65:CE:BA:1A:96:E5:D1:64 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F6292EFB0352EA8E7A3716800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb1eec45-973c-3753-886a-eb35a4c92628.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 36618 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ef:b0:35:2e:a8:e7:a3:71:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=908dc360-f520-4cfd-a9c2-4c91b75044a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ee:fa:9b:3b:f4:07:05:0e:d3:aa:77:70:19: 72:0c:11:00:19:3c:c3:ce:7d:0c:03:d9:c9:d5:85: 70:73:03:7d:5f:63:6c:1f:ce:e9:8e:59:63:f1:02: dc:bc:b8:a9:fc:ec:e7:f0:05:d0:3c:58:8e:64:ae: 03:00:35:24:95:88:34:d0:dc:9d:c1:b4:6e:3d:c3: 75:b9:97:41:a8:12:10:e0:3d:ce:dc:df:e5:5d:b0: 6e:47:86:5b:26:04:40:71:05:f7:10:c8:1e:71:dc: fe:81:6e:df:8b:e3:b9:26:07:74:33:a1:20:23:79: 88:32:84:5d:c8:62:6f:0c:38:34:d3:02:5b:91:b1: 1d:b9:52:ac:33:03:17:12:65:c9:1b:98:d0:8a:d4: 5b:f7:bb:15:58:51:41:c2:b1:9a:fd:74:9c:56:c7: ec:11:1a:17:79:88:b7:ea:e4:8c:2a:75:fc:bd:5d: fa:ca:5c:08:d7:80:d2:20:52:d0:1f:99:40:85:1b: c3:42:99:f2:cf:29:67:4b:52:fd:d2:41:0a:cc:3d: 83:b1:e2:3f:b1:d8:68:96:25:74:41:a3:c2:67:88: 50:0e:a4:82:7c:aa:a7:da:29:4c:55:6a:73:a6:b2: 85:41:36:6a:8f:cd:9e:a0:c4:53:fe:20:ef:97:05: 10:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BA:1F:95:44:2C:EB:78:51:AD:19:5C:65:CE:BA:1A:96:E5:D1:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb1eec45-973c-3753-886a-eb35a4c92628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d1:3c:9e:4b:94:cc:b1:76:bd:a1:61:35:06:1e:a7:53:06: 87:2d:fc:42:72:75:c0:6e:e8:9b:75:1c:80:a8:10:59:90:33: 44:84:a5:44:c2:b9:92:cc:c5:79:a6:ab:a9:40:b3:48:30:af: 31:24:39:d7:ee:c0:5b:24:60:9b:75:c3:ce:29:56:b9:0a:15: 0f:43:18:03:65:e7:e5:1a:d9:64:d0:ba:da:a1:8d:cf:ef:06: 32:7c:57:dc:cb:03:0a:2d:46:33:05:d4:7f:97:1f:31:54:bf: 45:d1:71:bf:37:8a:72:15:5f:2d:10:6f:06:79:00:6a:f0:03: ee:db:71:53:1c:49:71:9c:15:9c:45:f7:4d:5d:e9:74:c8:c0: 31:58:0e:3c:63:93:c9:de:ab:11:4e:ca:40:7f:e8:47:b9:6a: 26:95:a7:2e:34:e0:a7:55:aa:8b:10:69:88:89:97:dd:8a:e7: 45:b4:29:d3:a0:80:e0:21:a8:1b:5e:3b:f7:3d:08:a2:f7:da: 0b:2a:f8:5a:da:d1:4c:53:4c:f2:9d:18:8b:18:74:26:f1:eb: 20:ca:87:4f:7b:b2:5f:4a:8c:47:79:fa:3b:93:34:b2:e5:35: 1b:65:95:47:41:29:54:3c:39:be:6f:a5:20:f6:fb:bd:20:41: b0:ef:c9:10 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9iku+wNS6o56NxaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OTA4ZGMzNjAtZjUyMC00Y2ZkLWE5YzItNGM5MWI3NTA0NGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+76mzv0BwUO06p3cBlyDBEAGTzDzn0MA9nJ 1YVwcwN9X2NsH87pjllj8QLcvLip/Ozn8AXQPFiOZK4DADUklYg00NydwbRuPcN1 uZdBqBIQ4D3O3N/lXbBuR4ZbJgRAcQX3EMgecdz+gW7fi+O5Jgd0M6EgI3mIMoRd yGJvDDg00wJbkbEduVKsMwMXEmXJG5jQitRb97sVWFFBwrGa/XScVsfsERoXeYi3 6uSMKnX8vV36ylwI14DSIFLQH5lAhRvDQpnyzylnS1L90kEKzD2DseI/sdholiV0 QaPCZ4hQDqSCfKqn2ilMVWpzprKFQTZqj82eoMRT/iDvlwUQyQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHC6H5VELOt4Ua0ZXGXOuhqW5dFkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmIxZWVjNDUtOTczYy0z NzUzLTg4NmEtZWIzNWE0YzkyNjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+0TyeS5TMsXa9oWE1Bh6nUwaHLfxCcnXAbuibdRyAqBBZkDNEhKVE wrmSzMV5pqupQLNIMK8xJDnX7sBbJGCbdcPOKVa5ChUPQxgDZeflGtlk0LraoY3P 7wYyfFfcywMKLUYzBdR/lx8xVL9F0XG/N4pyFV8tEG8GeQBq8APu23FTHElxnBWc RfdNXel0yMAxWA48Y5PJ3qsRTspAf+hHuWomlacuNOCnVaqLEGmIiZfdiudFtCnT oIDgIagbXjv3PQii99oLKvha2tFMU0zynRiLGHQm8esgyodPe7JfSoxHefo7kzSy 5TUbZZVHQSlUPDm+b6Ug9vu9IEGw78kQ -----END CERTIFICATE-----Generated at Wed Oct 7 23:05:38 2026 by rpki-client