$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd4d2a85-8799-3b86-9f7f-08c8aa374851.roa File: fd4d2a85-8799-3b86-9f7f-08c8aa374851.roa (raw, json) Hash identifier: QMqv4Xcl/XhP2ov8YNB3aYQj/b7+XbTMedAK8wFmMS0= Subject key identifier: 4A:A1:56:EC:2B:70:CF:D4:D4:92:B5:87:0E:55:2B:8C:5F:55:F2:65 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498AE8089CA219ED9E4377A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd4d2a85-8799-3b86-9f7f-08c8aa374851.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396586 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:e8:08:9c:a2:19:ed:9e:43:77:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=85ee75ed-2beb-41c7-aaf7-6e9e2ef334ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d5:e6:8d:ad:29:b4:bf:b6:48:03:b0:b5:32: 8e:df:e7:0f:96:95:bc:07:70:69:88:56:22:f7:47: 7f:96:c9:e5:f9:d9:bc:1a:35:ba:b1:eb:e4:44:25: ad:74:05:4d:98:aa:4d:16:bc:74:c2:22:b6:9d:48: f6:bf:4d:77:a3:0f:36:a3:31:f0:6a:9b:66:7c:57: a3:ac:58:02:27:44:95:f3:80:45:9f:e8:3f:4a:e9: 9c:1b:00:35:db:1a:e2:7c:08:c1:96:fb:b8:b2:a9: e0:18:d5:2b:fa:56:60:6d:1c:d6:fa:70:fb:d0:f2: 4e:3c:83:4b:71:60:1c:98:7d:87:8f:a8:e9:12:3a: 38:ed:1a:aa:92:e6:ac:58:6a:74:eb:c5:a1:48:3f: e0:8d:4c:12:4d:ea:c0:5b:13:b9:f2:ab:af:f3:31: 2a:5a:7b:5d:f5:fc:44:61:d0:42:99:0a:b8:ef:f2: c3:3d:03:c1:56:a2:81:93:49:07:7d:87:b0:e8:7c: 4d:d3:4b:11:10:63:a7:e3:65:bc:6d:1f:d5:ad:99: fa:d4:7d:1a:0b:d0:8b:30:a5:4a:a3:6b:b9:16:28: 87:d3:49:04:00:61:44:d6:8b:7f:46:37:a5:50:00: b8:50:9c:cd:54:36:49:5d:7b:70:d7:ac:5b:fe:00: 68:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A1:56:EC:2B:70:CF:D4:D4:92:B5:87:0E:55:2B:8C:5F:55:F2:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd4d2a85-8799-3b86-9f7f-08c8aa374851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:cb:99:62:59:97:e2:8f:1a:70:00:e8:cc:e1:ab:81:82:1e: 72:01:01:6c:0e:7d:41:5b:9a:40:5b:03:41:d6:81:07:66:8c: ec:7a:b7:08:3b:1f:50:30:d2:04:ee:6d:d2:78:79:4b:0f:c0: 1c:48:4d:c5:45:a3:aa:b5:94:73:10:e9:66:9e:b2:17:09:82: 21:d8:4a:dd:93:31:53:6e:49:64:7b:7d:a3:78:12:94:31:65: f4:78:b6:46:30:61:8c:19:ec:7a:2b:dd:a6:f5:d0:0b:d4:3a: df:8d:bc:93:f0:21:be:23:cd:1a:0e:01:80:5d:3e:cf:59:8b: 37:ad:bd:c4:77:ec:f9:9e:74:d7:05:21:21:33:80:e4:f9:23: 57:18:28:59:8d:3e:56:7a:65:0e:8d:92:b2:6e:2e:af:af:46: 04:dc:48:3d:7a:32:dd:2d:bb:8c:fd:96:36:4b:ff:93:1b:b2: 69:97:54:17:df:92:dd:de:0a:da:1a:6c:f8:15:69:93:97:4c: 50:d3:82:ec:13:02:be:a7:cd:bc:d8:76:7d:65:b5:70:c0:a2: ca:55:b2:14:d1:48:85:58:48:15:bb:7b:5a:9a:f6:fd:a1:91: 0b:72:bf:07:10:4d:d4:41:26:67:06:6c:04:3d:84:f8:e4:48: 58:48:c2:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiugInKIZ7Z5Dd6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODVlZTc1ZWQtMmJlYi00MWM3LWFhZjctNmU5ZTJlZjMzNGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtXmja0ptL+2SAOwtTKO3+cPlpW8B3BpiFYi 90d/lsnl+dm8GjW6sevkRCWtdAVNmKpNFrx0wiK2nUj2v013ow82ozHwaptmfFej rFgCJ0SV84BFn+g/SumcGwA12xrifAjBlvu4sqngGNUr+lZgbRzW+nD70PJOPINL cWAcmH2Hj6jpEjo47RqqkuasWGp068WhSD/gjUwSTerAWxO58quv8zEqWntd9fxE YdBCmQq47/LDPQPBVqKBk0kHfYew6HxN00sREGOn42W8bR/VrZn61H0aC9CLMKVK o2u5FiiH00kEAGFE1ot/RjelUAC4UJzNVDZJXXtw16xb/gBoJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqhVuwrcM/U1JK1hw5VK4xfVfJlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmQ0ZDJhODUtODc5OS0z Yjg2LTlmN2YtMDhjOGFhMzc0ODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjLmWJZl+KPGnAA6Mzhq4GCHnIBAWwOfUFbmkBbA0HWgQdmjOx6twg7 H1Aw0gTubdJ4eUsPwBxITcVFo6q1lHMQ6WaeshcJgiHYSt2TMVNuSWR7faN4EpQx ZfR4tkYwYYwZ7Hor3ab10AvUOt+NvJPwIb4jzRoOAYBdPs9ZizetvcR37PmedNcF ISEzgOT5I1cYKFmNPlZ6ZQ6NkrJuLq+vRgTcSD16Mt0tu4z9ljZL/5MbsmmXVBff kt3eCtoabPgVaZOXTFDTguwTAr6nzbzYdn1ltXDAospVshTRSIVYSBW7e1qa9v2h kQtyvwcQTdRBJmcGbAQ9hPjkSFhIwtc= -----END CERTIFICATE-----Generated at Wed Oct 7 22:46:20 2026 by rpki-client