$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2c4c59bd-d42c-350f-8fd8-10c8008393f2.roa File: 2c4c59bd-d42c-350f-8fd8-10c8008393f2.roa (raw, json) Hash identifier: EXq8rfexSUpeWrGvvHpN+iKA4Zj1EMC1MqG/Uf3tUME= Subject key identifier: 25:DC:43:41:2F:88:F1:3C:9B:D7:73:89:57:24:0C:1E:12:0D:A7:29 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498AC6E291F736AFFDA854C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2c4c59bd-d42c-350f-8fd8-10c8008393f2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396560 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:c6:e2:91:f7:36:af:fd:a8:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d40f5634-f469-47a3-a688-a7743813f4de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:17:8f:6b:8b:be:04:6f:d1:69:bb:37:c3:37: 6c:7c:1a:08:57:60:88:74:47:4d:63:e5:f5:33:82: c5:9a:6c:aa:c2:99:0e:a7:f0:e5:fc:2b:21:3f:1f: c1:ba:7b:d1:9d:f7:7b:6d:0a:f1:63:cc:73:fd:30: db:a0:f7:1c:7d:ba:54:86:0f:f9:88:98:f7:8b:70: aa:93:eb:aa:f9:2e:6e:89:52:d3:1b:bb:0c:76:06: ec:b9:5d:dd:9e:a6:b9:c1:07:6a:5a:0c:b0:12:ee: b4:67:99:f7:85:a9:79:f2:03:8a:b1:e8:34:2d:8e: 71:8a:aa:2c:3f:52:bf:9b:cb:d2:48:3f:6b:4b:c4: 26:5e:3c:d2:72:09:03:c6:69:a8:cf:cf:fa:4e:62: 48:00:c1:50:62:b9:67:ca:3a:df:18:be:4b:b4:0e: 35:d2:d6:22:1d:7e:54:8b:d8:f9:63:e8:4e:61:c3: 3e:59:89:a9:11:da:b9:88:2f:09:0d:48:1e:02:4c: fd:37:ba:45:61:a4:11:91:ed:a2:b2:76:3d:d3:81: de:52:85:af:99:51:57:f1:17:ac:30:67:4a:06:c6: 20:a9:14:18:ad:4b:5a:b1:00:59:74:69:58:7a:9b: 44:33:06:30:f0:91:61:fa:28:77:0b:1a:60:0b:94: dc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DC:43:41:2F:88:F1:3C:9B:D7:73:89:57:24:0C:1E:12:0D:A7:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2c4c59bd-d42c-350f-8fd8-10c8008393f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a2:e9:ba:f8:11:6f:93:b1:06:d4:12:d8:61:05:7f:d0:84: 01:ca:56:b5:2c:69:a3:6b:e5:5d:0a:32:9a:c6:40:6d:2d:b3: 05:7a:73:dc:d6:cb:cf:7f:70:cf:55:32:13:14:e7:31:18:13: 48:9d:70:d5:d4:b6:5e:96:ce:1e:9a:05:93:3d:bd:98:c2:96: f9:8a:36:83:ca:3e:eb:9d:15:2a:34:8b:95:e1:39:55:8c:ec: 5a:8e:ee:8d:2d:91:46:bb:ad:16:44:de:53:37:7a:45:e1:c6: f9:1c:79:80:b1:b9:04:c5:81:ee:d7:dd:2a:58:d7:9d:3c:22: b7:6d:d7:68:97:f5:29:76:06:50:e4:84:12:3e:78:cd:6e:be: 8e:4b:f9:a1:44:59:b3:9b:ef:49:dc:02:c4:b5:c6:71:43:a5: 96:cc:cb:dd:55:2a:42:a0:b1:b7:9c:01:5a:d9:e1:ff:ef:d6: 3a:9d:5c:84:b8:30:a8:b1:ab:5b:3b:9e:b9:59:69:2f:c8:8f: f9:ab:36:d3:60:62:69:6a:51:97:a5:51:b7:5a:c7:d8:7e:94: 50:35:33:26:34:30:19:d1:f8:97:11:4e:30:73:67:e8:00:06: dd:31:23:26:3d:fc:2f:10:9e:32:2c:c5:38:8f:dc:32:df:49: 5b:ae:da:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jisbikfc2r/2oVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDQwZjU2MzQtZjQ2OS00N2EzLWE2ODgtYTc3NDM4MTNmNGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohePa4u+BG/Rabs3wzdsfBoIV2CIdEdNY+X1 M4LFmmyqwpkOp/Dl/CshPx/BunvRnfd7bQrxY8xz/TDboPccfbpUhg/5iJj3i3Cq k+uq+S5uiVLTG7sMdgbsuV3dnqa5wQdqWgywEu60Z5n3hal58gOKseg0LY5xiqos P1K/m8vSSD9rS8QmXjzScgkDxmmoz8/6TmJIAMFQYrlnyjrfGL5LtA410tYiHX5U i9j5Y+hOYcM+WYmpEdq5iC8JDUgeAkz9N7pFYaQRke2isnY904HeUoWvmVFX8Res MGdKBsYgqRQYrUtasQBZdGlYeptEMwYw8JFh+ih3CxpgC5TclQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXcQ0EviPE8m9dziVckDB4SDacpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmM0YzU5YmQtZDQyYy0z NTBmLThmZDgtMTBjODAwODM5M2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOi6br4EW+TsQbUEthhBX/QhAHKVrUsaaNr5V0KMprGQG0tswV6c9zW y89/cM9VMhMU5zEYE0idcNXUtl6Wzh6aBZM9vZjClvmKNoPKPuudFSo0i5XhOVWM 7FqO7o0tkUa7rRZE3lM3ekXhxvkceYCxuQTFge7X3SpY1508Irdt12iX9Sl2BlDk hBI+eM1uvo5L+aFEWbOb70ncAsS1xnFDpZbMy91VKkKgsbecAVrZ4f/v1jqdXIS4 MKixq1s7nrlZaS/Ij/mrNtNgYmlqUZelUbdax9h+lFA1MyY0MBnR+JcRTjBzZ+gA Bt0xIyY9/C8QnjIsxTiP3DLfSVuu2ps= -----END CERTIFICATE-----Generated at Sat Sep 26 18:35:40 2026 by rpki-client