$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4dd4f607-bc70-3431-b20b-51a9427aa3ed.roa File: 4dd4f607-bc70-3431-b20b-51a9427aa3ed.roa (raw, json) Hash identifier: wmziNHFJVjLAwwNs+chRfdvaibRtENDVsgMDh8hYvhg= Subject key identifier: 80:BB:3D:3F:60:E6:33:83:69:9D:3D:17:C6:34:74:5F:90:45:C6:DD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49882962CE58446E4D1AE800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4dd4f607-bc70-3431-b20b-51a9427aa3ed.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396583 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:29:62:ce:58:44:6e:4d:1a:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a2fdde15-e23f-43f8-8f22-75d333f1b25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8e:e3:46:62:28:3c:1b:cc:ca:34:49:33:27: 32:8a:e0:53:ca:ff:19:2d:de:00:90:ef:d0:9f:e9: fb:9c:83:f6:58:4d:0e:b6:56:19:97:e6:fd:57:50: a7:7c:21:09:0a:35:2c:06:43:d4:dd:fe:89:9c:0d: 74:0a:ac:61:cd:68:5d:3f:c4:e9:4d:68:c8:8a:d9: f5:ef:35:d8:e0:55:d1:fd:e6:68:39:c8:cd:c5:09: af:29:d5:31:e7:73:b0:05:52:5c:31:9b:74:31:d4: be:9d:75:cc:25:15:b8:dd:f2:2b:bc:8a:4e:5a:63: 7e:f9:4f:13:aa:05:15:20:01:ac:91:ca:66:51:c2: ab:99:df:50:16:18:b9:82:d3:e5:b7:dc:b0:64:7c: 1d:b6:0f:a6:b8:b7:c6:5f:f3:87:d4:c1:92:aa:52: 2a:89:88:ec:1b:a5:2e:f8:ee:2e:1a:d5:32:70:af: 5f:2f:37:b6:b6:1e:ba:5f:1b:17:63:7a:d5:a5:7a: f3:82:83:ce:b2:1d:4c:19:e3:d0:b2:99:95:9c:a6: 75:dd:1c:7e:ef:ac:d5:09:f5:00:22:8c:d1:5e:6a: 56:17:b3:da:17:30:a1:fd:ac:97:b4:b2:ac:58:e6: 64:53:f4:8b:78:ed:6e:31:27:4d:aa:b5:14:dd:26: 53:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BB:3D:3F:60:E6:33:83:69:9D:3D:17:C6:34:74:5F:90:45:C6:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4dd4f607-bc70-3431-b20b-51a9427aa3ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:84:e4:4d:c7:d6:39:c0:01:4f:d8:fa:2d:48:76:2d:55:97: b4:45:b3:df:aa:cc:56:13:1b:6f:b2:f4:24:e6:c2:53:59:e9: 42:29:13:e0:ad:8b:3c:c2:24:30:a5:4f:e2:fa:24:94:24:8c: ad:c9:11:93:9f:6c:8e:ff:20:7a:9b:f3:84:43:b8:6c:11:6c: d8:21:9a:cd:a0:53:28:17:d4:a2:ff:4c:b0:ec:20:57:7a:ba: 6d:0c:83:e3:80:e9:b0:ee:8e:e3:cf:35:ff:b4:47:0e:bd:82: 35:d1:27:73:e8:41:16:7d:79:4a:9c:a7:a2:07:32:92:70:50: 46:d6:e3:d0:92:43:bf:00:d9:6e:58:22:98:6e:f5:f1:15:aa: f1:ab:37:28:93:b7:ab:db:c2:b5:f3:aa:5f:dc:a2:1d:1c:fd: e0:ce:4e:34:df:15:2a:0c:4d:4f:6b:3c:52:bc:a7:40:90:01: 37:83:ba:62:a5:e1:57:75:f8:cd:29:eb:f5:10:81:a7:4a:8d: 85:e9:9d:66:40:f6:2e:b3:c2:76:9f:3a:0b:77:19:ca:47:e4: 02:ba:7a:71:38:51:1d:8e:d1:1b:56:06:5e:92:32:d0:08:b5: 48:cc:c3:5c:57:ab:cb:17:ba:97:ee:63:78:ff:ff:4a:28:82: 1b:99:7c:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiClizlhEbk0a6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTJmZGRlMTUtZTIzZi00M2Y4LThmMjItNzVkMzMzZjFiMjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo47jRmIoPBvMyjRJMycyiuBTyv8ZLd4AkO/Q n+n7nIP2WE0OtlYZl+b9V1CnfCEJCjUsBkPU3f6JnA10CqxhzWhdP8TpTWjIitn1 7zXY4FXR/eZoOcjNxQmvKdUx53OwBVJcMZt0MdS+nXXMJRW43fIrvIpOWmN++U8T qgUVIAGskcpmUcKrmd9QFhi5gtPlt9ywZHwdtg+muLfGX/OH1MGSqlIqiYjsG6Uu +O4uGtUycK9fLze2th66XxsXY3rVpXrzgoPOsh1MGePQspmVnKZ13Rx+76zVCfUA IozRXmpWF7PaFzCh/ayXtLKsWOZkU/SLeO1uMSdNqrUU3SZTywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIC7PT9g5jODaZ09F8Y0dF+QRcbdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGRkNGY2MDctYmM3MC0z NDMxLWIyMGItNTFhOTQyN2FhM2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCE5E3H1jnAAU/Y+i1Idi1Vl7RFs9+qzFYTG2+y9CTmwlNZ6UIpE+Ct izzCJDClT+L6JJQkjK3JEZOfbI7/IHqb84RDuGwRbNghms2gUygX1KL/TLDsIFd6 um0Mg+OA6bDujuPPNf+0Rw69gjXRJ3PoQRZ9eUqcp6IHMpJwUEbW49CSQ78A2W5Y Iphu9fEVqvGrNyiTt6vbwrXzql/coh0c/eDOTjTfFSoMTU9rPFK8p0CQATeDumKl 4Vd1+M0p6/UQgadKjYXpnWZA9i6zwnafOgt3GcpH5AK6enE4UR2O0RtWBl6SMtAI tUjMw1xXq8sXupfuY3j//0ooghuZfBc= -----END CERTIFICATE-----Generated at Fri Sep 25 22:19:14 2026 by rpki-client