$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/59c88c18-af48-3200-9b85-f21b854bb6f2.roa File: 59c88c18-af48-3200-9b85-f21b854bb6f2.roa (raw, json) Hash identifier: +AUSeKYLWdegJ+jolZm+36HICh56O0px05PzUGT/awg= Subject key identifier: 5F:4C:60:09:A7:21:23:3F:7F:80:7C:7B:8F:11:8A:D4:9F:AE:49:A5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4972D2C787797A3737748440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/59c88c18-af48-3200-9b85-f21b854bb6f2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397206 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:d2:c7:87:79:7a:37:37:74:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=63e67cba-d4d2-4753-820b-69f5cde3e5db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:22:4c:b7:cc:11:60:f6:cd:e7:a1:d0:35:02: cb:08:b1:15:66:cf:ba:91:06:ec:79:f5:1b:91:cc: 95:62:db:61:71:78:ed:ea:c0:63:7f:46:b4:ab:ab: a6:9e:b7:90:2f:4f:e2:3e:48:55:10:61:86:0d:7c: 9e:af:cc:ea:fb:24:21:29:85:43:5c:9a:bb:b7:ff: 22:04:c7:fb:5e:be:26:47:9c:11:03:68:f6:1d:66: e6:37:28:c5:12:74:6c:98:a8:88:71:a7:a5:e5:db: 52:62:62:1a:48:01:2e:54:e2:ad:52:25:c5:6d:b2: 74:52:03:dc:a9:df:c5:25:f0:fa:cf:50:c9:2f:cb: 54:6b:40:6b:3a:28:71:a6:07:5f:1e:6a:64:8d:4e: 8c:3f:f6:4a:2f:df:3d:ec:f7:ab:de:86:43:1b:ca: c6:e3:80:c6:86:e5:b5:2d:d1:84:37:56:94:eb:f7: cc:5e:81:d9:3d:7a:58:95:8b:46:9c:14:f4:be:df: 4d:81:f4:0e:78:c1:09:57:60:d6:0d:46:ff:4f:04: 36:82:cc:5f:49:d3:47:58:a7:1b:b9:ed:a4:ea:4f: da:8e:5d:ee:1a:88:11:9d:24:a4:a1:fa:54:6b:7a: c4:5c:56:c3:67:c0:ab:d6:4a:22:35:a2:10:85:d8: ce:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4C:60:09:A7:21:23:3F:7F:80:7C:7B:8F:11:8A:D4:9F:AE:49:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/59c88c18-af48-3200-9b85-f21b854bb6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:db:61:6e:b7:de:54:cb:df:10:21:98:75:05:09:25:e8:f0: 20:9a:c4:d6:b6:ab:05:cf:b0:e8:85:98:b6:1f:9f:dd:bb:80: 6d:18:69:8d:a2:b1:7f:5f:34:bb:82:01:7a:8f:67:cb:ae:f7: eb:e5:af:75:e9:4e:30:fd:b8:96:44:c1:6b:4f:77:95:b5:ac: ef:43:f2:1a:7c:84:c3:60:45:da:96:19:e9:6b:51:35:87:ba: 11:d4:80:11:89:2d:36:b2:09:65:92:85:ac:b6:84:df:de:fe: fe:7e:b6:dc:5c:fd:96:8b:ab:b0:5e:a2:ec:f0:6b:e0:dd:94: 5c:15:20:be:52:98:06:5c:43:79:a0:55:85:f7:4a:64:ea:4b: 1e:d3:d3:03:93:00:2d:a3:fc:d5:a2:b6:03:d1:fa:29:b5:f6: eb:9d:b5:98:4e:a7:0e:e1:47:68:36:6d:c0:d0:98:bf:b1:6f: e0:53:72:38:cd:93:8f:71:f0:a5:35:bc:db:ff:54:06:8c:32: ed:66:a4:d4:1d:db:eb:e7:ba:60:28:ac:df:38:bb:66:b4:c7: 79:6d:c1:b5:ea:86:a2:dc:ae:fc:53:f0:69:25:b8:f1:5f:c1: a1:f2:47:1f:f4:eb:9a:78:c1:41:b9:ed:f8:95:08:e6:e2:a4: 4c:4d:e2:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JctLHh3l6Nzd0hEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjNlNjdjYmEtZDRkMi00NzUzLTgyMGItNjlmNWNkZTNlNWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCJMt8wRYPbN56HQNQLLCLEVZs+6kQbsefUb kcyVYtthcXjt6sBjf0a0q6umnreQL0/iPkhVEGGGDXyer8zq+yQhKYVDXJq7t/8i BMf7Xr4mR5wRA2j2HWbmNyjFEnRsmKiIcael5dtSYmIaSAEuVOKtUiXFbbJ0UgPc qd/FJfD6z1DJL8tUa0BrOihxpgdfHmpkjU6MP/ZKL9897Per3oZDG8rG44DGhuW1 LdGEN1aU6/fMXoHZPXpYlYtGnBT0vt9NgfQOeMEJV2DWDUb/TwQ2gsxfSdNHWKcb ue2k6k/ajl3uGogRnSSkofpUa3rEXFbDZ8Cr1koiNaIQhdjO2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9MYAmnISM/f4B8e48RitSfrkmlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTljODhjMTgtYWY0OC0z MjAwLTliODUtZjIxYjg1NGJiNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPbYW633lTL3xAhmHUFCSXo8CCaxNa2qwXPsOiFmLYfn927gG0YaY2i sX9fNLuCAXqPZ8uu9+vlr3XpTjD9uJZEwWtPd5W1rO9D8hp8hMNgRdqWGelrUTWH uhHUgBGJLTayCWWShay2hN/e/v5+ttxc/ZaLq7Beouzwa+DdlFwVIL5SmAZcQ3mg VYX3SmTqSx7T0wOTAC2j/NWitgPR+im19uudtZhOpw7hR2g2bcDQmL+xb+BTcjjN k49x8KU1vNv/VAaMMu1mpNQd2+vnumAorN84u2a0x3ltwbXqhqLcrvxT8GkluPFf waHyRx/065p4wUG57fiVCObipExN4sI= -----END CERTIFICATE-----Generated at Sat Sep 26 08:21:35 2026 by rpki-client