$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/62818f4d-e9c4-3b4d-bb5a-0f973fa23b20.roa File: 62818f4d-e9c4-3b4d-bb5a-0f973fa23b20.roa (raw, json) Hash identifier: lZzu/qGyuEZJqih3zq9a6yBkTwRr/iSGcdzIMu1K4/E= Subject key identifier: 26:82:8E:53:CA:91:A8:C7:E8:97:E1:1E:09:41:C8:24:01:58:53:0C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498B304FA4AA9BE87FC9C600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/62818f4d-e9c4-3b4d-bb5a-0f973fa23b20.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396612 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:30:4f:a4:aa:9b:e8:7f:c9:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cb9a09f7-00a4-47bc-9bbd-f96dfb12d9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:67:18:fc:3b:3c:bb:8c:22:20:c2:05:0b:b8: 21:ce:51:59:ad:f0:8d:9f:62:21:79:9b:ce:65:8f: 55:64:74:3f:15:c9:2a:53:b1:22:72:c4:29:73:33: e2:3a:8f:80:bb:b5:e8:7d:a1:03:af:7a:4d:ac:30: 9a:b9:bf:44:c7:1d:f1:62:a3:e9:09:8f:cc:4f:95: 55:62:37:47:b4:ba:ae:68:26:ae:a6:20:70:00:e8: bc:42:5a:80:22:02:51:dd:04:3a:23:de:35:eb:e2: 2a:b2:c6:fd:6a:2a:fa:a7:e3:f6:04:c4:ac:f3:52: 4d:de:37:2a:b1:01:01:72:0f:b8:bb:ff:2a:25:97: 48:ac:c3:ad:5a:6c:9e:d8:e4:13:d6:63:96:8b:35: 0d:90:aa:57:63:80:aa:20:5f:06:1d:b7:6b:7d:55: a7:cc:76:41:8b:15:41:ab:48:d4:98:32:72:4f:90: d0:2e:09:11:59:05:4b:f5:e3:65:ce:ba:04:b8:05: 24:0b:9a:1f:8f:16:b6:f3:97:fe:83:d2:1f:bc:f8: 80:b1:5c:95:5e:cc:fc:d8:25:7d:1d:e7:11:69:ca: bd:05:0f:06:fc:8a:4c:19:f4:9f:d0:dc:20:1a:65: 58:bc:bb:c5:52:9b:a4:55:2b:ee:49:18:53:76:7c: 1e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:82:8E:53:CA:91:A8:C7:E8:97:E1:1E:09:41:C8:24:01:58:53:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/62818f4d-e9c4-3b4d-bb5a-0f973fa23b20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:64:42:52:98:17:93:b9:74:f4:6d:73:12:ca:26:cc:61:cb: 0f:3a:e7:79:ea:28:e3:9a:5b:2f:20:b3:00:a3:eb:14:6b:cd: 0b:18:9b:61:e4:ef:b8:8e:75:16:04:b1:2c:62:9e:41:a6:cc: 73:3c:5e:06:b3:ad:6e:aa:a7:a7:a4:a0:e2:69:d5:f1:18:cb: 0e:b8:f1:fe:29:ce:6a:7d:b5:6b:d7:b0:d9:73:81:11:57:ae: ab:01:d9:95:dc:7c:00:88:fb:ad:c8:4c:3d:9e:11:2a:fb:9a: e8:27:90:e4:00:0f:22:4c:35:05:3d:9a:b9:a9:47:ea:4d:4f: 4e:57:a9:1e:8e:2e:b5:b3:41:b7:e2:28:97:95:b6:c3:45:1e: bb:8a:56:10:d2:c6:d3:3c:8b:60:b8:84:c2:e2:78:da:45:c1: 33:86:4d:2a:9c:33:0d:ab:9c:7c:b7:38:45:7a:cd:a8:dd:d4: 78:55:39:52:13:38:71:46:f7:ce:e8:84:34:d2:01:91:20:0a: ab:a1:be:3c:a1:56:09:8d:7e:ea:06:ae:20:2e:85:10:c0:cc: e6:f1:ff:5d:0e:ee:b4:16:2f:74:a5:dd:ec:d4:46:30:46:2f: 14:1c:c2:27:08:d1:3b:f6:69:2a:c4:f8:f9:5a:50:76:f7:bf: 62:31:70:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JizBPpKqb6H/JxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2I5YTA5ZjctMDBhNC00N2JjLTliYmQtZjk2ZGZiMTJkOWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGcY/Ds8u4wiIMIFC7ghzlFZrfCNn2IheZvO ZY9VZHQ/FckqU7EicsQpczPiOo+Au7XofaEDr3pNrDCaub9Exx3xYqPpCY/MT5VV YjdHtLquaCaupiBwAOi8QlqAIgJR3QQ6I9416+Iqssb9air6p+P2BMSs81JN3jcq sQEBcg+4u/8qJZdIrMOtWmye2OQT1mOWizUNkKpXY4CqIF8GHbdrfVWnzHZBixVB q0jUmDJyT5DQLgkRWQVL9eNlzroEuAUkC5ofjxa285f+g9IfvPiAsVyVXsz82CV9 HecRacq9BQ8G/IpMGfSf0NwgGmVYvLvFUpukVSvuSRhTdnweuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaCjlPKkajH6JfhHglByCQBWFMMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjI4MThmNGQtZTljNC0z YjRkLWJiNWEtMGY5NzNmYTIzYjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVkQlKYF5O5dPRtcxLKJsxhyw8653nqKOOaWy8gswCj6xRrzQsYm2Hk 77iOdRYEsSxinkGmzHM8XgazrW6qp6ekoOJp1fEYyw648f4pzmp9tWvXsNlzgRFX rqsB2ZXcfACI+63ITD2eESr7mugnkOQADyJMNQU9mrmpR+pNT05XqR6OLrWzQbfi KJeVtsNFHruKVhDSxtM8i2C4hMLieNpFwTOGTSqcMw2rnHy3OEV6zajd1HhVOVIT OHFG987ohDTSAZEgCquhvjyhVgmNfuoGriAuhRDAzObx/10O7rQWL3Sl3ezURjBG LxQcwicI0Tv2aSrE+PlaUHb3v2IxcLQ= -----END CERTIFICATE-----Generated at Fri Sep 25 22:32:04 2026 by rpki-client