$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72c1604b-b982-3749-9d82-9288bb0a83ea.roa File: 72c1604b-b982-3749-9d82-9288bb0a83ea.roa (raw, json) Hash identifier: Ldwtid1/9plOm0zTB5Z2duuGtdMzaqSn3GlO1QkT1BQ= Subject key identifier: DE:D1:9D:DC:03:5D:31:5D:50:69:5A:33:31:64:94:32:4D:DF:81:39 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49733D44B539C72DB5E9C5C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72c1604b-b982-3749-9d82-9288bb0a83ea.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397195 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:3d:44:b5:39:c7:2d:b5:e9:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ee356650-3c6d-4650-8158-4bcf6bda80a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6e:bb:0c:31:e6:35:46:a6:a6:d3:81:84:1f: cd:02:26:17:e2:6f:b0:3d:9c:5d:4d:6a:ef:5d:66: 49:a5:5d:57:72:c4:da:91:95:02:08:d8:c8:a6:12: a0:3d:f4:fa:3a:a7:47:85:fe:ec:7e:ca:04:c3:64: 46:97:d2:99:7a:5a:c5:48:f0:2a:5a:43:14:6f:28: 88:43:31:6f:e6:de:6c:07:a8:80:1f:ef:1c:63:b1: e6:38:32:50:1f:2e:7c:9f:34:80:56:4a:62:35:05: 0b:a4:4b:b4:39:a5:85:2e:45:f4:7b:e6:c6:a8:64: d4:b7:7b:87:58:d1:b5:15:f3:90:43:a4:72:64:86: 79:4c:f8:cd:8a:f0:af:24:34:2d:58:c6:64:47:3f: 13:d3:72:c0:46:10:ac:44:67:61:15:0a:a1:a4:c3: 78:1e:c6:d2:be:c5:c1:05:69:1b:54:52:7b:cc:14: 48:d3:77:c4:b3:d2:d0:d4:f3:a3:b0:6c:4a:b5:32: 36:c8:af:7f:20:5a:ae:be:a7:40:dd:78:6c:ee:12: 8f:92:d4:99:9b:96:88:16:14:d1:18:88:cb:98:48: 36:cb:71:43:93:c6:6d:7a:2d:bc:44:10:de:a7:12: d9:e4:26:37:3b:6a:0c:03:5c:9e:e5:a5:d6:a1:70: 64:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D1:9D:DC:03:5D:31:5D:50:69:5A:33:31:64:94:32:4D:DF:81:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72c1604b-b982-3749-9d82-9288bb0a83ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ab:f9:f4:a6:c9:36:8f:74:b4:96:ae:3a:21:b0:c6:51:3d: ae:27:2c:b9:9f:50:cf:40:a6:ad:28:6e:98:14:2a:6f:a6:20: 86:72:97:8c:e8:61:c9:7f:9e:64:55:c2:6c:02:b1:2c:ea:b4: 5c:d5:0c:9b:3b:04:5a:a2:96:de:c2:72:bc:40:65:48:a0:b2: e3:10:b2:41:c0:5e:58:66:be:07:e8:21:95:5b:5d:12:f8:8b: 82:1a:ff:fa:32:97:22:0b:e8:99:ae:11:f3:7c:e8:97:fa:44: 3a:b1:af:da:2b:7c:21:f9:b9:97:63:b6:8a:2f:c1:25:89:6b: fe:11:62:6d:02:ad:ef:8b:ab:67:c3:87:f9:d8:32:d0:16:b1: 20:87:82:bf:4e:3a:60:10:de:06:de:84:f1:b3:6b:da:53:62: 92:bb:dc:cb:78:cf:fb:42:c9:82:c1:26:5f:1e:32:6c:bc:8c: 4e:fd:7d:13:fc:26:27:c1:30:15:20:28:e0:06:71:fc:4e:f8: 65:7d:22:e4:08:36:3f:4a:16:81:af:bb:52:b8:32:56:53:d5: 7a:44:b0:87:25:f4:92:44:74:c4:62:bf:bd:c4:4d:d8:7a:fa: f4:a5:88:30:99:56:92:62:99:20:b7:fa:b6:d2:51:af:a7:d8: 1e:f7:f2:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcz1EtTnHLbXpxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWUzNTY2NTAtM2M2ZC00NjUwLTgxNTgtNGJjZjZiZGE4MGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz267DDHmNUamptOBhB/NAiYX4m+wPZxdTWrv XWZJpV1XcsTakZUCCNjIphKgPfT6OqdHhf7sfsoEw2RGl9KZelrFSPAqWkMUbyiI QzFv5t5sB6iAH+8cY7HmODJQHy58nzSAVkpiNQULpEu0OaWFLkX0e+bGqGTUt3uH WNG1FfOQQ6RyZIZ5TPjNivCvJDQtWMZkRz8T03LARhCsRGdhFQqhpMN4HsbSvsXB BWkbVFJ7zBRI03fEs9LQ1POjsGxKtTI2yK9/IFquvqdA3Xhs7hKPktSZm5aIFhTR GIjLmEg2y3FDk8Ztei28RBDepxLZ5CY3O2oMA1ye5aXWoXBkZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7RndwDXTFdUGlaMzFklDJN34E5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzJjMTYwNGItYjk4Mi0z NzQ5LTlkODItOTI4OGJiMGE4M2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmr+fSmyTaPdLSWrjohsMZRPa4nLLmfUM9Apq0obpgUKm+mIIZyl4zo Ycl/nmRVwmwCsSzqtFzVDJs7BFqilt7CcrxAZUigsuMQskHAXlhmvgfoIZVbXRL4 i4Ia//oylyIL6JmuEfN86Jf6RDqxr9orfCH5uZdjtoovwSWJa/4RYm0Cre+Lq2fD h/nYMtAWsSCHgr9OOmAQ3gbehPGza9pTYpK73Mt4z/tCyYLBJl8eMmy8jE79fRP8 JifBMBUgKOAGcfxO+GV9IuQINj9KFoGvu1K4MlZT1XpEsIcl9JJEdMRiv73ETdh6 +vSliDCZVpJimSC3+rbSUa+n2B738j8= -----END CERTIFICATE-----Generated at Sat Sep 26 02:02:36 2026 by rpki-client