$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9400faec-4a89-30ac-9125-146b0495197e.roa File: 9400faec-4a89-30ac-9125-146b0495197e.roa (raw, json) Hash identifier: /MAI5BkIv8CpQGUQ6AdnSooJW09y4+R+uMBFKFcghpk= Subject key identifier: DC:C5:CF:F1:45:D6:D8:9B:10:F6:2A:7F:87:F3:7B:8A:D6:DB:D9:92 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4988B8F5D467F8042C9FFB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9400faec-4a89-30ac-9125-146b0495197e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40647 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:b8:f5:d4:67:f8:04:2c:9f:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b18334d9-f792-4678-a187-7934465de721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d7:45:9e:04:ad:ef:73:20:e9:23:64:1f:fe: 99:28:cf:16:f9:bf:8b:0c:a1:22:8c:38:a9:c5:16: d1:66:70:0e:9f:1e:a5:74:95:63:29:92:8b:de:c2: 38:7b:ec:33:d8:df:37:bf:1e:79:82:c6:50:ac:99: 2d:10:b8:16:ea:88:41:08:b5:5f:7c:db:0c:ac:38: 58:aa:c7:2f:56:79:82:69:e3:d7:b5:20:1f:cc:aa: a1:8f:64:37:20:3c:3e:91:3b:07:51:72:de:70:13: 8e:fb:1f:13:df:3d:5c:7b:a7:2e:8e:19:69:ce:64: ec:20:28:d4:be:2e:9a:c6:2b:e9:56:a7:53:fb:f3: fe:e6:0b:b9:e2:75:f8:8e:50:4c:3a:6d:18:c1:e5: a2:d9:ed:5b:dd:f5:f2:f5:96:a7:ac:d9:b7:74:5f: 3b:14:39:1c:9a:99:b4:f8:16:80:3f:9c:5c:1a:46: f2:83:e5:ed:cc:5a:cf:ba:80:5e:ed:45:33:95:0a: ed:dc:d8:c0:0e:3f:36:b8:87:7f:84:73:9f:71:90: 60:01:c9:ac:e0:c9:17:b9:77:06:0f:6e:1c:63:eb: 66:b0:c3:6c:2e:d7:da:89:5c:be:66:f8:7c:42:23: 0b:a2:18:38:d3:d3:60:5e:68:06:24:e3:b8:fa:ce: 11:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C5:CF:F1:45:D6:D8:9B:10:F6:2A:7F:87:F3:7B:8A:D6:DB:D9:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9400faec-4a89-30ac-9125-146b0495197e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:b3:e6:19:4f:e3:84:cd:e0:af:07:b0:d5:41:0e:3f:6d:c5: 27:c0:21:3a:a1:45:f1:8e:f4:4d:a0:d0:74:e5:33:44:5c:6d: 1f:73:91:a5:2c:05:a4:ba:2d:7b:9b:f7:fb:66:d8:56:67:40: 39:da:38:09:2f:14:f6:ad:a3:6f:b2:b0:ae:3d:f5:9c:f5:1b: c2:26:11:b4:e4:cb:2b:1a:ff:35:1e:52:00:cf:0b:02:e3:7b: c5:c1:fc:74:d1:0d:a2:ef:d3:58:e7:b3:a6:e0:6f:c9:e5:c5: 9a:ea:9b:1a:51:8f:2b:19:4c:96:de:96:70:47:bf:74:28:5b: e7:e0:16:f6:59:f6:56:2a:24:c1:21:61:62:28:44:1a:6e:a0: 6b:10:03:f1:09:06:5a:99:72:30:3d:90:d5:92:b4:8f:56:f8: dc:a7:7b:0f:2f:47:b9:9c:a4:48:5f:3e:ae:10:7b:b4:15:ec: cc:15:1a:b7:90:34:bb:d1:bc:6e:ab:a4:36:97:94:3b:57:4f: 34:76:50:41:ea:c3:95:3e:e4:1f:47:30:5c:a0:9c:b9:2c:0c: d3:f3:64:dd:7c:db:5a:30:dd:57:fa:84:79:f3:6d:2d:22:3c: 91:1c:3c:92:f4:21:26:4b:b0:d2:13:3f:e6:b3:78:54:d5:58: f0:fd:29:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiLj11Gf4BCyf+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjE4MzM0ZDktZjc5Mi00Njc4LWExODctNzkzNDQ2NWRlNzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9dFngSt73Mg6SNkH/6ZKM8W+b+LDKEijDip xRbRZnAOnx6ldJVjKZKL3sI4e+wz2N83vx55gsZQrJktELgW6ohBCLVffNsMrDhY qscvVnmCaePXtSAfzKqhj2Q3IDw+kTsHUXLecBOO+x8T3z1ce6cujhlpzmTsICjU vi6axivpVqdT+/P+5gu54nX4jlBMOm0YweWi2e1b3fXy9ZanrNm3dF87FDkcmpm0 +BaAP5xcGkbyg+XtzFrPuoBe7UUzlQrt3NjADj82uId/hHOfcZBgAcms4MkXuXcG D24cY+tmsMNsLtfaiVy+Zvh8QiMLohg409NgXmgGJOO4+s4RcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzFz/FF1tibEPYqf4fze4rW29mSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTQwMGZhZWMtNGE4OS0z MGFjLTkxMjUtMTQ2YjA0OTUxOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOz5hlP44TN4K8HsNVBDj9txSfAITqhRfGO9E2g0HTlM0RcbR9zkaUs BaS6LXub9/tm2FZnQDnaOAkvFPato2+ysK499Zz1G8ImEbTkyysa/zUeUgDPCwLj e8XB/HTRDaLv01jns6bgb8nlxZrqmxpRjysZTJbelnBHv3QoW+fgFvZZ9lYqJMEh YWIoRBpuoGsQA/EJBlqZcjA9kNWStI9W+Nynew8vR7mcpEhfPq4Qe7QV7MwVGreQ NLvRvG6rpDaXlDtXTzR2UEHqw5U+5B9HMFygnLksDNPzZN1821ow3Vf6hHnzbS0i PJEcPJL0ISZLsNITP+azeFTVWPD9KfQ= -----END CERTIFICATE-----Generated at Sat Sep 26 10:28:09 2026 by rpki-client