$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95e11abb-54c7-3934-90d1-fdd8904d9ee3.roa File: 95e11abb-54c7-3934-90d1-fdd8904d9ee3.roa (raw, json) Hash identifier: Hq0Cv4rex/kLlv7T0O2mM69ifS8yiYVHbvytjpP4o2s= Subject key identifier: 79:35:C4:12:E7:23:96:0C:76:A3:42:95:A6:16:14:26:D0:78:E7:98 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F0D6CEE6895841BAC2D539280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95e11abb-54c7-3934-90d1-fdd8904d9ee3.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 396828 IP address blocks: 209.112.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:ee:68:95:84:1b:ac:2d:53:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=1a7573e9-79cb-41ca-af5f-a37add12110b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ad:9a:18:8b:47:97:12:98:f4:6d:80:30:e5: 4f:26:f6:6c:a9:48:b2:ee:bb:54:54:5a:ee:4b:ec: 00:d9:c7:f6:8f:b7:07:0a:c2:cd:b6:ca:de:9c:98: 8d:f8:7e:15:df:0f:99:16:8d:ab:50:d6:df:74:82: f5:17:b4:ba:da:a6:11:fc:e1:e8:18:42:c1:ea:89: 1c:10:e2:8c:53:04:e7:eb:5e:9d:84:64:4c:e1:f6: 0f:7e:f6:f4:bd:f8:c1:0d:f3:18:a3:18:26:b6:d2: 4b:a8:c0:47:b4:e1:30:97:7b:55:24:2f:ac:fd:8a: 9c:57:bc:81:c1:a8:10:37:76:7c:cb:db:fc:95:26: 86:5f:77:d5:05:d6:12:fc:7b:33:de:96:19:25:01: e1:23:37:a0:d7:f5:b5:19:e0:b8:53:76:9d:4c:e7: 64:bd:d7:bb:1a:cd:9a:79:5c:bc:c7:0c:5b:99:99: d5:e5:63:92:f2:12:d8:11:2f:79:f3:e9:e2:7e:64: 96:1c:c4:d8:5c:cf:94:63:6d:66:3a:49:3b:31:6b: 59:4e:cf:57:8b:3a:ff:bb:89:72:3b:c8:12:e4:85: 9e:33:33:74:7a:fa:f4:59:0d:2f:cf:d2:e0:00:a4: fd:e0:1a:09:ad:5f:b6:c8:39:b5:78:8f:4e:2a:f0: dc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:35:C4:12:E7:23:96:0C:76:A3:42:95:A6:16:14:26:D0:78:E7:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95e11abb-54c7-3934-90d1-fdd8904d9ee3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d3:25:77:7e:a8:d0:8c:ad:5e:20:7e:9b:28:f9:e1:dc:f2: bf:2b:a9:f2:41:9e:c2:f8:9b:92:18:2b:8a:c5:ef:c9:4b:4f: 1d:25:dd:c2:32:25:29:94:c9:4c:0d:7d:08:d7:af:cc:b4:ec: 7c:9b:1a:f7:b4:98:9c:28:c1:2e:fc:1f:50:13:de:d7:21:32: 3e:3d:61:01:87:ac:f4:52:3f:ca:99:37:1e:fe:88:e7:6f:5c: 49:00:b2:01:a7:b1:ee:90:0b:ad:7c:a1:c3:18:62:f1:e5:76: 8c:4e:b0:b1:a6:14:df:80:cc:64:8d:35:63:b0:6b:db:e6:f4: c3:a7:85:49:0e:e8:c3:6c:03:56:c5:b2:21:4a:ba:72:69:78: cb:3c:ea:c6:f9:58:26:af:17:0b:63:95:07:c5:fb:98:2f:b0: c4:f2:c9:9f:0c:4c:e8:d7:dd:3c:9e:71:01:79:16:29:13:c9: e4:7a:a9:aa:56:18:f3:0f:28:bf:6b:fe:e0:22:46:80:b1:0b: 14:3b:de:4f:a8:41:18:da:87:38:02:d0:77:4d:58:ee:a7:5e: 85:dd:b1:80:0c:16:e6:5e:cb:2d:db:ef:ef:5f:b9:8d:b7:df: 28:a3:4a:b7:bb:a2:9b:ac:5f:e3:b1:95:06:d4:ea:c6:42:a9: 18:23:9c:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbO5olYQbrC1TkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk MWE3NTczZTktNzljYi00MWNhLWFmNWYtYTM3YWRkMTIxMTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa2aGItHlxKY9G2AMOVPJvZsqUiy7rtUVFru S+wA2cf2j7cHCsLNtsrenJiN+H4V3w+ZFo2rUNbfdIL1F7S62qYR/OHoGELB6okc EOKMUwTn616dhGRM4fYPfvb0vfjBDfMYoxgmttJLqMBHtOEwl3tVJC+s/YqcV7yB wagQN3Z8y9v8lSaGX3fVBdYS/Hsz3pYZJQHhIzeg1/W1GeC4U3adTOdkvde7Gs2a eVy8xwxbmZnV5WOS8hLYES958+nifmSWHMTYXM+UY21mOkk7MWtZTs9Xizr/u4ly O8gS5IWeMzN0evr0WQ0vz9LgAKT94BoJrV+2yDm1eI9OKvDcfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHk1xBLnI5YMdqNClaYWFCbQeOeYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTVlMTFhYmItNTRjNy0z OTM0LTkwZDEtZmRkODkwNGQ5ZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfTJXd+qNCMrV4gfpso+eHc8r8rqfJBnsL4m5IYK4rF78lLTx0l3cIy JSmUyUwNfQjXr8y07HybGve0mJwowS78H1AT3tchMj49YQGHrPRSP8qZNx7+iOdv XEkAsgGnse6QC618ocMYYvHldoxOsLGmFN+AzGSNNWOwa9vm9MOnhUkO6MNsA1bF siFKunJpeMs86sb5WCavFwtjlQfF+5gvsMTyyZ8MTOjX3TyecQF5FikTyeR6qapW GPMPKL9r/uAiRoCxCxQ73k+oQRjahzgC0HdNWO6nXoXdsYAMFuZeyy3b7+9fuY23 3yijSre7opusX+OxlQbU6sZCqRgjnMI= -----END CERTIFICATE-----Generated at Thu Sep 24 01:53:00 2026 by rpki-client