$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0a7714d-b0c9-3500-a8ae-2cb7273f8b1a.roa File: b0a7714d-b0c9-3500-a8ae-2cb7273f8b1a.roa (raw, json) Hash identifier: Ng9xJmHrwYRlOTZiTrdgNLIF6ApHWbnYNGVLbHc8Ukk= Subject key identifier: 09:F5:F8:04:59:31:95:CE:C7:98:0F:FA:52:85:EE:7F:79:0A:7C:89 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974F661C9222BC0D2CEAC40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0a7714d-b0c9-3500-a8ae-2cb7273f8b1a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396551 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:f6:61:c9:22:2b:c0:d2:ce:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5ddf22a9-da5a-48ab-bad3-b094fdf8b537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ff:27:a4:67:bd:9e:8e:d3:af:47:f4:b6:3a: 78:dc:0b:94:6e:d1:f4:06:06:3e:f9:85:4e:66:f3: 0a:2f:77:4c:08:c3:fc:e0:b8:64:45:e3:8a:18:6f: f8:41:5c:61:de:85:c1:f5:55:5f:14:7b:8d:de:d3: 60:ba:90:2a:c9:4e:75:02:36:51:52:7b:8e:9f:ed: 26:a8:da:78:b0:de:8c:a4:50:a2:44:bf:ac:e3:9c: 2a:bf:ed:15:9c:d2:53:48:9e:3f:28:f0:26:af:d2: df:55:fa:79:e7:8a:d6:8f:ec:cc:33:ec:27:d8:69: 3c:59:e5:e5:03:16:b8:b9:7f:e8:fa:d4:a7:2c:40: 30:40:74:8c:54:52:99:44:84:c7:f4:6d:4a:3a:95: 69:b4:0d:17:06:a7:95:ba:b8:6d:93:70:90:bb:fa: da:3f:ca:9a:1f:d4:9c:b6:02:7f:1b:dd:48:40:3c: 13:25:34:26:07:ba:53:64:23:d5:04:b0:2e:e5:aa: cd:09:a2:08:a7:8e:40:6d:45:64:e4:b0:ef:d9:e3: e2:87:b9:a1:9d:84:f2:52:97:e3:d0:47:66:2d:00: ac:5f:38:d1:76:b6:f9:d9:89:74:1f:80:31:12:81: 2c:d3:06:74:39:a5:d3:f6:1c:61:d7:47:f5:45:94: 43:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F5:F8:04:59:31:95:CE:C7:98:0F:FA:52:85:EE:7F:79:0A:7C:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0a7714d-b0c9-3500-a8ae-2cb7273f8b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:18:a2:de:09:a8:0f:ee:4f:55:fc:bd:0b:1b:1f:cc:d1:dc: d8:c3:73:4b:0c:96:81:44:28:db:e4:41:65:f5:9c:9e:86:63: ef:30:06:0d:8e:a4:05:0c:2c:1c:d1:ec:ab:62:47:94:cb:a9: ee:be:22:da:c4:44:e0:e4:ae:c8:40:bd:0f:23:9b:87:ab:99: be:6f:7b:b7:ae:fe:86:3a:f4:1b:84:fe:68:a7:69:62:fe:91: da:8f:be:12:ec:b0:10:1f:0a:28:0c:a1:1e:c6:cc:56:ec:fc: 8a:f1:fd:70:bd:5e:8d:b0:07:d3:f3:d8:73:f4:60:0f:02:82: 15:1b:1f:44:6e:8a:52:e9:d2:21:83:23:f5:49:de:6d:d1:ce: 2e:68:71:96:ab:c7:61:6e:5c:cc:8a:2f:2f:85:be:4e:b8:f4: c5:5b:94:c0:e4:5d:8b:67:4a:e4:b9:53:67:08:16:6f:90:05: b1:69:34:3c:a1:4b:d5:98:ae:50:4d:11:58:7c:d1:d8:79:78: be:19:cd:88:29:81:53:35:e7:51:f0:1a:36:fe:68:80:cf:77: a9:25:c7:c0:8d:ff:0d:50:36:e8:fd:e7:30:6b:23:52:66:eb: 73:06:0c:95:02:02:fa:a3:02:4a:92:fb:4f:cb:0a:91:aa:fc: 0e:8a:7c:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdPZhySIrwNLOrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWRkZjIyYTktZGE1YS00OGFiLWJhZDMtYjA5NGZkZjhiNTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/8npGe9no7Tr0f0tjp43AuUbtH0BgY++YVO ZvMKL3dMCMP84LhkReOKGG/4QVxh3oXB9VVfFHuN3tNgupAqyU51AjZRUnuOn+0m qNp4sN6MpFCiRL+s45wqv+0VnNJTSJ4/KPAmr9LfVfp554rWj+zMM+wn2Gk8WeXl Axa4uX/o+tSnLEAwQHSMVFKZRITH9G1KOpVptA0XBqeVurhtk3CQu/raP8qaH9Sc tgJ/G91IQDwTJTQmB7pTZCPVBLAu5arNCaIIp45AbUVk5LDv2ePih7mhnYTyUpfj 0EdmLQCsXzjRdrb52Yl0H4AxEoEs0wZ0OaXT9hxh10f1RZRDvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAn1+ARZMZXOx5gP+lKF7n95CnyJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjBhNzcxNGQtYjBjOS0z NTAwLWE4YWUtMmNiNzI3M2Y4YjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEYot4JqA/uT1X8vQsbH8zR3NjDc0sMloFEKNvkQWX1nJ6GY+8wBg2O pAUMLBzR7KtiR5TLqe6+ItrERODkrshAvQ8jm4ermb5ve7eu/oY69BuE/minaWL+ kdqPvhLssBAfCigMoR7GzFbs/Irx/XC9Xo2wB9Pz2HP0YA8CghUbH0RuilLp0iGD I/VJ3m3Rzi5ocZarx2FuXMyKLy+Fvk649MVblMDkXYtnSuS5U2cIFm+QBbFpNDyh S9WYrlBNEVh80dh5eL4ZzYgpgVM151HwGjb+aIDPd6klx8CN/w1QNuj95zBrI1Jm 63MGDJUCAvqjAkqS+0/LCpGq/A6KfKU= -----END CERTIFICATE-----Generated at Fri Sep 25 23:36:52 2026 by rpki-client