$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4341880-e37d-3d01-8acc-c4d06a69343d.roa File: c4341880-e37d-3d01-8acc-c4d06a69343d.roa (raw, json) Hash identifier: kZ8CVUJyM4oUdxqdnhVGfor0lhEKZHDw/mDB3d3nDwo= Subject key identifier: 4E:08:1E:C7:A8:95:ED:1B:B5:E4:EF:62:4A:F6:D2:53:BE:40:FC:65 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F497496F62F26F3AABDDFB100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4341880-e37d-3d01-8acc-c4d06a69343d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397197 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:96:f6:2f:26:f3:aa:bd:df:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d79acea9-b616-44a9-885f-7ed3949ce4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:19:a0:12:1e:8c:98:30:77:34:de:20:0d:77: 1b:00:56:aa:51:6c:83:70:3f:27:7b:31:52:c9:29: ad:17:9e:ea:92:e8:36:c5:31:46:57:d5:4b:13:e3: 3c:31:27:3c:96:ff:13:30:a1:05:f5:77:1b:de:61: 76:74:a6:33:98:0f:f2:53:cb:1c:75:c9:b1:9e:31: 6d:7b:e5:93:e2:e1:3d:f8:d1:3e:98:87:2d:ee:d5: ab:c1:04:f1:1c:d1:af:53:d2:44:c7:1d:5f:0d:ea: a2:bb:c4:51:1a:d6:5f:64:6a:c1:16:8b:51:0f:51: 44:21:80:98:c5:1d:af:6d:46:ae:be:c0:62:e7:71: 85:31:93:ab:ab:91:a3:d2:ca:b1:ac:a3:0c:74:3d: 52:c5:b2:2f:83:1a:93:99:b7:4b:2c:67:ba:58:b3: 48:fd:a8:ce:4b:55:c9:55:e0:7e:43:2f:98:ff:4d: 16:35:d3:ca:c5:1b:7e:86:c5:de:6f:d6:89:5e:02: 48:13:f4:03:6e:9e:d3:ed:45:e0:fe:ac:3f:d5:e0: ac:af:45:c2:32:b7:51:08:be:85:12:0b:e0:fc:0e: aa:3d:69:47:5e:d1:9f:0c:9c:fb:1e:9a:9f:11:5d: 01:42:55:49:a2:b9:dd:d0:b6:d0:1b:cb:39:45:1e: 13:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:08:1E:C7:A8:95:ED:1B:B5:E4:EF:62:4A:F6:D2:53:BE:40:FC:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4341880-e37d-3d01-8acc-c4d06a69343d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:30:cb:c4:b1:bd:b3:d5:1b:b0:0b:71:1d:8b:9d:cb:dc:72: f7:33:ca:a2:25:e4:41:0d:09:1f:17:8f:66:8f:91:11:41:1f: 83:a1:5d:4d:79:f9:2c:a9:d2:3c:63:22:fe:ba:f6:00:55:aa: 3f:90:52:21:9e:7b:9b:fb:0d:22:9a:e5:05:a0:c7:9a:d6:20: b7:b2:eb:43:72:87:36:51:e4:4f:ce:26:2b:29:24:70:1e:14: 2a:29:ea:18:f4:68:60:1a:89:78:8b:16:36:fe:3f:06:58:ec: 30:93:7d:2f:ec:55:58:3e:7c:61:cf:8b:52:83:e8:fa:f7:71: ab:ba:28:e8:86:1b:31:c8:e6:bb:b5:8c:81:6d:16:c8:e0:ba: 30:27:2a:e3:88:6d:a3:d2:0b:7f:e7:d7:61:87:03:94:d6:80: 91:e4:41:a7:52:63:91:c1:35:16:2c:7b:8b:f8:6a:01:c0:41: 0f:e8:8c:11:ba:5e:e3:ec:a5:58:16:70:33:58:06:88:78:81: 26:cb:56:7a:62:cc:96:dd:08:69:81:1e:c9:c2:48:da:89:bf: a7:bf:53:fa:f9:71:d1:4a:f6:20:a4:8a:c8:03:12:b0:2a:af: fc:08:27:0c:4d:2e:23:25:b5:53:69:b2:ea:38:bb:4f:cc:db: cb:fc:76:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdJb2Lybzqr3fsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDc5YWNlYTktYjYxNi00NGE5LTg4NWYtN2VkMzk0OWNlNGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRmgEh6MmDB3NN4gDXcbAFaqUWyDcD8nezFS ySmtF57qkug2xTFGV9VLE+M8MSc8lv8TMKEF9Xcb3mF2dKYzmA/yU8scdcmxnjFt e+WT4uE9+NE+mIct7tWrwQTxHNGvU9JExx1fDeqiu8RRGtZfZGrBFotRD1FEIYCY xR2vbUauvsBi53GFMZOrq5Gj0sqxrKMMdD1SxbIvgxqTmbdLLGe6WLNI/ajOS1XJ VeB+Qy+Y/00WNdPKxRt+hsXeb9aJXgJIE/QDbp7T7UXg/qw/1eCsr0XCMrdRCL6F Egvg/A6qPWlHXtGfDJz7HpqfEV0BQlVJornd0LbQG8s5RR4T7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4IHseole0bteTvYkr20lO+QPxlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzQzNDE4ODAtZTM3ZC0z ZDAxLThhY2MtYzRkMDZhNjkzNDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMwy8SxvbPVG7ALcR2LncvccvczyqIl5EENCR8Xj2aPkRFBH4OhXU15 +Syp0jxjIv669gBVqj+QUiGee5v7DSKa5QWgx5rWILey60NyhzZR5E/OJispJHAe FCop6hj0aGAaiXiLFjb+PwZY7DCTfS/sVVg+fGHPi1KD6Pr3cau6KOiGGzHI5ru1 jIFtFsjgujAnKuOIbaPSC3/n12GHA5TWgJHkQadSY5HBNRYse4v4agHAQQ/ojBG6 XuPspVgWcDNYBoh4gSbLVnpizJbdCGmBHsnCSNqJv6e/U/r5cdFK9iCkisgDErAq r/wIJwxNLiMltVNpsuo4u0/M28v8djA= -----END CERTIFICATE-----Generated at Sat Sep 26 03:56:08 2026 by rpki-client