$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d55d9d2e-b782-3fb4-b191-7c5a48e98326.roa File: d55d9d2e-b782-3fb4-b191-7c5a48e98326.roa (raw, json) Hash identifier: 3SrDecuZZyxD3Fwl3TtU0WF7dodbtmBoImsRpaoW990= Subject key identifier: FA:4F:8B:94:AC:3F:F1:0A:E1:55:D1:AF:EB:01:0D:86:8F:15:48:2A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498B530642931A3DE58E2DA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d55d9d2e-b782-3fb4-b191-7c5a48e98326.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396614 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:53:06:42:93:1a:3d:e5:8e:2d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=672fd2a0-cbc6-423f-9a5c-164459530497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:86:93:a4:56:5d:0e:27:25:07:86:7c:a1:45: b1:b0:ab:95:8e:c0:3c:c4:c7:fb:8a:84:ef:23:3b: 32:4f:a2:22:ec:86:cf:08:89:df:33:40:45:ca:68: c7:b7:d2:8b:76:d4:d5:04:75:db:0d:b3:97:f3:3c: e4:ad:c2:0c:5c:1f:91:0b:bb:e0:9e:26:63:1c:83: d8:40:01:53:10:59:0d:2d:5e:11:39:ae:fd:5f:ca: 0e:bd:d2:be:3e:2b:ee:46:ab:37:90:73:a2:be:0d: c1:7a:f7:4e:dc:66:a1:99:0d:4d:68:e5:d9:6c:7e: 87:e5:08:44:87:e7:0a:f4:07:75:36:87:75:e4:48: 35:ae:6c:fa:fa:3a:f6:c9:b3:5e:0e:76:4e:90:7a: a4:63:19:c3:2b:1a:cb:43:d0:97:3e:0a:f4:ce:86: 70:7c:df:e2:aa:3d:91:f5:24:e1:30:4f:b0:71:ae: 2a:c6:34:d5:1a:2a:72:5b:99:e8:0b:36:8c:b6:b3: df:91:42:ac:75:7b:6a:01:1b:f0:9f:73:bb:eb:7a: 2e:4d:57:48:dc:17:51:ae:2c:f1:07:3c:c1:b7:68: 35:38:13:bc:ae:40:89:59:9b:59:73:96:d3:2d:b9: 3a:97:e5:57:d5:79:c7:a1:94:ae:09:09:af:4d:69: 58:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4F:8B:94:AC:3F:F1:0A:E1:55:D1:AF:EB:01:0D:86:8F:15:48:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d55d9d2e-b782-3fb4-b191-7c5a48e98326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:d7:2b:60:e4:e1:80:3e:93:aa:c6:2b:2e:5b:67:96:01:e6: 82:a5:a8:11:11:c1:43:57:4f:38:8c:c4:6d:35:20:5f:e2:fe: 85:a6:2a:64:d8:f9:de:7a:89:37:3f:d3:9b:3a:d8:b3:bb:ab: bb:e3:28:e0:d4:45:3b:c8:27:ae:43:cd:ee:16:a1:77:3a:e5: c3:c4:79:12:70:6c:bd:db:e3:45:b4:3d:10:57:c1:c0:ab:bd: 03:8e:39:aa:26:cc:cb:04:78:d5:4b:a2:2f:65:a6:ab:f8:a2: ac:e2:f5:8d:13:fe:29:02:18:2b:84:8f:bb:c0:bf:2a:4e:99: c9:57:07:75:5f:f9:fa:7c:e7:dc:e1:b2:f0:a6:3e:1f:e2:6c: db:c9:40:ea:d3:f9:d2:64:8a:61:21:a4:f5:d9:8d:71:f8:87: d7:bf:11:f2:f7:ea:a1:2c:f5:5c:2a:4d:f3:aa:cf:78:97:a6: bd:45:fe:13:1e:58:d5:62:1b:54:38:f5:a5:9a:ef:61:46:53: 9f:c6:a4:a6:ff:31:c5:fe:c0:92:ab:15:6b:d3:88:65:2b:5a: 15:26:48:12:1f:2e:19:de:58:15:2a:b0:64:33:74:f0:6c:4c: db:72:0c:7d:d5:f4:af:e0:0e:02:23:ea:e1:b4:23:ff:31:41: f9:08:7d:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji1MGQpMaPeWOLaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjcyZmQyYTAtY2JjNi00MjNmLTlhNWMtMTY0NDU5NTMwNDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4aTpFZdDiclB4Z8oUWxsKuVjsA8xMf7ioTv IzsyT6Ii7IbPCInfM0BFymjHt9KLdtTVBHXbDbOX8zzkrcIMXB+RC7vgniZjHIPY QAFTEFkNLV4ROa79X8oOvdK+PivuRqs3kHOivg3BevdO3GahmQ1NaOXZbH6H5QhE h+cK9Ad1Nod15Eg1rmz6+jr2ybNeDnZOkHqkYxnDKxrLQ9CXPgr0zoZwfN/iqj2R 9SThME+wca4qxjTVGipyW5noCzaMtrPfkUKsdXtqARvwn3O763ouTVdI3BdRrizx BzzBt2g1OBO8rkCJWZtZc5bTLbk6l+VX1XnHoZSuCQmvTWlYCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpPi5SsP/EK4VXRr+sBDYaPFUgqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDU1ZDlkMmUtYjc4Mi0z ZmI0LWIxOTEtN2M1YTQ4ZTk4MzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/XK2Dk4YA+k6rGKy5bZ5YB5oKlqBERwUNXTziMxG01IF/i/oWmKmTY +d56iTc/05s62LO7q7vjKODURTvIJ65Dze4WoXc65cPEeRJwbL3b40W0PRBXwcCr vQOOOaomzMsEeNVLoi9lpqv4oqzi9Y0T/ikCGCuEj7vAvypOmclXB3Vf+fp859zh svCmPh/ibNvJQOrT+dJkimEhpPXZjXH4h9e/EfL36qEs9VwqTfOqz3iXpr1F/hMe WNViG1Q49aWa72FGU5/GpKb/McX+wJKrFWvTiGUrWhUmSBIfLhneWBUqsGQzdPBs TNtyDH3V9K/gDgIj6uG0I/8xQfkIfQA= -----END CERTIFICATE-----Generated at Fri Sep 25 14:56:54 2026 by rpki-client