$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de23efa0-52a1-3215-86a7-21eacb33347d.roa File: de23efa0-52a1-3215-86a7-21eacb33347d.roa (raw, json) Hash identifier: X7o3swrur0hXF2u4TiNbO5uK61LNrOFKgABCOmW2zY8= Subject key identifier: 91:AE:03:6E:5A:8E:27:D9:13:FF:61:74:69:5A:FB:FF:9C:F4:BC:0B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498BAA68171CD395CDBD6000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de23efa0-52a1-3215-86a7-21eacb33347d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396595 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:aa:68:17:1c:d3:95:cd:bd:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=021a8b0b-821d-40d9-82fb-4d9887aead21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8e:8d:5e:ac:a5:e3:ea:c4:27:ec:6b:6a:f7: 75:8a:7b:29:62:72:87:fb:24:22:e6:a3:6c:d5:1b: 12:63:bc:25:d2:39:b3:6a:47:63:a3:04:3c:5a:89: 3c:82:69:ee:17:2c:c5:3c:f9:06:6c:d2:1b:f6:53: 64:52:8d:bd:91:39:18:3f:c1:46:db:cd:a7:7b:75: 8c:3b:a8:25:37:dc:f0:27:ae:d7:99:60:5b:01:9e: 7a:20:e6:9e:69:84:3a:b0:43:82:22:35:1e:7e:b0: 18:6d:76:9a:24:55:ab:49:9d:5c:c7:e8:61:a9:9d: 6d:91:e2:3f:fa:79:7b:d7:b9:a4:0d:84:80:7e:d2: fd:00:b6:33:22:65:c1:20:4f:22:9f:00:d9:79:3c: fb:ee:59:65:1e:34:e8:32:1e:27:c0:15:54:61:97: d7:99:8f:a3:db:40:e6:3f:b6:c9:84:d8:88:f1:55: 1b:3c:26:ab:73:67:2f:e8:f4:17:8d:f3:84:e7:8d: 53:90:fc:d5:ca:f0:c0:59:42:ea:6c:82:2a:2b:e5: bb:e8:fc:b5:46:1d:9c:a1:23:c8:b6:64:6b:76:e7: 67:f6:f9:c5:63:86:af:9f:b5:85:f8:d4:51:fc:d1: 9c:be:4d:93:8b:fe:62:13:d0:bd:f9:96:53:23:c1: d7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AE:03:6E:5A:8E:27:D9:13:FF:61:74:69:5A:FB:FF:9C:F4:BC:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de23efa0-52a1-3215-86a7-21eacb33347d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:47:37:e4:70:5d:08:d9:5b:95:d9:7b:1b:8b:89:f5:b3:5a: a2:cf:e4:00:65:bc:d8:86:a5:7b:1e:71:ed:02:77:4e:6c:e0: e8:89:1c:c2:98:a3:37:2d:bd:e6:fb:99:d3:f7:c5:05:03:61: 37:44:b1:59:b3:a2:ad:82:79:ce:46:c2:3a:2c:94:42:64:59: 12:39:01:50:89:f4:de:f1:91:95:ad:30:ad:12:ba:c6:d1:41: 9f:17:78:44:48:fe:a5:b9:51:97:fb:ae:52:d0:2f:20:c5:81: a5:4f:99:d1:c4:11:a7:b3:ca:85:87:60:ab:0f:71:1c:33:4d: 3d:4c:69:b8:60:01:cb:86:4b:7f:3f:42:30:a1:0a:8f:ea:33: f2:22:15:3e:53:18:62:3b:e8:80:9d:3c:d3:1e:f7:d0:61:79: 9b:13:ff:8d:af:50:98:e7:fe:b3:84:3a:ac:ea:35:8b:44:f3: 23:34:cd:55:e0:c7:4a:c5:17:e6:a6:19:ae:8a:cb:f8:cf:8d: 82:d9:d2:9f:6b:76:3b:c3:b6:88:e2:a9:cc:64:05:e2:44:95: 14:88:56:e1:c1:85:b8:ec:07:bc:ec:d2:4e:53:9d:05:3f:f9: 71:93:1b:c9:2a:31:0d:c9:1c:90:c5:37:78:57:9d:0e:bf:38: b8:d1:df:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji6poFxzTlc29YAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDIxYThiMGItODIxZC00MGQ5LTgyZmItNGQ5ODg3YWVhZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg46NXqyl4+rEJ+xravd1inspYnKH+yQi5qNs 1RsSY7wl0jmzakdjowQ8Wok8gmnuFyzFPPkGbNIb9lNkUo29kTkYP8FG282ne3WM O6glN9zwJ67XmWBbAZ56IOaeaYQ6sEOCIjUefrAYbXaaJFWrSZ1cx+hhqZ1tkeI/ +nl717mkDYSAftL9ALYzImXBIE8inwDZeTz77lllHjToMh4nwBVUYZfXmY+j20Dm P7bJhNiI8VUbPCarc2cv6PQXjfOE541TkPzVyvDAWULqbIIqK+W76Py1Rh2coSPI tmRrdudn9vnFY4avn7WF+NRR/NGcvk2Ti/5iE9C9+ZZTI8HXPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGuA25ajifZE/9hdGla+/+c9LwLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGUyM2VmYTAtNTJhMS0z MjE1LTg2YTctMjFlYWNiMzMzNDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRHN+RwXQjZW5XZexuLifWzWqLP5ABlvNiGpXsece0Cd05s4OiJHMKY ozctveb7mdP3xQUDYTdEsVmzoq2Cec5GwjoslEJkWRI5AVCJ9N7xkZWtMK0SusbR QZ8XeERI/qW5UZf7rlLQLyDFgaVPmdHEEaezyoWHYKsPcRwzTT1MabhgAcuGS38/ QjChCo/qM/IiFT5TGGI76ICdPNMe99BheZsT/42vUJjn/rOEOqzqNYtE8yM0zVXg x0rFF+amGa6Ky/jPjYLZ0p9rdjvDtojiqcxkBeJElRSIVuHBhbjsB7zs0k5TnQU/ +XGTG8kqMQ3JHJDFN3hXnQ6/OLjR3yM= -----END CERTIFICATE-----Generated at Sat Sep 26 13:28:05 2026 by rpki-client