$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f67f4718-2119-35c4-8bbd-05f22adaf153.roa File: f67f4718-2119-35c4-8bbd-05f22adaf153.roa (raw, json) Hash identifier: FJkxnjlbvShan6Na8fu/W+OXz/O+ZlPZD0eiZuC4GoU= Subject key identifier: A5:D7:69:7E:09:67:0A:52:CC:9E:98:91:1D:9E:97:AF:42:03:EE:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498908251D007A64FD112438 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f67f4718-2119-35c4-8bbd-05f22adaf153.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396581 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:08:25:1d:00:7a:64:fd:11:24:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ec7e4c66-5f8e-426b-9907-c5c07ed804e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d0:c3:57:c0:82:6b:9e:75:82:0a:42:79:94: 73:b2:b2:61:c5:16:0f:e5:26:ed:38:84:84:51:4a: 8a:2c:10:50:dd:9a:ba:c8:7e:2f:c6:88:55:5f:1c: d9:9d:3c:72:f3:74:7d:83:fc:0e:fd:37:30:d0:8a: 15:4e:e8:8a:cb:02:69:f5:28:f3:1a:a1:c3:fb:31: de:c6:35:46:c6:b5:a4:5f:85:8b:27:2b:33:2c:b8: 74:b8:b0:ee:8d:92:1d:7a:04:b9:aa:c8:94:66:b5: c7:d2:fd:3d:7a:f9:e5:f5:be:71:88:5b:f7:3f:8c: fc:f1:0c:1b:a1:a5:e5:16:bf:a3:c8:9a:65:68:11: 84:46:88:83:f3:12:e0:ac:14:32:f4:ea:b3:67:5b: 41:57:9b:d6:61:ec:5f:ef:c2:b6:14:3b:49:14:3d: 38:6f:01:54:b4:d3:d8:c3:e1:cc:1f:97:e5:39:15: 8b:c8:98:25:42:b4:56:79:cb:25:22:70:8b:61:59: af:47:90:d7:fa:4d:b2:17:cc:da:13:62:c1:04:55: 3a:93:71:10:85:72:ed:5a:47:d9:74:f4:95:1c:95: 44:4c:f4:3e:09:1c:6e:72:7b:4f:11:5c:14:fa:73: d2:05:8d:41:e1:60:38:eb:09:89:ec:b8:9a:be:e5: e4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D7:69:7E:09:67:0A:52:CC:9E:98:91:1D:9E:97:AF:42:03:EE:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f67f4718-2119-35c4-8bbd-05f22adaf153.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:34:e0:5c:7e:2b:c5:3f:e4:b7:03:34:13:6c:6a:6a:4d:a2: 5b:45:7e:ac:5e:15:ac:72:b1:d6:d6:c1:c2:4d:25:7f:80:c6: 01:12:0b:c5:26:79:71:65:13:2a:c7:db:71:10:52:62:bf:cf: 60:11:f2:5d:11:09:b4:db:5a:3c:89:d2:89:8a:7d:6e:e5:d1: a1:15:0d:b5:d5:09:80:ef:c8:0c:61:c7:6a:1e:fb:f9:3c:73: 5b:c9:3e:81:9b:0c:29:f2:13:35:d7:5a:ff:a6:9b:9a:b9:a4: 83:60:0e:51:26:63:45:f1:db:88:a6:99:6b:7d:58:da:78:87: 44:0a:0f:2a:d3:07:2b:a2:2c:24:e1:2e:92:bc:d5:22:27:6f: 1d:89:2e:81:15:82:5d:f5:27:df:fb:1d:00:c1:a6:8b:08:bd: f9:23:37:7b:28:ad:2f:f0:a1:da:52:d5:20:d6:7c:de:d7:b1: 00:c7:ea:28:4b:6a:d4:2e:8c:32:d6:84:c9:2b:19:1c:9e:0a: 0d:d5:67:33:38:a7:83:cc:9d:cf:e4:9f:f7:76:4e:c2:0a:02: 9b:53:7d:15:b6:dc:54:fe:61:06:e2:dc:fb:51:28:90:38:49: 30:93:17:ac:9f:5d:f9:8c:1b:88:32:7f:c2:a9:71:99:54:dc: 9c:fc:a9:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiQglHQB6ZP0RJDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWM3ZTRjNjYtNWY4ZS00MjZiLTk5MDctYzVjMDdlZDgwNGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdDDV8CCa551ggpCeZRzsrJhxRYP5SbtOISE UUqKLBBQ3Zq6yH4vxohVXxzZnTxy83R9g/wO/Tcw0IoVTuiKywJp9SjzGqHD+zHe xjVGxrWkX4WLJyszLLh0uLDujZIdegS5qsiUZrXH0v09evnl9b5xiFv3P4z88Qwb oaXlFr+jyJplaBGERoiD8xLgrBQy9OqzZ1tBV5vWYexf78K2FDtJFD04bwFUtNPY w+HMH5flORWLyJglQrRWecslInCLYVmvR5DX+k2yF8zaE2LBBFU6k3EQhXLtWkfZ dPSVHJVETPQ+CRxucntPEVwU+nPSBY1B4WA46wmJ7LiavuXkDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXXaX4JZwpSzJ6YkR2el69CA+4SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjY3ZjQ3MTgtMjExOS0z NWM0LThiYmQtMDVmMjJhZGFmMTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADk04Fx+K8U/5LcDNBNsampNoltFfqxeFaxysdbWwcJNJX+AxgESC8Um eXFlEyrH23EQUmK/z2AR8l0RCbTbWjyJ0omKfW7l0aEVDbXVCYDvyAxhx2oe+/k8 c1vJPoGbDCnyEzXXWv+mm5q5pINgDlEmY0Xx24immWt9WNp4h0QKDyrTByuiLCTh LpK81SInbx2JLoEVgl31J9/7HQDBposIvfkjN3sorS/wodpS1SDWfN7XsQDH6ihL atQujDLWhMkrGRyeCg3VZzM4p4PMnc/kn/d2TsIKAptTfRW23FT+YQbi3PtRKJA4 STCTF6yfXfmMG4gyf8KpcZlU3Jz8qTE= -----END CERTIFICATE-----Generated at Sat Sep 26 11:11:23 2026 by rpki-client