$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7c1c7d2-f38b-3798-9078-a25d0551e349.roa File: f7c1c7d2-f38b-3798-9078-a25d0551e349.roa (raw, json) Hash identifier: CsX3FfErw2cFjESdQwvKMQbIsOz1BZ0CU9mZ6A/Wf9U= Subject key identifier: 28:B4:84:31:DA:C9:A1:5E:5B:DA:9A:7D:FC:6F:F2:BD:DB:7B:E5:AB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4989214C316870FAF98AEE20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7c1c7d2-f38b-3798-9078-a25d0551e349.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396566 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:21:4c:31:68:70:fa:f9:8a:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dffc1c44-abc5-49e0-9b65-3e868257d817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:64:aa:9b:d2:6e:f2:ef:74:a2:b3:ea:a8:2f: 8f:c2:d3:9b:3b:98:30:02:b2:c7:8b:61:0d:f5:88: b0:ab:13:98:c3:4b:dd:38:d4:85:3e:a4:01:53:7c: 1e:72:59:ee:41:93:21:90:c5:af:fe:12:7e:e6:c2: 3d:2c:48:51:84:ba:fd:fc:99:f9:39:82:52:7e:b2: 6e:8d:18:85:c7:68:80:d8:27:f0:8f:45:05:1b:b2: 0c:78:c9:49:6e:28:6f:fc:40:73:f3:7b:4e:cc:46: c0:ea:99:0f:80:d3:93:58:51:02:1a:18:38:b7:38: 7d:79:d7:00:c6:31:16:ba:ce:8b:b1:76:0f:d1:d3: 22:c7:dc:94:d7:7c:5b:c0:97:53:be:c6:c4:1a:99: 39:9a:4e:9d:88:eb:16:f9:7b:6c:5f:ea:de:1f:8a: 5f:21:5d:ac:35:10:61:56:dc:b1:ed:12:10:d1:43: c0:8b:4d:86:7f:03:12:bb:82:9a:97:95:2f:67:74: 39:81:1a:9c:2d:11:77:62:ef:84:a8:f3:53:92:4a: 0d:95:62:d0:c9:46:19:0c:90:6c:63:9c:72:e0:27: bc:47:84:ba:1a:c6:84:77:26:b2:e7:db:e4:a8:2f: 3a:ea:04:3a:6b:5a:ed:e1:91:9a:df:59:39:54:72: 5e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B4:84:31:DA:C9:A1:5E:5B:DA:9A:7D:FC:6F:F2:BD:DB:7B:E5:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7c1c7d2-f38b-3798-9078-a25d0551e349.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:c2:f1:7e:6f:dd:ae:ef:09:fd:66:3c:2d:a3:34:79:31:02: 19:b5:3f:7d:43:7d:23:77:12:8e:07:5f:c4:97:34:c5:9b:e9: fc:a8:90:67:bd:1b:77:9b:51:07:e7:65:6d:17:81:eb:5d:df: 6e:80:11:d6:80:1f:54:9c:f6:32:7b:3a:e9:d6:86:4e:eb:2c: 80:f1:d9:e0:6f:fe:b8:d4:9b:39:0a:36:b8:0a:da:72:69:e9: c1:a0:40:26:d1:21:83:c9:70:ee:f9:e4:3c:fe:be:74:d7:e4: 84:15:3b:c2:43:f2:ff:fe:34:4c:73:7b:45:a1:76:49:9f:13: 60:4f:44:6c:d1:53:69:fa:15:af:48:b6:4c:e9:0b:e3:26:84: 39:ff:8d:06:ed:9d:79:d6:9c:88:e6:46:60:d0:1e:05:56:d7: 0f:e3:d3:05:b5:da:2d:05:bc:e0:72:ee:e7:40:17:59:93:95: b7:af:ae:66:a4:73:9c:3e:a2:41:db:a4:d4:97:78:4d:12:4d: ca:ce:57:fc:ec:a0:fd:03:a0:49:f8:21:96:f0:1f:d7:6c:51: 33:87:8f:4c:65:b1:7e:00:ff:19:be:5e:61:78:ce:65:87:d0: 27:4e:da:99:aa:14:c0:93:4c:44:fa:1d:3d:81:cb:9f:b9:c6: b4:f8:76:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiSFMMWhw+vmK7iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGZmYzFjNDQtYWJjNS00OWUwLTliNjUtM2U4NjgyNTdkODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2Sqm9Ju8u90orPqqC+PwtObO5gwArLHi2EN 9YiwqxOYw0vdONSFPqQBU3weclnuQZMhkMWv/hJ+5sI9LEhRhLr9/Jn5OYJSfrJu jRiFx2iA2Cfwj0UFG7IMeMlJbihv/EBz83tOzEbA6pkPgNOTWFECGhg4tzh9edcA xjEWus6LsXYP0dMix9yU13xbwJdTvsbEGpk5mk6diOsW+XtsX+reH4pfIV2sNRBh Vtyx7RIQ0UPAi02GfwMSu4Kal5UvZ3Q5gRqcLRF3Yu+EqPNTkkoNlWLQyUYZDJBs Y5xy4Ce8R4S6GsaEdyay59vkqC866gQ6a1rt4ZGa31k5VHJeLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCi0hDHayaFeW9qaffxv8r3be+WrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjdjMWM3ZDItZjM4Yi0z Nzk4LTkwNzgtYTI1ZDA1NTFlMzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILC8X5v3a7vCf1mPC2jNHkxAhm1P31DfSN3Eo4HX8SXNMWb6fyokGe9 G3ebUQfnZW0Xgetd326AEdaAH1Sc9jJ7OunWhk7rLIDx2eBv/rjUmzkKNrgK2nJp 6cGgQCbRIYPJcO755Dz+vnTX5IQVO8JD8v/+NExze0WhdkmfE2BPRGzRU2n6Fa9I tkzpC+MmhDn/jQbtnXnWnIjmRmDQHgVW1w/j0wW12i0FvOBy7udAF1mTlbevrmak c5w+okHbpNSXeE0STcrOV/zsoP0DoEn4IZbwH9dsUTOHj0xlsX4A/xm+XmF4zmWH 0CdO2pmqFMCTTET6HT2By5+5xrT4dko= -----END CERTIFICATE-----Generated at Sun Sep 27 11:57:26 2026 by rpki-client