$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/8cd9bb4a-ed14-375c-aa14-4200b366035f.roa File: 8cd9bb4a-ed14-375c-aa14-4200b366035f.roa (raw, json) Hash identifier: JcKuM+T2m4MzkWzk2lvYx52x6ESJupOSxE7s6gvxqWs= Subject key identifier: C2:B1:4D:91:C2:1D:7D:31:B1:89:D6:8A:AD:E9:14:66:51:85:99:F2 Certificate issuer: /CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Certificate serial: 010D0C9F4328584EA0152C5ACD28DB7CE416F900 Authority key identifier: 31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/8cd9bb4a-ed14-375c-aa14-4200b366035f.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 14618 IP address blocks: 209.127.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:2c:5a:cd:28:db:7c:e4:16:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=61d17f86-9185-4349-8c06-5080d40dc786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a3:b4:15:2f:d1:04:ed:b4:1f:87:e2:2c:e3: a0:79:50:1f:d4:d5:50:2c:af:0b:ec:13:f6:8c:66: 0b:8d:05:1c:c7:29:ca:4c:32:0c:99:d9:cc:01:81: 02:21:53:b5:65:53:6c:17:c5:ec:b1:7e:dc:cd:a7: 0a:18:64:86:b0:35:29:63:27:61:87:9c:5a:e6:95: ad:93:8f:95:28:42:66:7c:fd:50:11:96:9d:28:57: 0c:f9:5a:9b:85:fa:dd:be:e2:cf:ca:27:9a:5f:e1: 65:e8:61:5d:9a:fa:17:3e:e7:c7:48:6e:6f:45:d8: 19:cd:43:3c:b1:82:0c:66:90:8e:88:69:ea:e0:c6: 27:b8:a8:52:d9:55:e8:9c:da:71:a8:10:e9:f3:79: 01:91:f8:53:cd:1f:1c:24:35:f0:31:72:f5:fa:a5: 62:ef:f2:95:24:68:47:25:81:b7:af:c7:75:af:ad: 61:77:23:b0:9c:b1:db:fb:4a:31:b5:b9:94:ed:3f: 86:52:5e:de:39:6a:ae:f1:a8:15:eb:c4:40:16:e7: 7b:e9:24:7f:2d:9d:21:a8:96:77:52:a0:07:37:db: 68:c7:c4:96:ad:92:51:75:95:57:4d:56:90:c1:fc: 05:18:74:df:97:eb:5e:f9:23:20:b1:57:73:ef:4e: 72:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B1:4D:91:C2:1D:7D:31:B1:89:D6:8A:AD:E9:14:66:51:85:99:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/8cd9bb4a-ed14-375c-aa14-4200b366035f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl X509v3 Authority Key Identifier: keyid:31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer sbgp-ipAddrBlock: critical IPv4: 209.127.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:82:7f:c0:9f:de:66:69:2a:23:ba:4e:4b:64:0a:c5:cb:d7: 07:9d:ff:ae:84:bf:7b:10:90:80:3d:b5:f6:70:d8:da:7a:ac: 40:5f:be:d5:ca:22:4f:8f:3f:e1:7c:52:25:c9:90:fb:f7:fe: 84:cf:a8:02:92:cf:68:91:46:95:b9:35:09:7a:8f:cd:f4:5d: fb:f3:00:47:cd:90:a6:1f:f0:ac:48:98:71:4c:b6:70:8a:94: 1a:4c:c9:6b:1b:04:7f:1b:be:3a:16:97:d6:81:d6:7a:43:22: 28:bd:28:a3:4a:6a:33:cf:7a:44:a2:63:37:8c:0c:af:33:c8: 0a:c7:03:cb:5a:19:77:dd:0f:c8:ea:b7:7f:bf:e5:1f:2f:a3: fc:b5:38:d7:04:70:f5:c6:31:74:08:ab:6c:d3:92:c1:f3:7a: 70:34:b0:e6:a9:f3:75:10:18:99:f4:0a:20:3b:f2:3d:0e:e8: bc:82:10:af:69:3f:ee:fe:05:f6:22:b4:47:37:51:d3:d4:a0: 6c:a6:d0:58:e0:ac:5e:b6:99:04:dc:a7:41:2e:05:f6:08:56: 1e:f6:aa:7f:d1:e8:8f:14:c3:ac:46:0e:4b:40:4a:40:b7:60: fa:32:75:d0:f7:27:ee:44:58:48:36:f4:ed:4d:34:7f:9b:b3: 59:d8:51:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFSxazSjbfOQW+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY4ZWMyNWQtOTMyYS00ZGQ0LThmODMtZjFkYTA0OTA2 OGVjMB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk NjFkMTdmODYtOTE4NS00MzQ5LThjMDYtNTA4MGQ0MGRjNzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqO0FS/RBO20H4fiLOOgeVAf1NVQLK8L7BP2 jGYLjQUcxynKTDIMmdnMAYECIVO1ZVNsF8XssX7czacKGGSGsDUpYydhh5xa5pWt k4+VKEJmfP1QEZadKFcM+VqbhfrdvuLPyieaX+Fl6GFdmvoXPufHSG5vRdgZzUM8 sYIMZpCOiGnq4MYnuKhS2VXonNpxqBDp83kBkfhTzR8cJDXwMXL1+qVi7/KVJGhH JYG3r8d1r61hdyOwnLHb+0oxtbmU7T+GUl7eOWqu8agV68RAFud76SR/LZ0hqJZ3 UqAHN9tox8SWrZJRdZVXTVaQwfwFGHTfl+te+SMgsVdz705yGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKxTZHCHX0xsYnWiq3pFGZRhZnyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80Zjhl YzI1ZC05MzJhLTRkZDQtOGY4My1mMWRhMDQ5MDY4ZWMvOGNkOWJiNGEtZWQxNC0z NzVjLWFhMTQtNDIwMGIzNjYwMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGY4ZWMyNWQtOTMyYS00ZGQ0LThm ODMtZjFkYTA0OTA2OGVjLzRmOGVjMjVkLTkzMmEtNGRkNC04ZjgzLWYxZGEwNDkw NjhlYy5jcmwwHwYDVR0jBBgwFoAUMcXgnadCF+8nR36OpSmNPzPy5U0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjhlYzI1ZC05MzJhLTRkZDQtOGY4My1mMWRh MDQ5MDY4ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByCf8Cf3mZpKiO6TktkCsXL1wed/66Ev3sQkIA9tfZw2Np6rEBfvtXK Ik+PP+F8UiXJkPv3/oTPqAKSz2iRRpW5NQl6j830XfvzAEfNkKYf8KxImHFMtnCK lBpMyWsbBH8bvjoWl9aB1npDIii9KKNKajPPekSiYzeMDK8zyArHA8taGXfdD8jq t3+/5R8vo/y1ONcEcPXGMXQIq2zTksHzenA0sOap83UQGJn0CiA78j0O6LyCEK9p P+7+BfYitEc3UdPUoGym0FjgrF62mQTcp0EuBfYIVh72qn/R6I8Uw6xGDktASkC3 YPoyddD3J+5EWEg29O1NNH+bs1nYUX4= -----END CERTIFICATE-----Generated at Tue Jul 28 23:14:47 2026 by rpki-client