$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa File: 9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa (raw, json) Hash identifier: Vy5XbSR++rBbS3g3vqYW20xTOCjEE0zjLCS6KeuM+1g= Subject key identifier: 86:F0:FB:58:81:82:54:C9:E3:96:10:70:2F:2F:8C:AB:72:AE:04:F0 Certificate issuer: /CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Certificate serial: 010D0C9F4328584EA0152C4F696FB65DF7021E00 Authority key identifier: 31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 16509 IP address blocks: 209.127.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:2c:4f:69:6f:b6:5d:f7:02:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=f7c8fcd3-ad49-42b6-bb4d-2d8473aac774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:88:16:42:99:0f:56:18:1a:3e:7a:57:da:2f: 82:38:bf:b0:bf:1b:56:4a:3c:95:ba:3e:a5:b6:52: 88:c2:fe:a3:8d:88:dc:5b:d9:92:97:0f:82:21:85: cb:1d:3a:56:4e:4b:ee:09:b8:6d:5a:cb:3d:02:25: d4:39:41:0a:28:39:38:23:93:aa:cf:d3:9c:a3:08: 24:b4:21:3b:75:8c:b6:2e:17:89:a3:c3:e4:33:f9: 08:a2:32:71:28:68:3f:49:15:12:9c:f5:ba:4c:98: 01:e3:92:21:df:85:69:19:10:4b:d5:fd:ee:3a:61: 93:8c:8e:e9:d4:bb:0a:10:d4:b8:17:7c:ce:2e:a3: ec:68:ef:4a:b3:a7:2b:fb:ee:20:03:71:f6:86:8b: 55:fd:e9:42:4c:bb:b8:b8:23:0e:93:4f:6b:3e:6b: f8:dd:7e:2c:cd:77:b5:10:bc:a7:6e:9e:90:39:b4: d7:10:4c:bb:d5:4c:79:2f:25:08:12:28:a9:2f:1a: 7f:d9:1f:53:23:63:d3:f3:63:c6:cd:e5:de:c4:ca: a7:a9:51:23:cd:6f:4d:57:2d:1f:ac:92:9b:44:3d: a0:f2:a2:be:47:8f:04:d0:5f:0d:c2:45:48:e1:ce: 55:e4:b2:e7:64:f9:92:33:5d:ef:5c:47:b4:1c:ed: dc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F0:FB:58:81:82:54:C9:E3:96:10:70:2F:2F:8C:AB:72:AE:04:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl X509v3 Authority Key Identifier: keyid:31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer sbgp-ipAddrBlock: critical IPv4: 209.127.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:86:d1:b7:52:f5:08:05:61:53:ff:f8:2d:b2:6f:cd:19:a8: 2c:27:de:c5:f9:d9:eb:22:df:16:95:88:4d:67:f8:7c:26:d1: ee:a0:76:44:6d:cc:52:3b:70:8e:06:7b:fe:80:c6:68:b5:d3: 2c:ee:7e:34:c0:b9:f8:50:3b:e8:e1:45:c6:53:c3:a5:32:92: da:5f:74:1c:54:05:4d:94:d7:8b:b9:d6:6f:22:84:2e:30:e0: 5b:c6:96:95:78:26:05:fb:77:19:7e:35:6d:35:5c:a1:86:14: 63:df:b2:95:65:1e:75:f0:c5:16:e0:3b:d7:6d:71:b4:6b:09: f2:c9:ad:e8:b7:64:d4:98:e0:bc:18:b6:3b:86:cf:a1:93:74: 8c:a7:d4:98:24:88:ab:08:9d:6d:fb:7b:75:3b:b4:b3:16:2b: ad:39:d5:83:42:9c:c8:bd:f2:aa:c8:b9:27:da:3b:f0:80:ea: ae:4f:d0:57:c9:1f:40:3c:a7:42:88:73:6f:8f:f1:31:a0:96: b8:c7:ac:1b:85:78:e1:94:1f:bb:12:a3:6d:77:9a:02:1f:38: 0c:19:cd:0d:18:47:69:e1:99:de:ff:4a:24:67:1a:d7:a3:0e: bc:5f:13:95:67:3a:d7:f1:3f:2a:50:31:dc:2d:02:f4:40:9f: ab:47:06:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFSxPaW+2XfcCHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY4ZWMyNWQtOTMyYS00ZGQ0LThmODMtZjFkYTA0OTA2 OGVjMB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk ZjdjOGZjZDMtYWQ0OS00MmI2LWJiNGQtMmQ4NDczYWFjNzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4gWQpkPVhgaPnpX2i+COL+wvxtWSjyVuj6l tlKIwv6jjYjcW9mSlw+CIYXLHTpWTkvuCbhtWss9AiXUOUEKKDk4I5Oqz9Ocowgk tCE7dYy2LheJo8PkM/kIojJxKGg/SRUSnPW6TJgB45Ih34VpGRBL1f3uOmGTjI7p 1LsKENS4F3zOLqPsaO9Ks6cr++4gA3H2hotV/elCTLu4uCMOk09rPmv43X4szXe1 ELynbp6QObTXEEy71Ux5LyUIEiipLxp/2R9TI2PT82PGzeXexMqnqVEjzW9NVy0f rJKbRD2g8qK+R48E0F8NwkVI4c5V5LLnZPmSM13vXEe0HO3ceQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbw+1iBglTJ45YQcC8vjKtyrgTwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80Zjhl YzI1ZC05MzJhLTRkZDQtOGY4My1mMWRhMDQ5MDY4ZWMvOWMxYWNkNmEtMDdjMC0z NzZlLTg3ZTItYjFhMjk5MmUyYzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGY4ZWMyNWQtOTMyYS00ZGQ0LThm ODMtZjFkYTA0OTA2OGVjLzRmOGVjMjVkLTkzMmEtNGRkNC04ZjgzLWYxZGEwNDkw NjhlYy5jcmwwHwYDVR0jBBgwFoAUMcXgnadCF+8nR36OpSmNPzPy5U0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjhlYzI1ZC05MzJhLTRkZDQtOGY4My1mMWRh MDQ5MDY4ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeG0bdS9QgFYVP/+C2yb80ZqCwn3sX52esi3xaViE1n+Hwm0e6gdkRt zFI7cI4Ge/6Axmi10yzufjTAufhQO+jhRcZTw6UyktpfdBxUBU2U14u51m8ihC4w 4FvGlpV4JgX7dxl+NW01XKGGFGPfspVlHnXwxRbgO9dtcbRrCfLJrei3ZNSY4LwY tjuGz6GTdIyn1JgkiKsInW37e3U7tLMWK6051YNCnMi98qrIuSfaO/CA6q5P0FfJ H0A8p0KIc2+P8TGglrjHrBuFeOGUH7sSo213mgIfOAwZzQ0YR2nhmd7/SiRnGtej DrxfE5VnOtfxPypQMdwtAvRAn6tHBnY= -----END CERTIFICATE-----Generated at Wed Jul 29 07:39:30 2026 by rpki-client