$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/041258b5-2978-33e4-9357-867a375a9965.roa File: 041258b5-2978-33e4-9357-867a375a9965.roa (raw, json) Hash identifier: 0AuR6cPWRnavX6jLNmFIPhdeMi2OS0YBn/gMacFxuII= Subject key identifier: 1C:C7:2B:89:BA:4D:CD:DC:73:D3:67:EB:A6:00:E7:62:AE:64:92:6B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498825F6C77815D4D726F1C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/041258b5-2978-33e4-9357-867a375a9965.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396572 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:25:f6:c7:78:15:d4:d7:26:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=14ba9877-a8f1-4f7d-88c9-6823151e9c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d7:b9:38:da:d6:36:98:08:af:67:b8:c4:c1: d5:f7:4f:dc:de:75:70:0c:63:0a:55:d5:06:61:44: c5:83:0b:d8:40:ea:d7:56:ba:a5:cd:d3:68:ab:ef: 58:11:b7:df:88:e4:d4:58:99:b6:06:9d:de:dc:07: a4:ab:0e:82:81:ad:a6:46:8d:63:1d:e8:0b:08:7d: 12:21:3b:1b:a3:fd:44:0d:6a:be:e0:a3:fb:3d:23: 92:12:7a:c1:b7:b3:a2:39:72:1d:44:29:33:55:b0: d1:70:ec:01:fe:5c:24:98:76:12:67:16:a0:a9:7c: 20:7f:31:8d:9c:42:80:f9:3e:53:90:a2:ee:10:a1: a7:0d:64:72:ea:cf:38:2a:94:45:30:0d:50:17:c5: 5e:8c:b9:e3:2f:89:d9:d2:97:5d:16:0b:9b:a2:77: b3:49:38:13:39:35:1b:cb:bb:39:fa:da:78:2b:92: e3:ea:98:f0:da:10:9a:3a:84:6e:7e:c7:23:3e:37: bc:d1:96:96:8c:6b:97:98:60:12:cb:32:df:3f:84: 3f:5c:ff:a7:fc:a6:e9:85:85:ee:e5:e2:7d:62:af: f9:25:7d:f2:9c:88:8e:e7:30:e5:b5:95:a8:4f:70: 7e:98:06:a7:b7:c4:2f:67:d7:dc:ec:e1:ad:58:1c: b2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C7:2B:89:BA:4D:CD:DC:73:D3:67:EB:A6:00:E7:62:AE:64:92:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/041258b5-2978-33e4-9357-867a375a9965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c0:27:ac:37:6e:f9:38:28:43:da:1b:7f:9a:73:f2:1b:ee: 1d:3b:f8:ff:2f:90:06:3c:c1:ac:90:49:3a:b7:1b:3f:8e:8c: a7:65:19:5d:79:e1:4f:52:33:b5:be:b0:8f:7a:50:cf:41:cc: eb:86:45:cd:f0:aa:59:47:46:fe:af:5c:9f:d8:0e:2d:9c:f2: a5:f5:2e:1e:bc:11:0a:06:71:b8:e7:00:db:42:69:00:30:27: 23:b7:ba:3e:1d:6e:b4:2c:0e:f0:6c:23:1d:88:f6:94:20:be: 46:1a:b7:25:28:b5:e4:7c:39:00:c9:6c:f0:eb:7a:52:aa:50: ed:1f:7d:50:0e:c4:72:ed:57:44:35:7e:d4:ea:74:4d:36:5b: 26:78:ea:88:03:0b:7a:17:2c:e8:50:ba:41:19:e8:17:82:e2: 51:af:a6:29:b2:b9:f0:43:e0:3a:fd:9b:f7:f3:2e:26:6a:20: f4:00:ad:f4:ef:e6:fc:3b:af:74:2d:f7:78:0f:43:5a:9c:37: 92:0b:a1:0a:cf:28:29:f4:b3:71:91:c4:da:a3:4c:e9:37:36: a3:e4:80:c2:e9:48:e7:24:c8:85:85:1d:b4:79:01:87:41:0a: f6:f6:e9:91:63:3b:c8:42:e6:68:3a:8f:9b:ab:a7:f5:38:f3: 54:84:64:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiCX2x3gV1Ncm8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTRiYTk4NzctYThmMS00ZjdkLTg4YzktNjgyMzE1MWU5YzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9e5ONrWNpgIr2e4xMHV90/c3nVwDGMKVdUG YUTFgwvYQOrXVrqlzdNoq+9YEbffiOTUWJm2Bp3e3Aekqw6Cga2mRo1jHegLCH0S ITsbo/1EDWq+4KP7PSOSEnrBt7OiOXIdRCkzVbDRcOwB/lwkmHYSZxagqXwgfzGN nEKA+T5TkKLuEKGnDWRy6s84KpRFMA1QF8VejLnjL4nZ0pddFgubonezSTgTOTUb y7s5+tp4K5Lj6pjw2hCaOoRufscjPje80ZaWjGuXmGASyzLfP4Q/XP+n/KbphYXu 5eJ9Yq/5JX3ynIiO5zDltZWoT3B+mAant8QvZ9fc7OGtWByyDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzHK4m6Tc3cc9Nn66YA52KuZJJrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDQxMjU4YjUtMjk3OC0z M2U0LTkzNTctODY3YTM3NWE5OTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/AJ6w3bvk4KEPaG3+ac/Ib7h07+P8vkAY8wayQSTq3Gz+OjKdlGV15 4U9SM7W+sI96UM9BzOuGRc3wqllHRv6vXJ/YDi2c8qX1Lh68EQoGcbjnANtCaQAw JyO3uj4dbrQsDvBsIx2I9pQgvkYatyUoteR8OQDJbPDrelKqUO0ffVAOxHLtV0Q1 ftTqdE02WyZ46ogDC3oXLOhQukEZ6BeC4lGvpimyufBD4Dr9m/fzLiZqIPQArfTv 5vw7r3Qt93gPQ1qcN5ILoQrPKCn0s3GRxNqjTOk3NqPkgMLpSOckyIWFHbR5AYdB Cvb26ZFjO8hC5mg6j5urp/U481SEZLo= -----END CERTIFICATE-----Generated at Fri Sep 25 20:19:35 2026 by rpki-client