$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21d82432-bfb2-3a6c-aa9b-fbb74e79ab83.roa File: 21d82432-bfb2-3a6c-aa9b-fbb74e79ab83.roa (raw, json) Hash identifier: xkSXYanKpl5I5LKTyXhDj201xKkys1jw4vI5PKYU/vs= Subject key identifier: 01:EE:15:30:9D:CE:73:95:5A:26:75:6D:87:DF:96:44:99:AC:58:E4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7888CEF90F0E979B2CECF00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21d82432-bfb2-3a6c-aa9b-fbb74e79ab83.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 211369 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:8c:ef:90:f0:e9:79:b2:ce:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2348af83-4eec-4098-adb9-f2d0179ba664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:15:9e:b4:be:70:7a:c4:a1:50:7e:9c:39:0d: 5d:4f:8e:d4:e1:90:7e:3f:53:6f:0b:ba:57:41:50: 00:7e:8f:98:e6:23:01:1c:49:43:cc:0c:77:7b:4f: b8:0f:4a:13:ca:54:ad:06:f9:f5:32:4f:66:32:6d: 3f:ed:83:48:b8:51:69:7b:cf:67:65:6b:e9:da:bd: 6f:ce:8a:bd:0d:fb:6a:b3:f4:bf:33:86:d6:38:8e: f9:c0:78:18:bb:cc:75:e6:e4:4e:4d:f6:24:ae:12: 54:d6:44:a3:95:ea:f7:26:81:b9:69:b4:10:67:7b: b8:1c:f8:96:ad:44:bb:e6:69:28:48:53:ff:1b:6b: ec:a4:96:36:41:57:a1:c3:5c:c2:d5:f4:41:4f:6e: 62:f6:85:ac:cf:3d:82:3b:62:56:ed:64:60:8b:d7: 04:64:71:0c:d5:b5:44:bd:fc:fa:7c:92:2e:5e:36: e8:d4:3b:68:c0:29:b9:34:96:3e:6b:b6:5b:4d:82: 65:41:30:56:7f:24:34:c7:50:be:19:4e:2f:03:a0: fe:2a:7d:87:d6:4b:48:ae:63:9e:17:99:81:24:62: e9:68:4f:d3:cc:82:8a:cb:dd:14:32:6e:cc:93:a0: 78:c2:71:78:c1:31:72:ce:0a:7c:a9:49:a6:93:29: ce:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EE:15:30:9D:CE:73:95:5A:26:75:6D:87:DF:96:44:99:AC:58:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21d82432-bfb2-3a6c-aa9b-fbb74e79ab83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:6c:f7:4b:33:f2:a3:c2:92:6f:26:3a:d9:89:cd:42:fc:41: 5d:3c:f9:a3:7d:80:e3:0d:92:f1:6f:32:6a:c7:9c:2d:8e:0f: ba:f4:ef:fe:68:e6:23:4e:4f:63:ba:ba:50:59:3c:ac:88:80: 29:ea:2a:b0:9a:06:03:bd:b0:78:92:d7:3e:0b:2e:1b:25:6c: bc:c6:b1:0b:9d:18:a8:42:81:a7:6b:54:32:77:b6:f6:e2:1c: b0:b5:3f:c5:58:bf:97:ed:7c:36:27:33:7d:e2:cb:90:57:8b: 64:2d:dc:01:d2:da:09:b6:83:5c:10:3e:ec:1a:4e:01:26:2b: bc:06:a7:fe:9a:04:33:7a:36:45:a3:0a:4c:2b:9a:19:41:d1: 39:39:1e:3b:04:ca:0f:e3:8e:06:89:d2:86:13:e8:30:07:85: 0f:d5:b5:9c:fc:71:a4:fe:7e:40:60:e1:3e:dc:45:fb:69:66: 30:2e:dd:cd:24:19:65:1d:95:fa:a2:47:c3:c1:0a:d4:a7:ef: 0b:18:d3:c7:fa:0f:f9:e8:11:3a:3b:16:47:0e:78:12:52:79: 52:c7:e8:99:11:0a:01:c8:8f:ba:11:d2:a4:00:e9:29:b8:a5: 68:d7:62:34:46:37:e0:6e:a0:bc:ab:3f:0e:f2:c5:55:42:d1: 0e:51:b2:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niIzvkPDpebLOzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjM0OGFmODMtNGVlYy00MDk4LWFkYjktZjJkMDE3OWJhNjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRWetL5wesShUH6cOQ1dT47U4ZB+P1NvC7pX QVAAfo+Y5iMBHElDzAx3e0+4D0oTylStBvn1Mk9mMm0/7YNIuFFpe89nZWvp2r1v zoq9Dftqs/S/M4bWOI75wHgYu8x15uROTfYkrhJU1kSjler3JoG5abQQZ3u4HPiW rUS75mkoSFP/G2vspJY2QVehw1zC1fRBT25i9oWszz2CO2JW7WRgi9cEZHEM1bVE vfz6fJIuXjbo1DtowCm5NJY+a7ZbTYJlQTBWfyQ0x1C+GU4vA6D+Kn2H1ktIrmOe F5mBJGLpaE/TzIKKy90UMm7Mk6B4wnF4wTFyzgp8qUmmkynOcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHuFTCdznOVWiZ1bYfflkSZrFjkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjFkODI0MzItYmZiMi0z YTZjLWFhOWItZmJiNzRlNzlhYjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChs90sz8qPCkm8mOtmJzUL8QV08+aN9gOMNkvFvMmrHnC2OD7r07/5o 5iNOT2O6ulBZPKyIgCnqKrCaBgO9sHiS1z4LLhslbLzGsQudGKhCgadrVDJ3tvbi HLC1P8VYv5ftfDYnM33iy5BXi2Qt3AHS2gm2g1wQPuwaTgEmK7wGp/6aBDN6NkWj CkwrmhlB0Tk5HjsEyg/jjgaJ0oYT6DAHhQ/VtZz8caT+fkBg4T7cRftpZjAu3c0k GWUdlfqiR8PBCtSn7wsY08f6D/noETo7FkcOeBJSeVLH6JkRCgHIj7oR0qQA6Sm4 pWjXYjRGN+BuoLyrPw7yxVVC0Q5Rso4= -----END CERTIFICATE-----Generated at Wed Jul 29 07:51:42 2026 by rpki-client