$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3088ab51-2f5b-3a3c-97d7-fcf7a6f4970e.roa File: 3088ab51-2f5b-3a3c-97d7-fcf7a6f4970e.roa (raw, json) Hash identifier: 0Eo9Bg4WiLtYPSn1uAa0mJjeWWSSFvbnVhHuJmXeEiA= Subject key identifier: E2:52:8E:45:8B:DC:57:9C:76:74:4A:18:C5:E5:89:67:30:DB:AA:E0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7888C4A44AB048C06FCF600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3088ab51-2f5b-3a3c-97d7-fcf7a6f4970e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396827 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:8c:4a:44:ab:04:8c:06:fc:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4ef7f219-f90e-4d66-acd7-07b5cf1bc5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:18:ad:01:ea:c5:07:a2:47:a3:79:ce:4b:4f: d5:96:69:dd:da:50:02:fb:73:0d:9c:da:1d:91:d8: 2c:1b:23:a9:66:9c:31:90:25:7c:fe:6e:86:aa:5b: 9e:74:e9:52:a1:d0:b7:b3:27:c0:ec:3f:21:78:84: 56:3c:b4:d2:63:79:ca:42:51:de:f5:d8:8d:80:1b: 5f:73:51:2a:fb:c5:b3:f1:93:dd:cb:cc:83:1d:c9: 15:9a:d8:ec:68:83:5c:aa:b7:e4:b4:b0:48:18:a9: cc:84:6c:17:b1:78:b2:d3:64:08:5d:09:af:f5:37: 54:17:4e:19:16:bd:4c:39:ab:66:8c:7e:ec:b1:ea: 67:36:60:42:44:d5:96:4b:aa:46:34:10:f1:bc:62: a6:dc:70:fd:32:55:ae:a8:33:29:fd:41:e8:84:a8: b6:b6:76:82:ba:cc:38:6c:4b:bd:16:62:be:92:e1: d4:d5:24:eb:4c:8f:31:1e:f5:9c:6d:24:e4:15:32: e4:a0:8e:22:46:c4:71:ad:6f:33:06:80:6f:b0:bc: f4:5d:be:77:ea:dd:15:c0:d8:03:49:64:dc:b4:d2: b8:3e:e4:6e:4d:bd:b6:14:4c:e0:bd:b1:8a:1d:9e: 48:32:e6:db:ca:12:36:90:a6:a5:06:39:ca:f5:d6: 5c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:52:8E:45:8B:DC:57:9C:76:74:4A:18:C5:E5:89:67:30:DB:AA:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3088ab51-2f5b-3a3c-97d7-fcf7a6f4970e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:83:eb:90:48:30:8e:66:93:fa:20:97:58:ef:6f:5a:95:00: 16:9f:d0:84:32:62:0e:01:1c:ad:70:03:65:ad:2e:da:19:f2: 04:da:aa:a0:b8:eb:c8:14:a5:b2:06:83:0f:67:61:84:87:64: b3:49:1c:ac:40:fc:8d:76:0d:1e:b9:8d:6f:8d:36:7e:bc:e1: 70:35:16:5b:3e:88:d6:ba:83:a0:51:9a:8e:30:e3:18:8d:b9: 26:9e:1d:8c:f0:a7:bb:bf:5d:4f:da:6d:c7:ee:7e:a1:c2:54: 4c:cc:a9:80:a4:42:f0:f1:88:1e:7c:10:35:e0:53:47:dc:ff: 7f:61:de:7c:21:a9:ce:91:25:b2:23:75:60:49:76:37:d0:9e: ea:49:b5:21:c8:ff:a7:01:4f:c5:42:a3:af:93:91:22:01:20: f3:0e:84:2f:ab:54:04:d7:28:b4:92:5b:99:e7:da:c1:fd:9b: 54:d6:f4:3c:a3:91:e2:8b:75:8b:bc:66:0d:4b:08:cf:e5:cb: 59:b4:0b:b3:14:0a:83:65:79:53:68:fe:14:b0:42:a1:8b:21: 67:cd:7b:cf:a4:23:54:5b:bb:09:26:e3:c5:1b:9a:a7:58:b0: c6:98:90:c4:c3:51:70:67:aa:20:2f:d4:eb:3b:3e:a7:76:d6: 44:59:29:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niIxKRKsEjAb89gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGVmN2YyMTktZjkwZS00ZDY2LWFjZDctMDdiNWNmMWJjNWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRitAerFB6JHo3nOS0/Vlmnd2lAC+3MNnNod kdgsGyOpZpwxkCV8/m6GqluedOlSodC3syfA7D8heIRWPLTSY3nKQlHe9diNgBtf c1Eq+8Wz8ZPdy8yDHckVmtjsaINcqrfktLBIGKnMhGwXsXiy02QIXQmv9TdUF04Z Fr1MOatmjH7ssepnNmBCRNWWS6pGNBDxvGKm3HD9MlWuqDMp/UHohKi2tnaCusw4 bEu9FmK+kuHU1STrTI8xHvWcbSTkFTLkoI4iRsRxrW8zBoBvsLz0Xb536t0VwNgD SWTctNK4PuRuTb22FEzgvbGKHZ5IMubbyhI2kKalBjnK9dZckQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJSjkWL3FecdnRKGMXliWcw26rgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzA4OGFiNTEtMmY1Yi0z YTNjLTk3ZDctZmNmN2E2ZjQ5NzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGD65BIMI5mk/ogl1jvb1qVABaf0IQyYg4BHK1wA2WtLtoZ8gTaqqC4 68gUpbIGgw9nYYSHZLNJHKxA/I12DR65jW+NNn684XA1Fls+iNa6g6BRmo4w4xiN uSaeHYzwp7u/XU/abcfufqHCVEzMqYCkQvDxiB58EDXgU0fc/39h3nwhqc6RJbIj dWBJdjfQnupJtSHI/6cBT8VCo6+TkSIBIPMOhC+rVATXKLSSW5nn2sH9m1TW9Dyj keKLdYu8Zg1LCM/ly1m0C7MUCoNleVNo/hSwQqGLIWfNe8+kI1Rbuwkm48UbmqdY sMaYkMTDUXBnqiAv1Os7Pqd21kRZKTw= -----END CERTIFICATE-----Generated at Wed Jul 29 08:14:41 2026 by rpki-client