$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/959854d1-5ffc-3d33-b000-b67f814d49fe.roa File: 959854d1-5ffc-3d33-b000-b67f814d49fe.roa (raw, json) Hash identifier: vWoU4cnMY5bmRc6wXNQDGmAEzbOpxgf6ESZSHRjRO6U= Subject key identifier: D9:43:92:41:C1:24:FF:13:38:16:1F:FA:47:0B:35:60:5D:B2:5D:27 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA788754FE784066C72968D40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/959854d1-5ffc-3d33-b000-b67f814d49fe.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397207 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:75:4f:e7:84:06:6c:72:96:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8f2b4d85-678c-4014-a821-6dad4446750a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a0:c7:c8:43:74:39:3b:4e:85:50:89:02:61: 94:90:65:9d:9f:ce:13:f1:83:47:09:49:5d:ba:df: 36:fc:dd:76:45:b6:3c:e4:ec:3c:a9:98:6d:f4:79: d6:ca:41:57:b1:4d:99:7f:c7:5a:c8:a0:30:da:49: 5d:d7:84:c0:2a:0f:18:56:55:b5:21:61:87:7c:7a: bf:7d:31:ad:75:a5:4b:50:5b:4f:33:19:a7:93:e8: 3c:0e:12:02:1d:cc:a5:09:c8:25:0e:d5:51:05:db: ed:fe:dd:c2:5d:da:9c:19:4a:cc:f3:36:56:d9:cf: de:45:9f:f5:2b:d5:a6:6a:17:0f:25:03:12:14:44: 85:6d:57:a4:0b:75:ff:8e:25:2b:f6:60:12:62:bb: c2:60:4b:28:06:64:ea:af:6b:e3:eb:3f:84:a2:eb: 3f:30:4b:c3:ba:39:7c:86:d1:4e:1b:dd:96:e8:62: 4b:51:bf:0e:82:b7:87:d5:cb:e5:b6:91:0c:dd:0d: cc:f7:0f:b6:05:ad:92:cc:ba:fa:ba:68:85:f2:42: 8a:0f:d3:da:ff:62:d7:6b:d7:56:3a:f7:c7:2a:a1: 36:e0:1c:6c:5d:dd:39:0f:f7:84:10:8a:ee:33:7a: e1:5b:57:b9:66:c0:32:ba:46:0d:10:a1:96:fa:20: 29:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:43:92:41:C1:24:FF:13:38:16:1F:FA:47:0B:35:60:5D:B2:5D:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/959854d1-5ffc-3d33-b000-b67f814d49fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:25:a3:34:36:60:58:85:73:1e:98:c0:19:aa:80:a5:3d:71: 66:31:6a:63:99:58:84:18:c9:8d:ba:80:2a:9a:d3:31:02:23: 48:3d:08:4c:13:40:4d:a0:32:53:03:fa:f3:01:bd:2a:23:31: d0:88:73:86:b9:72:2f:d9:ea:50:5c:16:5f:51:bc:a2:21:30: 29:bf:c1:c4:17:82:71:e9:fc:39:aa:e0:3d:4e:79:82:60:3d: 09:19:84:55:38:db:c8:90:8c:5f:19:67:af:13:73:ad:0a:d0: 64:7e:cf:d6:a6:b6:b0:71:25:59:df:01:d0:04:5d:ae:6f:e8: ee:04:89:ac:57:b3:44:3b:4f:cd:0d:7e:1a:b1:3a:1d:1a:a7: 5e:52:ff:79:cd:1a:aa:51:13:86:65:b7:69:07:c7:87:f1:fc: 78:2a:53:f7:be:23:47:32:24:fe:87:3d:92:57:8c:55:bd:9c: 96:48:f7:73:b7:1b:79:86:df:42:b9:76:1c:b8:66:36:19:aa: f3:c9:16:93:ab:e7:f6:1c:be:3e:98:ed:f3:0b:da:47:f7:ae: 79:10:5c:fc:b2:59:49:04:2b:32:9e:f3:a5:c3:a5:65:2d:ac: 9d:41:ea:db:06:a6:89:82:ee:35:2a:e0:1e:c0:a3:9e:52:12: 4d:79:27:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niHVP54QGbHKWjUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGYyYjRkODUtNjc4Yy00MDE0LWE4MjEtNmRhZDQ0NDY3NTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KDHyEN0OTtOhVCJAmGUkGWdn84T8YNHCUld ut82/N12RbY85Ow8qZht9HnWykFXsU2Zf8dayKAw2kld14TAKg8YVlW1IWGHfHq/ fTGtdaVLUFtPMxmnk+g8DhICHcylCcglDtVRBdvt/t3CXdqcGUrM8zZW2c/eRZ/1 K9WmahcPJQMSFESFbVekC3X/jiUr9mASYrvCYEsoBmTqr2vj6z+Eous/MEvDujl8 htFOG92W6GJLUb8OgreH1cvltpEM3Q3M9w+2Ba2SzLr6umiF8kKKD9Pa/2LXa9dW OvfHKqE24BxsXd05D/eEEIruM3rhW1e5ZsAyukYNEKGW+iApgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlDkkHBJP8TOBYf+kcLNWBdsl0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTU5ODU0ZDEtNWZmYy0z ZDMzLWIwMDAtYjY3ZjgxNGQ0OWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIlozQ2YFiFcx6YwBmqgKU9cWYxamOZWIQYyY26gCqa0zECI0g9CEwT QE2gMlMD+vMBvSojMdCIc4a5ci/Z6lBcFl9RvKIhMCm/wcQXgnHp/Dmq4D1OeYJg PQkZhFU428iQjF8ZZ68Tc60K0GR+z9amtrBxJVnfAdAEXa5v6O4EiaxXs0Q7T80N fhqxOh0ap15S/3nNGqpRE4Zlt2kHx4fx/HgqU/e+I0cyJP6HPZJXjFW9nJZI93O3 G3mG30K5dhy4ZjYZqvPJFpOr5/Ycvj6Y7fML2kf3rnkQXPyyWUkEKzKe86XDpWUt rJ1B6tsGpomC7jUq4B7Ao55SEk15J/s= -----END CERTIFICATE-----Generated at Wed Jul 29 04:32:27 2026 by rpki-client