$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd685d4d-d212-3bc2-aefe-31b572ea5b56.roa File: bd685d4d-d212-3bc2-aefe-31b572ea5b56.roa (raw, json) Hash identifier: SIjyHz7L65ljqtCMx/nP1YxWl/T5YY4fiD+v6EYynL4= Subject key identifier: 39:2D:DD:ED:70:54:4A:B4:F3:8F:A2:17:EC:D1:9B:82:8F:5A:70:F7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA788769CC39392FDF6D06A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd685d4d-d212-3bc2-aefe-31b572ea5b56.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396590 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:76:9c:c3:93:92:fd:f6:d0:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=00e9b251-3273-4a6b-94b8-d00426c95114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b2:b3:c5:b8:92:92:69:68:9e:30:1f:57:9a: 08:cd:c3:ac:7e:c3:01:7f:c6:71:d4:51:cb:f5:3c: 0b:47:a0:69:7b:ab:48:4a:34:1d:a4:48:2f:f1:fc: 8c:fe:06:ec:44:f9:41:eb:72:99:b0:b0:10:f8:04: 24:86:a9:94:07:26:97:9c:ed:ff:1b:0b:05:84:5e: ac:0d:40:49:85:fb:a7:78:79:d5:d8:bd:21:df:fc: 9c:b0:11:30:7d:91:2c:3d:c8:8c:ee:d1:f2:6a:58: e2:32:3c:3d:c8:0c:ab:6b:34:e0:d6:dc:ce:f0:de: 42:49:94:80:ff:3c:96:79:26:75:ad:c0:79:f5:0a: 1a:1e:f3:3f:77:d7:81:eb:48:83:10:c2:e4:d5:ff: d6:84:34:48:b7:ce:c2:d2:7b:a9:4c:b3:65:76:64: d5:6c:75:68:45:a2:5f:7f:dd:17:1b:9b:eb:a2:29: 34:69:34:99:7c:92:e4:2e:14:60:14:34:5f:67:13: be:10:97:45:47:7d:09:67:45:59:17:f7:cf:19:91: 8f:8a:9f:a3:1a:6d:c8:05:06:5d:6e:78:48:be:49: 2d:51:3b:24:27:67:a6:61:1c:fe:38:19:a7:4d:63: 60:61:02:50:8c:f3:fb:87:64:d2:71:0c:c4:c0:c5: c2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2D:DD:ED:70:54:4A:B4:F3:8F:A2:17:EC:D1:9B:82:8F:5A:70:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd685d4d-d212-3bc2-aefe-31b572ea5b56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:fa:5e:a7:de:36:f6:d5:04:f0:af:3e:ef:e6:02:4b:9e:64: 85:db:43:fd:52:be:9e:66:71:2d:a7:ab:56:70:58:23:c0:44: 3f:03:b1:a2:58:89:07:28:93:c3:19:78:c6:32:9c:44:25:f3: b9:9e:95:70:5e:59:35:7a:dd:4f:53:97:10:6d:26:df:a0:1b: ec:94:a0:42:c4:e1:03:93:58:25:57:dd:27:9a:7a:a6:05:35: 85:fd:56:e9:84:32:6f:71:25:0b:14:9d:0e:e9:a6:5c:c3:46: b8:44:0c:b2:bf:ed:d4:e2:7e:55:2f:de:ce:c5:c4:f4:ab:46: fb:11:96:51:c0:9c:fb:7e:2c:0f:b8:1b:62:0e:b1:b4:b4:ac: 9d:52:49:51:19:80:3b:6e:74:bb:82:7e:b4:2a:8c:35:d3:03: 79:6d:0e:51:50:de:3d:aa:92:2b:9e:40:52:f4:7d:3e:b8:2d: 68:2d:36:98:e0:61:5f:ec:f5:91:b9:1f:22:41:19:e7:f8:06: b8:dc:33:b9:21:1d:b2:79:4a:23:63:7a:73:42:13:76:d7:33: 21:44:ba:be:ba:64:0a:d2:35:e5:11:6a:54:53:40:f3:66:7b: e0:88:06:37:ea:04:0f:f1:7a:04:ea:b9:4c:f2:c8:8c:d5:ff: d7:80:d4:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niHacw5OS/fbQaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDBlOWIyNTEtMzI3My00YTZiLTk0YjgtZDAwNDI2Yzk1MTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LKzxbiSkmlonjAfV5oIzcOsfsMBf8Zx1FHL 9TwLR6Bpe6tISjQdpEgv8fyM/gbsRPlB63KZsLAQ+AQkhqmUByaXnO3/GwsFhF6s DUBJhfuneHnV2L0h3/ycsBEwfZEsPciM7tHyaljiMjw9yAyrazTg1tzO8N5CSZSA /zyWeSZ1rcB59QoaHvM/d9eB60iDEMLk1f/WhDRIt87C0nupTLNldmTVbHVoRaJf f90XG5vroik0aTSZfJLkLhRgFDRfZxO+EJdFR30JZ0VZF/fPGZGPip+jGm3IBQZd bnhIvkktUTskJ2emYRz+OBmnTWNgYQJQjPP7h2TScQzEwMXCNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkt3e1wVEq084+iF+zRm4KPWnD3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmQ2ODVkNGQtZDIxMi0z YmMyLWFlZmUtMzFiNTcyZWE1YjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD76XqfeNvbVBPCvPu/mAkueZIXbQ/1Svp5mcS2nq1ZwWCPARD8DsaJY iQcok8MZeMYynEQl87melXBeWTV63U9TlxBtJt+gG+yUoELE4QOTWCVX3SeaeqYF NYX9VumEMm9xJQsUnQ7pplzDRrhEDLK/7dTiflUv3s7FxPSrRvsRllHAnPt+LA+4 G2IOsbS0rJ1SSVEZgDtudLuCfrQqjDXTA3ltDlFQ3j2qkiueQFL0fT64LWgtNpjg YV/s9ZG5HyJBGef4BrjcM7khHbJ5SiNjenNCE3bXMyFEur66ZArSNeURalRTQPNm e+CIBjfqBA/xegTquUzyyIzV/9eA1Ho= -----END CERTIFICATE-----Generated at Wed Jul 29 08:47:28 2026 by rpki-client