$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d325d748-9365-338f-ad66-8b82d9d70a93.roa File: d325d748-9365-338f-ad66-8b82d9d70a93.roa (raw, json) Hash identifier: AJn6rt7RNW5B/IH2XG5rOcavWbqHIOf+pPNk0IgP4UA= Subject key identifier: 07:96:BE:D0:F0:A7:E4:0A:FC:06:76:09:4C:4D:2A:F3:C1:47:C7:7D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974554D44EF87B10C874000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d325d748-9365-338f-ad66-8b82d9d70a93.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396608 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:55:4d:44:ef:87:b1:0c:87:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5a0d8062-3093-4248-9da0-654cdecb7ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:03:1e:be:05:da:c4:27:ef:97:a0:a0:b9:cb: 02:f2:b1:39:49:83:0f:fc:7c:60:a2:81:6a:eb:c3: 66:95:07:2c:e4:22:b9:0b:da:a5:95:bf:7a:11:ea: e0:93:2b:b4:4c:d6:d1:f1:b8:51:90:c3:25:12:bb: 97:f3:25:c1:bb:37:96:aa:a4:03:56:4a:b8:6f:9c: 51:72:df:78:71:44:a6:86:ae:b6:31:ee:0f:c4:5b: ef:ea:8f:43:f8:d8:4b:87:d0:e9:87:05:45:2a:a3: 4e:be:df:b6:03:80:9a:68:46:02:f9:7c:d7:de:a9: 72:8d:d8:57:15:e3:04:df:ee:67:a9:5f:0b:90:18: 09:e5:44:fa:43:2f:24:13:d3:78:90:78:e6:82:00: 4b:77:a4:5d:01:7f:47:56:33:3a:8a:aa:a3:dd:99: bb:5e:01:d6:05:64:06:91:63:37:b8:b0:ec:94:5e: 9b:f2:a8:24:be:6f:cd:f0:a0:33:05:47:24:4e:6a: f6:28:4b:66:d3:97:21:56:cb:ed:98:c2:16:ec:6a: 92:fc:ea:da:e4:16:0e:71:aa:46:fc:ab:fe:f7:71: e9:9a:7e:6d:cd:02:a8:87:08:6b:83:f7:b7:ca:47: d5:6b:9f:e0:18:cf:46:30:09:67:47:dc:f1:ac:ca: 17:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:96:BE:D0:F0:A7:E4:0A:FC:06:76:09:4C:4D:2A:F3:C1:47:C7:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d325d748-9365-338f-ad66-8b82d9d70a93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:68:9d:3e:a8:a0:f3:a4:3d:c3:49:32:b9:85:ec:b7:c1:b6: 29:22:9a:24:d1:4d:50:81:ca:c5:b0:f6:4d:12:04:49:03:e9: 94:7c:f1:9b:c3:e6:59:24:be:8a:7d:ab:f6:37:f6:1f:2d:42: eb:20:33:ff:05:db:dc:28:78:c2:ce:f0:ca:d0:f9:7a:a9:f5: 55:f3:51:e9:28:7a:5a:f3:ad:04:12:91:19:15:86:56:09:56: 77:4d:01:36:f4:4a:5b:7e:61:3c:7e:bf:03:2f:ae:8b:76:e8: 08:8b:18:02:fd:10:15:b2:ea:01:a9:7d:38:0d:ec:5c:79:a0: 89:0d:03:82:32:fb:57:3c:32:2b:61:df:32:d8:ac:ac:1c:55: a1:23:2a:4d:26:c8:d6:4c:4b:59:19:4d:6b:31:74:9c:45:b1: 6f:c5:3f:21:73:e3:3e:6c:20:f8:e1:e4:dd:98:ea:6c:82:9c: a0:25:e0:cf:fb:03:14:92:17:0e:56:43:90:b8:37:1f:34:70: c7:9b:52:be:6d:5f:09:64:50:29:8b:9c:43:e6:35:3e:50:07: f9:83:53:1a:89:aa:83:9f:69:78:93:e3:4e:87:99:b0:a8:7d: b5:c8:a4:ab:64:b1:d0:21:37:74:80:21:97:b1:54:a4:2f:ae: b7:a5:84:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdFVNRO+HsQyHQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWEwZDgwNjItMzA5My00MjQ4LTlkYTAtNjU0Y2RlY2I3YWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggMevgXaxCfvl6CgucsC8rE5SYMP/HxgooFq 68NmlQcs5CK5C9qllb96Eergkyu0TNbR8bhRkMMlEruX8yXBuzeWqqQDVkq4b5xR ct94cUSmhq62Me4PxFvv6o9D+NhLh9DphwVFKqNOvt+2A4CaaEYC+XzX3qlyjdhX FeME3+5nqV8LkBgJ5UT6Qy8kE9N4kHjmggBLd6RdAX9HVjM6iqqj3Zm7XgHWBWQG kWM3uLDslF6b8qgkvm/N8KAzBUckTmr2KEtm05chVsvtmMIW7GqS/Ora5BYOcapG /Kv+93Hpmn5tzQKohwhrg/e3ykfVa5/gGM9GMAlnR9zxrMoXZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeWvtDwp+QK/AZ2CUxNKvPBR8d9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDMyNWQ3NDgtOTM2NS0z MzhmLWFkNjYtOGI4MmQ5ZDcwYTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlonT6ooPOkPcNJMrmF7LfBtikimiTRTVCBysWw9k0SBEkD6ZR88ZvD 5lkkvop9q/Y39h8tQusgM/8F29woeMLO8MrQ+Xqp9VXzUekoelrzrQQSkRkVhlYJ VndNATb0Slt+YTx+vwMvrot26AiLGAL9EBWy6gGpfTgN7Fx5oIkNA4Iy+1c8Mith 3zLYrKwcVaEjKk0myNZMS1kZTWsxdJxFsW/FPyFz4z5sIPjh5N2Y6myCnKAl4M/7 AxSSFw5WQ5C4Nx80cMebUr5tXwlkUCmLnEPmNT5QB/mDUxqJqoOfaXiT406HmbCo fbXIpKtksdAhN3SAIZexVKQvrrelhMo= -----END CERTIFICATE-----Generated at Sat Sep 26 00:11:22 2026 by rpki-client