$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d325d748-9365-338f-ad66-8b82d9d70a93.roa File: d325d748-9365-338f-ad66-8b82d9d70a93.roa (raw, json) Hash identifier: 1Fz9ys4XbVXVKafL/Q6lbmKviww4LBStJn5ldTLm1AQ= Subject key identifier: 59:76:43:88:3E:D2:2F:8F:1C:E4:7D:52:11:D6:AD:B5:3A:CA:53:73 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7887BFC0D1188751FD6F1A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d325d748-9365-338f-ad66-8b82d9d70a93.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396608 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:7b:fc:0d:11:88:75:1f:d6:f1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=89ef1e38-0e55-4050-b8cd-52011f1b33b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:52:17:dd:fd:4b:ff:9a:05:62:1e:7d:c2:6f: b6:ca:f0:85:3e:ba:7e:b4:40:57:ec:59:fb:a1:8e: 40:96:a8:92:94:37:b3:7f:40:80:77:98:63:b9:32: 89:1c:57:2b:3b:93:26:db:65:ea:19:7e:b1:72:03: d4:8b:62:9b:b4:5c:3f:2c:99:99:46:ce:cc:90:2e: a9:ae:de:0a:bb:27:fb:5e:56:91:43:db:95:ff:38: 72:74:f1:4f:77:80:b5:3f:74:5f:49:83:f5:d6:eb: 2a:d9:4e:33:a4:3f:25:c4:34:c6:b6:10:92:88:ad: 20:fa:39:97:d6:c4:21:05:7f:70:17:34:67:d6:92: 2b:04:6d:8e:85:3c:ec:3e:9a:70:52:fd:e8:6e:4a: eb:b7:fe:bc:d9:91:a7:d2:42:c8:a8:7f:ce:43:d3: 91:df:7d:05:93:4d:55:58:d7:d6:b5:67:90:19:70: 75:b6:13:4d:bc:a1:01:dc:21:df:81:8f:dd:a3:79: 16:1b:b6:00:b3:dc:e3:8e:61:8f:44:5d:86:df:c2: 92:e4:18:96:c8:8b:0e:02:2b:a4:76:f3:02:c5:52: 23:47:b0:54:d8:81:53:fc:c0:69:91:b3:3f:b6:9b: 6b:fe:9f:05:6a:9e:63:d2:8c:10:02:b5:9f:85:c3: 67:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:76:43:88:3E:D2:2F:8F:1C:E4:7D:52:11:D6:AD:B5:3A:CA:53:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d325d748-9365-338f-ad66-8b82d9d70a93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:95:6c:f3:7b:e6:30:ca:53:e5:3d:3a:4f:ae:c8:89:9c:2a: 23:46:d6:6f:35:5e:3b:4f:33:36:9f:d5:ca:30:d5:5b:88:6d: 4a:4e:b3:87:d7:72:19:27:d1:e1:52:19:82:b7:f2:03:b5:0e: 0d:3a:7b:5a:e9:54:62:15:e2:20:97:53:fb:4f:88:4b:e5:4d: 44:71:10:c4:44:01:76:89:d7:fb:f4:73:07:06:93:74:59:f3: 86:2e:2a:69:37:5f:ee:bd:53:e6:31:ba:96:75:21:8a:5f:ee: b0:bd:2a:b5:b3:5a:cf:8d:df:fb:ee:45:1c:1d:35:a7:19:0d: cf:e4:18:d1:e7:b7:43:6b:f3:11:6c:23:f6:89:9e:59:6e:a1: 3f:52:86:b2:1a:dd:f7:58:cc:10:c1:11:95:fa:fd:6a:1e:fc: f2:fe:94:15:b1:60:fe:7f:be:54:72:7d:60:08:e2:57:a5:2c: 54:ad:9b:2d:11:66:3c:10:a5:1b:b1:8c:4b:0b:32:a8:29:a4: 99:a4:32:38:0a:70:06:66:27:f8:45:5a:6b:c4:61:24:c7:aa: f7:8b:fc:54:4c:94:5b:dc:ff:a8:e4:a4:07:f2:6e:cb:fd:6e: 6e:db:46:ff:68:09:28:12:a0:b7:91:c7:ac:07:5c:0c:d5:09: 2b:75:97:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niHv8DRGIdR/W8aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODllZjFlMzgtMGU1NS00MDUwLWI4Y2QtNTIwMTFmMWIzM2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1IX3f1L/5oFYh59wm+2yvCFPrp+tEBX7Fn7 oY5AlqiSlDezf0CAd5hjuTKJHFcrO5Mm22XqGX6xcgPUi2KbtFw/LJmZRs7MkC6p rt4Kuyf7XlaRQ9uV/zhydPFPd4C1P3RfSYP11usq2U4zpD8lxDTGthCSiK0g+jmX 1sQhBX9wFzRn1pIrBG2OhTzsPppwUv3obkrrt/682ZGn0kLIqH/OQ9OR330Fk01V WNfWtWeQGXB1thNNvKEB3CHfgY/do3kWG7YAs9zjjmGPRF2G38KS5BiWyIsOAiuk dvMCxVIjR7BU2IFT/MBpkbM/tptr/p8Fap5j0owQArWfhcNnoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFl2Q4g+0i+PHOR9UhHWrbU6ylNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDMyNWQ3NDgtOTM2NS0z MzhmLWFkNjYtOGI4MmQ5ZDcwYTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuVbPN75jDKU+U9Ok+uyImcKiNG1m81XjtPMzaf1cow1VuIbUpOs4fX chkn0eFSGYK38gO1Dg06e1rpVGIV4iCXU/tPiEvlTURxEMREAXaJ1/v0cwcGk3RZ 84YuKmk3X+69U+YxupZ1IYpf7rC9KrWzWs+N3/vuRRwdNacZDc/kGNHnt0Nr8xFs I/aJnlluoT9ShrIa3fdYzBDBEZX6/Woe/PL+lBWxYP5/vlRyfWAI4lelLFStmy0R ZjwQpRuxjEsLMqgppJmkMjgKcAZmJ/hFWmvEYSTHqveL/FRMlFvc/6jkpAfybsv9 bm7bRv9oCSgSoLeRx6wHXAzVCSt1l5g= -----END CERTIFICATE-----Generated at Wed Jul 29 05:49:38 2026 by rpki-client