$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de23efa0-52a1-3215-86a7-21eacb33347d.roa File: de23efa0-52a1-3215-86a7-21eacb33347d.roa (raw, json) Hash identifier: RxyNSLgns+lu0lHBHDV2zVYSTkZTd/RM6hYc+rLLX5M= Subject key identifier: 3D:F0:FC:85:5D:8B:DE:B4:E5:D0:35:A8:E4:8C:FB:1A:02:C8:4D:48 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7888F469FF09C6EA4AFCE00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de23efa0-52a1-3215-86a7-21eacb33347d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396595 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:8f:46:9f:f0:9c:6e:a4:af:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7b545499-eb88-4254-af14-0468b2371d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ea:d2:5e:4d:2c:bc:29:d7:19:5b:a0:40:0d: f1:bf:8e:72:94:65:4a:a2:fa:32:91:4b:5d:7b:a7: 28:7e:05:c0:72:6e:48:ed:7c:e5:94:23:47:6e:7d: 3a:66:33:f1:d0:ce:3c:1e:85:e9:6a:d8:27:d3:83: cf:2e:08:8d:73:11:54:23:91:5a:fe:91:c8:0e:69: b8:1b:95:b5:23:fa:93:47:de:b0:4d:2c:ea:d8:88: a8:d5:81:0b:27:7a:e8:ab:32:ff:31:d1:11:ae:d5: 67:a7:e0:8f:bb:1b:51:0e:42:98:9d:bb:6c:0f:73: 27:59:b4:d3:eb:93:0a:dd:dd:da:0a:72:4d:41:f2: e7:ee:f6:77:ad:ad:40:13:3a:85:27:00:e0:1c:a6: 72:7f:ad:7b:e6:7f:20:a4:44:88:68:1a:85:f3:90: 7b:59:7c:0f:56:7c:eb:d4:53:25:b8:2c:74:ab:36: 5b:e5:30:3d:7e:ff:0e:e6:90:87:f5:aa:22:76:af: 32:16:65:00:09:7c:51:f0:2b:80:8f:66:84:de:6d: df:6d:a8:d3:4d:4a:86:7c:cf:3f:1d:9e:98:13:49: 2a:a6:a9:f6:ed:35:6c:f3:3c:08:4e:a2:ff:3e:fc: 19:e6:ec:86:6c:1f:3a:c1:d6:8e:a9:8b:41:a2:52: ed:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F0:FC:85:5D:8B:DE:B4:E5:D0:35:A8:E4:8C:FB:1A:02:C8:4D:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de23efa0-52a1-3215-86a7-21eacb33347d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b7:3d:72:02:4c:74:d7:0a:7e:99:90:22:36:0d:a2:25:e7: 61:ac:46:d4:14:bc:ac:81:34:c1:97:c0:ac:76:80:f7:a1:25: c0:c4:7f:f4:e0:63:6f:5c:7d:9f:f1:e1:fe:5f:6e:d9:a3:a9: a1:51:93:2b:a5:6f:da:d6:12:43:ed:2b:17:5c:d7:b5:1b:4c: e8:f8:70:b4:b9:f0:94:87:c4:0c:cf:d4:aa:3e:e3:78:06:86: 58:c8:83:65:b0:83:80:e2:ee:93:dc:b4:eb:ec:89:96:be:84: 70:a2:b6:45:7e:6d:58:df:3a:95:74:8d:09:70:97:04:11:e5: be:f5:f5:49:c5:a4:87:d4:d6:47:22:7f:fc:68:7b:cd:af:5f: 85:09:db:a1:1c:62:b6:25:1f:a4:c6:74:ad:91:fa:aa:e8:79: b1:d3:74:c7:a9:dd:ec:87:4a:25:ba:22:a2:fd:bc:e6:5a:d4: 98:ba:56:7a:0d:62:f8:31:8f:7b:76:20:fd:ef:98:3b:a3:14: 25:23:62:73:54:ae:95:68:47:5b:5e:2c:4a:32:8b:71:b0:12: 59:7a:88:d8:7f:e6:a4:b6:7d:26:06:7f:ae:62:7d:5f:f1:06: 5f:97:eb:d5:c4:57:14:8b:e1:8d:d8:47:81:0a:7c:2c:1b:2a: 89:e9:f3:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niI9Gn/CcbqSvzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2I1NDU0OTktZWI4OC00MjU0LWFmMTQtMDQ2OGIyMzcxZDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjurSXk0svCnXGVugQA3xv45ylGVKovoykUtd e6cofgXAcm5I7XzllCNHbn06ZjPx0M48HoXpatgn04PPLgiNcxFUI5Fa/pHIDmm4 G5W1I/qTR96wTSzq2Iio1YELJ3roqzL/MdERrtVnp+CPuxtRDkKYnbtsD3MnWbTT 65MK3d3aCnJNQfLn7vZ3ra1AEzqFJwDgHKZyf6175n8gpESIaBqF85B7WXwPVnzr 1FMluCx0qzZb5TA9fv8O5pCH9aoidq8yFmUACXxR8CuAj2aE3m3fbajTTUqGfM8/ HZ6YE0kqpqn27TVs8zwITqL/PvwZ5uyGbB86wdaOqYtBolLt3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3w/IVdi9605dA1qOSM+xoCyE1IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGUyM2VmYTAtNTJhMS0z MjE1LTg2YTctMjFlYWNiMzMzNDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABq3PXICTHTXCn6ZkCI2DaIl52GsRtQUvKyBNMGXwKx2gPehJcDEf/Tg Y29cfZ/x4f5fbtmjqaFRkyulb9rWEkPtKxdc17UbTOj4cLS58JSHxAzP1Ko+43gG hljIg2Wwg4Di7pPctOvsiZa+hHCitkV+bVjfOpV0jQlwlwQR5b719UnFpIfU1kci f/xoe82vX4UJ26EcYrYlH6TGdK2R+qroebHTdMep3eyHSiW6IqL9vOZa1Ji6VnoN Yvgxj3t2IP3vmDujFCUjYnNUrpVoR1teLEoyi3GwEll6iNh/5qS2fSYGf65ifV/x Bl+X69XEVxSL4Y3YR4EKfCwbKonp8/A= -----END CERTIFICATE-----Generated at Wed Jul 29 04:43:17 2026 by rpki-client