$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e25b1570-412d-35af-92ce-5dffe2920b3d.roa File: e25b1570-412d-35af-92ce-5dffe2920b3d.roa (raw, json) Hash identifier: vrZIGm1dYTziyI0e1PmtrYAqNKNeYlEFw7RcwRSEYUE= Subject key identifier: 62:47:92:40:B6:AC:53:B2:74:00:2F:CF:0D:24:8A:87:5A:5E:88:4B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7887C1C0E262721BFE69D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e25b1570-412d-35af-92ce-5dffe2920b3d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397200 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:7c:1c:0e:26:27:21:bf:e6:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a8bd8372-640b-48bb-9f47-b997d6305843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:08:5e:5d:73:8f:d9:df:11:91:e6:2a:9a:eb: 01:58:4b:9a:9a:2f:f5:b5:78:18:96:d8:45:3b:e9: 76:ec:42:80:28:ce:2b:15:fc:f4:a8:2b:d4:ab:40: 3b:83:d8:3a:08:0f:c2:65:ff:c1:4e:b5:d6:92:c7: bb:49:fb:1d:57:b6:9a:39:fa:57:07:b2:7d:e6:e1: fa:35:b1:d5:76:aa:76:81:64:91:e3:09:33:29:85: 3c:a5:41:d8:75:2e:b5:ba:09:5f:e5:70:47:e3:1c: 28:19:f6:c9:25:00:b5:e4:d7:1d:1b:0f:df:ba:cc: 40:6d:c8:86:d5:44:fa:0f:08:24:9e:19:1b:f6:f0: 01:8f:a2:42:2c:d7:0e:51:d6:d7:d1:aa:5e:8d:ce: ba:ee:d0:59:64:f1:17:cb:3f:80:1a:c6:89:b5:a3: 9b:8a:79:ee:49:9d:21:c6:c0:3f:3a:33:5a:f4:5f: 7b:7c:cc:ff:a0:ad:72:14:92:d0:d9:19:93:0b:8f: 6e:dc:c5:12:35:7b:ef:d1:f8:4e:4a:c4:97:6d:7e: 5d:71:fb:ec:d7:ab:40:1b:c0:83:0a:32:78:fa:fa: 4c:65:86:de:a2:86:ae:3c:1f:e9:c0:37:7f:a3:0c: 49:11:ce:3a:65:8c:48:7c:f5:6b:ac:64:25:90:5e: 26:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:47:92:40:B6:AC:53:B2:74:00:2F:CF:0D:24:8A:87:5A:5E:88:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e25b1570-412d-35af-92ce-5dffe2920b3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:37:19:b1:92:f7:ef:bf:6a:f1:50:5c:e2:b0:7a:a9:d2:f7: 62:28:b3:1b:88:68:4a:2d:71:c7:5f:04:74:e8:d5:f5:8c:18: ba:07:df:2c:df:4d:b0:75:c8:ed:23:33:c3:04:c6:e2:0f:3a: 2e:c2:74:2c:aa:87:54:79:9b:d2:a3:c6:02:2a:a9:c8:4e:6f: 04:83:0f:da:b1:dc:0b:66:e9:62:2a:e5:1b:1d:20:29:ca:7f: 65:15:7b:b9:f3:ea:3c:42:99:61:80:47:35:01:97:a1:4a:85: 91:a6:1e:42:ba:a2:ce:ee:13:31:ff:d4:d7:0b:90:f1:fc:84: ba:0e:46:e7:a6:25:c3:aa:36:f8:c0:07:04:f9:2c:c9:26:96: 99:3d:16:ee:5a:a6:9e:7d:d3:70:d3:bb:08:14:4a:c3:fc:1b: 97:ca:00:b4:b6:19:1b:61:d2:5a:4e:9b:b3:3c:e5:f2:36:f1: af:ae:a1:57:fa:8d:83:b6:c0:e4:88:41:a2:70:a2:6a:2d:b9: 8d:9a:7b:a4:5d:87:ca:3f:ad:a5:25:f1:85:6f:71:3b:4e:18: 1e:ae:15:0d:e8:c7:ca:6c:fa:2a:42:69:e0:a2:03:8c:66:06: ff:6e:65:4a:84:a2:f9:eb:32:6e:24:28:57:fd:48:c7:7c:c1: 0d:c7:31:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niHwcDiYnIb/mnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YThiZDgzNzItNjQwYi00OGJiLTlmNDctYjk5N2Q2MzA1ODQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQheXXOP2d8RkeYqmusBWEuami/1tXgYlthF O+l27EKAKM4rFfz0qCvUq0A7g9g6CA/CZf/BTrXWkse7SfsdV7aaOfpXB7J95uH6 NbHVdqp2gWSR4wkzKYU8pUHYdS61uglf5XBH4xwoGfbJJQC15NcdGw/fusxAbciG 1UT6Dwgknhkb9vABj6JCLNcOUdbX0apejc667tBZZPEXyz+AGsaJtaObinnuSZ0h xsA/OjNa9F97fMz/oK1yFJLQ2RmTC49u3MUSNXvv0fhOSsSXbX5dcfvs16tAG8CD CjJ4+vpMZYbeooauPB/pwDd/owxJEc46ZYxIfPVrrGQlkF4m5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJHkkC2rFOydAAvzw0kiodaXohLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTI1YjE1NzAtNDEyZC0z NWFmLTkyY2UtNWRmZmUyOTIwYjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH83GbGS9++/avFQXOKweqnS92IosxuIaEotccdfBHTo1fWMGLoH3yzf TbB1yO0jM8MExuIPOi7CdCyqh1R5m9KjxgIqqchObwSDD9qx3Atm6WIq5RsdICnK f2UVe7nz6jxCmWGARzUBl6FKhZGmHkK6os7uEzH/1NcLkPH8hLoORuemJcOqNvjA BwT5LMkmlpk9Fu5app5903DTuwgUSsP8G5fKALS2GRth0lpOm7M85fI28a+uoVf6 jYO2wOSIQaJwomotuY2ae6Rdh8o/raUl8YVvcTtOGB6uFQ3ox8ps+ipCaeCiA4xm Bv9uZUqEovnrMm4kKFf9SMd8wQ3HMS8= -----END CERTIFICATE-----Generated at Wed Jul 29 06:41:49 2026 by rpki-client