$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea489c1e-e2e6-32eb-b154-6e8702915fa1.roa File: ea489c1e-e2e6-32eb-b154-6e8702915fa1.roa (raw, json) Hash identifier: 6Lzv8HJno1DGu7cZkouX0s46opwZrbQJ7JwX6r+rA9k= Subject key identifier: 28:E6:93:4C:C5:1A:DB:EC:3D:EC:99:7C:A3:47:99:40:FB:91:95:B5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7888C12F9B3312AB2ADB000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea489c1e-e2e6-32eb-b154-6e8702915fa1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20431 IP address blocks: 209.112.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:8c:12:f9:b3:31:2a:b2:ad:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=79e95377-a8ee-4bcf-941e-4a8eef7352df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:89:43:6d:cf:07:55:e0:09:6e:f9:bb:30:0d: d1:d3:5c:a4:cb:7d:33:2d:a3:88:fe:3b:65:16:07: ae:2b:cf:b6:b8:7c:2a:b6:fb:4c:0e:57:b1:10:bd: 2a:90:46:5d:cc:87:3a:9d:b0:16:be:4c:ab:7f:82: a8:8d:34:a0:51:b5:9f:a5:00:a4:71:29:69:38:2b: 98:83:2d:51:22:d7:10:61:36:04:a6:9a:44:a2:2b: ef:2c:21:47:1f:b3:9a:e1:f6:92:dd:21:f1:87:c5: 16:ae:7e:e4:f0:a9:bd:98:04:92:e8:d5:ff:e3:07: f4:ff:ee:e0:93:2e:8e:5f:6f:78:ea:c7:cf:3c:06: 47:a3:1c:69:51:d3:b0:40:1c:90:91:7a:36:fb:9c: 3c:72:a6:ed:1a:40:e0:e4:2a:ed:62:e6:fa:0c:5b: 19:a7:4d:c2:b4:1d:3e:a4:d9:c5:03:77:55:18:1a: 85:f5:4f:90:bf:78:45:d5:3d:ab:62:2b:e2:46:cd: 19:ea:c6:36:b9:4a:11:45:8f:67:ea:8e:0b:62:9d: a2:95:6b:dd:39:b2:48:28:54:bc:2f:d3:b0:27:e7: 95:58:60:9d:cc:80:58:38:a1:f4:93:40:b4:f0:d8: 62:98:96:c0:14:07:3d:1d:c4:82:b9:ec:32:4a:62: ce:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E6:93:4C:C5:1A:DB:EC:3D:EC:99:7C:A3:47:99:40:FB:91:95:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea489c1e-e2e6-32eb-b154-6e8702915fa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:77:57:5c:68:29:c4:bd:cd:d5:26:59:b1:5b:b4:35:9d:1a: 56:21:e7:b4:e4:2f:18:db:e9:33:1c:12:d5:f0:a4:60:53:a1: a0:b9:1f:91:fd:30:13:f1:d8:a7:46:ca:13:50:60:9d:7e:df: 54:8f:10:20:f2:54:37:5f:64:9d:84:6e:a0:39:b2:e2:ac:5b: e1:3e:64:9e:07:67:7b:41:3e:4c:15:fc:75:b7:84:ef:82:e6: 9e:b0:a9:64:bc:19:4d:cf:21:82:35:c9:d5:8e:b7:b2:ce:6a: e7:d5:3b:92:2d:8b:5e:88:67:e3:dd:8b:5b:76:92:da:e1:2f: 80:76:1f:62:c4:8c:26:e9:52:1d:23:05:2a:0a:73:ee:5d:18: 09:10:97:cf:76:5d:41:0f:50:b4:d4:dc:7c:30:c7:8e:0d:26: 5e:60:9b:bb:f9:30:3d:9c:05:3f:96:2d:3c:f1:80:d8:2d:a4: d1:61:02:36:d0:a5:22:b6:54:da:8e:f4:69:02:74:51:18:1a: 7f:67:e6:eb:34:78:1d:7c:9f:11:05:77:66:f1:5c:7b:ff:3e: ec:0d:96:e3:a7:23:24:82:0e:17:be:00:94:b9:77:78:46:57: cb:40:18:55:d5:b3:05:f9:5e:34:5e:ad:ba:0f:ba:87:95:7d: 9a:41:7a:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niIwS+bMxKrKtsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzllOTUzNzctYThlZS00YmNmLTk0MWUtNGE4ZWVmNzM1MmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIlDbc8HVeAJbvm7MA3R01yky30zLaOI/jtl FgeuK8+2uHwqtvtMDlexEL0qkEZdzIc6nbAWvkyrf4KojTSgUbWfpQCkcSlpOCuY gy1RItcQYTYEpppEoivvLCFHH7Oa4faS3SHxh8UWrn7k8Km9mASS6NX/4wf0/+7g ky6OX2946sfPPAZHoxxpUdOwQByQkXo2+5w8cqbtGkDg5CrtYub6DFsZp03CtB0+ pNnFA3dVGBqF9U+Qv3hF1T2rYiviRs0Z6sY2uUoRRY9n6o4LYp2ilWvdObJIKFS8 L9OwJ+eVWGCdzIBYOKH0k0C08NhimJbAFAc9HcSCuewySmLOOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjmk0zFGtvsPeyZfKNHmUD7kZW1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWE0ODljMWUtZTJlNi0z MmViLWIxNTQtNmU4NzAyOTE1ZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx3V1xoKcS9zdUmWbFbtDWdGlYh57TkLxjb6TMcEtXwpGBToaC5H5H9 MBPx2KdGyhNQYJ1+31SPECDyVDdfZJ2EbqA5suKsW+E+ZJ4HZ3tBPkwV/HW3hO+C 5p6wqWS8GU3PIYI1ydWOt7LOaufVO5Iti16IZ+Pdi1t2ktrhL4B2H2LEjCbpUh0j BSoKc+5dGAkQl892XUEPULTU3Hwwx44NJl5gm7v5MD2cBT+WLTzxgNgtpNFhAjbQ pSK2VNqO9GkCdFEYGn9n5us0eB18nxEFd2bxXHv/PuwNluOnIySCDhe+AJS5d3hG V8tAGFXVswX5XjRerboPuoeVfZpBet0= -----END CERTIFICATE-----Generated at Wed Jul 29 06:38:30 2026 by rpki-client