$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/00c2e509-59ad-3e90-96ec-399e1bf0a9e9.roa File: 00c2e509-59ad-3e90-96ec-399e1bf0a9e9.roa (raw, json) Hash identifier: UmLJ4k4nvPiuupHyTEHkjFQdlVLXWWTweTu+s/Tqkb4= Subject key identifier: C0:9D:37:EE:CF:74:63:9D:30:5D:3A:7E:48:85:48:C5:7E:9C:D1:C6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523C06722D5451A852A300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/00c2e509-59ad-3e90-96ec-399e1bf0a9e9.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396542 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3c:06:72:2d:54:51:a8:52:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=b194acf7-bef0-48b4-8674-020c9c403d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:44:58:a5:b7:3a:45:20:0d:55:a8:b6:79:ee: 7d:aa:05:ad:2a:35:39:aa:37:b5:82:70:13:e0:d8: d0:14:bf:4c:b1:fa:77:93:7d:28:6a:13:46:2d:0d: 7e:d2:27:7a:9f:30:7a:cb:93:be:21:89:06:27:4b: ec:40:14:81:2e:04:28:34:7c:6a:65:f9:74:63:05: f3:82:80:d0:b2:06:3d:47:7f:09:25:5f:6a:9b:15: d0:64:d5:39:4c:db:0b:d3:0e:64:c6:85:cf:8e:8e: 9f:f3:08:46:10:22:c2:2f:df:d8:3e:f9:b6:0b:f2: e1:37:93:a9:36:c9:6a:86:cb:6d:86:30:60:07:68: 0f:c4:be:9b:66:dc:81:3d:6d:ab:6f:42:78:47:5f: c0:3f:85:47:e7:11:7e:20:ba:76:a9:65:7d:e7:d9: 4c:dd:04:a2:e2:b2:2e:f7:7a:92:e4:9c:89:48:1e: 09:18:99:3c:87:a6:20:4a:20:9e:21:5f:de:05:7f: c7:d7:2d:92:9c:9f:b4:a5:75:2f:9c:8c:ec:ae:71: 96:63:11:0f:be:a9:48:b0:45:3f:35:dc:a5:16:55: 20:91:a0:6b:b3:2e:9d:31:5b:f0:2b:cc:e6:9c:f9: ff:cb:8e:e3:13:24:e5:9c:06:75:dd:99:b4:77:56: 2f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9D:37:EE:CF:74:63:9D:30:5D:3A:7E:48:85:48:C5:7E:9C:D1:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/00c2e509-59ad-3e90-96ec-399e1bf0a9e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e1:ff:a7:de:4b:d4:51:98:7d:74:d5:e6:83:80:3d:e6:e2: 19:b2:2c:3d:e1:22:42:00:90:6e:12:89:c7:02:4a:ed:35:ad: c0:70:e8:a3:e8:34:cd:91:81:4e:5d:6b:d0:c7:8e:44:97:53: 4f:a0:f4:b4:e5:ad:46:75:7f:d1:7d:4f:ee:3a:69:5c:53:67: 3b:a8:27:cc:ac:d1:78:51:40:d3:e2:b8:7b:b4:2d:45:39:70: 9e:40:3e:8f:5b:8c:38:1a:c6:e6:e3:f0:cd:3b:82:1f:32:ae: d9:32:46:7c:6a:ca:88:e9:7b:69:db:f7:03:78:32:3b:b3:96: 2b:61:18:8f:66:07:e8:f3:6f:68:d4:2c:fb:81:71:9b:48:80: ce:d4:04:9f:6e:39:3c:5c:05:ea:b8:77:fe:22:e0:b1:fb:95: 3c:a0:9f:16:19:4a:78:a4:ce:81:03:e7:31:b7:c4:a9:63:a8: e2:00:c2:39:94:19:30:07:ef:4f:86:56:a1:10:2a:db:19:cf: 11:6b:6d:2a:04:d9:29:63:34:fe:d9:2f:bb:28:36:06:81:fa: 7c:b0:f3:51:eb:99:29:d4:2e:39:56:b2:7d:04:80:4c:be:f4: 9e:bc:c4:a2:a6:d4:1e:4a:60:65:af:86:45:98:9c:f8:e9:f2: ae:db:a1:8e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjwGci1UUahSowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YjE5NGFjZjctYmVmMC00OGI0LTg2NzQtMDIwYzljNDAzZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApERYpbc6RSANVai2ee59qgWtKjU5qje1gnAT 4NjQFL9Msfp3k30oahNGLQ1+0id6nzB6y5O+IYkGJ0vsQBSBLgQoNHxqZfl0YwXz goDQsgY9R38JJV9qmxXQZNU5TNsL0w5kxoXPjo6f8whGECLCL9/YPvm2C/LhN5Op NslqhstthjBgB2gPxL6bZtyBPW2rb0J4R1/AP4VH5xF+ILp2qWV959lM3QSi4rIu 93qS5JyJSB4JGJk8h6YgSiCeIV/eBX/H1y2SnJ+0pXUvnIzsrnGWYxEPvqlIsEU/ NdylFlUgkaBrsy6dMVvwK8zmnPn/y47jEyTlnAZ13Zm0d1YvBwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMCdN+7PdGOdMF06fkiFSMV+nNHGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDBjMmU1MDktNTlhZC0z ZTkwLTk2ZWMtMzk5ZTFiZjBhOWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBG4f+n3kvUUZh9dNXmg4A95uIZsiw94SJCAJBuEonHAkrtNa3AcOij 6DTNkYFOXWvQx45El1NPoPS05a1GdX/RfU/uOmlcU2c7qCfMrNF4UUDT4rh7tC1F OXCeQD6PW4w4Gsbm4/DNO4IfMq7ZMkZ8asqI6Xtp2/cDeDI7s5YrYRiPZgfo829o 1Cz7gXGbSIDO1ASfbjk8XAXquHf+IuCx+5U8oJ8WGUp4pM6BA+cxt8SpY6jiAMI5 lBkwB+9PhlahECrbGc8Ra20qBNkpYzT+2S+7KDYGgfp8sPNR65kp1C45VrJ9BIBM vvSevMSiptQeSmBlr4ZFmJz46fKu26GO -----END CERTIFICATE-----Generated at Tue Oct 21 04:44:21 2025 by rpki-client