$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/095e1ffa-66c8-33a3-80c7-9718b3e96603.roa File: 095e1ffa-66c8-33a3-80c7-9718b3e96603.roa (raw, json) Hash identifier: +xGA6viDVehQckgwb4M/0Pv6a/AkzI/13H2SdyKGOkk= Subject key identifier: 63:33:E2:23:23:25:42:4D:6E:BB:90:4E:73:93:F4:8F:1C:37:09:8A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F5233419CDDBB369E673400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/095e1ffa-66c8-33a3-80c7-9718b3e96603.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396589 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:33:41:9c:dd:bb:36:9e:67:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=1389fa6d-5f5d-4112-a03d-0a1aa1e89f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b4:c6:dd:54:55:07:3a:8b:b6:32:2d:e7:63: 1d:9f:61:2a:8b:4b:69:50:44:97:b5:3e:77:af:00: 53:dd:6f:8b:95:13:af:60:c3:93:86:d6:9e:fc:55: c8:dd:fc:a9:90:64:44:de:b4:33:ef:43:a1:b6:dc: e2:04:93:36:30:dd:ec:a5:e9:68:9b:e5:1e:7f:26: fc:c3:ed:7d:ff:83:e4:f6:ce:ca:97:0d:0a:48:59: bf:50:8e:a1:0b:5c:19:ec:f3:9b:76:93:6a:b7:70: 7c:0c:53:3f:19:70:4c:44:2e:ea:0b:46:05:41:0c: e2:f2:ac:0e:d8:ba:48:07:0e:78:9f:3a:d2:a3:21: 23:0d:88:4a:b0:77:fd:a1:e2:86:19:3c:31:7c:27: c4:e0:da:74:5a:94:9e:27:8d:b0:74:cb:f1:6d:7c: 46:c0:58:f7:63:a0:ef:91:76:a0:90:fa:c7:a3:de: 74:fd:9e:23:1b:fc:5d:de:a0:21:a4:3b:39:6b:2d: 02:ad:55:9f:bc:ae:20:01:2f:f0:8b:d4:03:5a:9f: 24:2e:75:f6:a8:43:90:f5:88:63:63:9d:58:84:6c: 45:91:38:a4:e0:05:af:0c:bf:3d:b9:14:a6:3a:82: d2:23:14:62:fe:7e:c1:28:20:e2:f2:75:23:c3:f2: 8b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:33:E2:23:23:25:42:4D:6E:BB:90:4E:73:93:F4:8F:1C:37:09:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/095e1ffa-66c8-33a3-80c7-9718b3e96603.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:66:f0:f1:ca:a2:42:58:3a:85:1e:6a:f7:92:8b:91:1e:f7: e6:68:5d:2c:01:92:e7:a8:4d:a1:17:9a:69:7d:7c:88:a7:32: 24:97:29:fd:52:ab:ac:02:7c:31:fd:62:e7:b8:b2:ad:21:db: 10:70:9d:1d:87:9a:38:4e:a8:73:9d:6e:5f:8e:e4:ba:c9:b4: 7d:3d:cf:da:db:f2:1a:72:ca:23:9b:cb:a6:12:bc:e4:eb:78: fc:9e:df:4e:9e:8f:a4:5c:69:dd:15:35:8e:49:f6:bf:a2:ab: 70:b8:86:6a:33:3f:b1:3f:5e:86:58:74:0c:86:b0:41:f4:5d: 72:3e:b9:6b:85:0a:02:c6:b5:bf:d5:e5:9f:69:a3:d9:56:29: 98:2a:4f:6b:d9:57:c7:e6:40:fc:57:bd:bd:98:5d:5e:88:ff: c5:b6:72:57:86:6b:dd:90:02:86:d3:7d:f1:37:14:24:34:ab: 62:42:31:15:4b:f7:f3:0e:7b:56:21:6b:ab:90:b7:a3:e1:45: dc:19:e8:a9:15:ee:49:c5:72:02:ca:1e:af:ab:f7:b6:5e:ec: 0e:72:5a:ac:6f:00:9b:b8:7e:6f:96:2c:f7:16:99:e4:68:31: e1:e4:83:9c:d3:dd:7c:02:9e:4e:c7:f8:8e:5f:62:2c:e7:ce: a0:27:0a:a9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjNBnN27Np5nNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MTM4OWZhNmQtNWY1ZC00MTEyLWEwM2QtMGExYWExZTg5ZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbTG3VRVBzqLtjIt52Mdn2Eqi0tpUESXtT53 rwBT3W+LlROvYMOThtae/FXI3fypkGRE3rQz70OhttziBJM2MN3spelom+Uefyb8 w+19/4Pk9s7Klw0KSFm/UI6hC1wZ7PObdpNqt3B8DFM/GXBMRC7qC0YFQQzi8qwO 2LpIBw54nzrSoyEjDYhKsHf9oeKGGTwxfCfE4Np0WpSeJ42wdMvxbXxGwFj3Y6Dv kXagkPrHo950/Z4jG/xd3qAhpDs5ay0CrVWfvK4gAS/wi9QDWp8kLnX2qEOQ9Yhj Y51YhGxFkTik4AWvDL89uRSmOoLSIxRi/n7BKCDi8nUjw/KLeQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGMz4iMjJUJNbruQTnOT9I8cNwmKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDk1ZTFmZmEtNjZjOC0z M2EzLTgwYzctOTcxOGIzZTk2NjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA5ZvDxyqJCWDqFHmr3kouRHvfmaF0sAZLnqE2hF5ppfXyIpzIklyn9 UqusAnwx/WLnuLKtIdsQcJ0dh5o4TqhznW5fjuS6ybR9Pc/a2/Iacsojm8umErzk 63j8nt9Ono+kXGndFTWOSfa/oqtwuIZqMz+xP16GWHQMhrBB9F1yPrlrhQoCxrW/ 1eWfaaPZVimYKk9r2VfH5kD8V729mF1eiP/FtnJXhmvdkAKG033xNxQkNKtiQjEV S/fzDntWIWurkLej4UXcGeipFe5JxXICyh6vq/e2XuwOclqsbwCbuH5vliz3Fpnk aDHh5IOc0918Ap5Ox/iOX2Is586gJwqp -----END CERTIFICATE-----Generated at Mon Oct 20 13:20:59 2025 by rpki-client