$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a7925a3-7a9a-3920-97d4-de9b773e29f2.roa File: 0a7925a3-7a9a-3920-97d4-de9b773e29f2.roa (raw, json) Hash identifier: KfKiD06cPFv2MPSja98Zc+HbmDCL9lJnr05tBhSwmL8= Subject key identifier: D9:B7:83:30:C9:B9:B0:87:C3:80:8D:51:33:C4:73:F3:10:8F:12:E4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F5237679728E76806271800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a7925a3-7a9a-3920-97d4-de9b773e29f2.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 36621 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:37:67:97:28:e7:68:06:27:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=34c81dfe-b49f-473e-9286-dbef44b32005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:38:21:72:59:5e:f3:db:93:ba:0c:c1:19:e3: af:ad:0c:aa:e5:a7:9c:62:bb:b6:06:5a:9a:77:9f: df:94:5f:f9:f8:84:e6:31:dd:cc:35:e6:f6:dd:f2: ac:d5:ce:e4:04:6b:79:15:f1:5c:f8:22:49:41:96: a4:85:f1:4f:ab:bb:d1:a5:bb:8b:c2:0e:83:d1:de: 7d:5e:35:3b:eb:ab:b9:af:2b:cc:3b:e1:83:d7:ce: 20:9d:83:85:21:fd:ba:1f:65:69:43:02:74:01:70: 06:d3:aa:86:3e:23:13:52:1a:02:af:60:92:69:26: 2e:80:36:96:75:aa:9b:4b:15:0b:85:c7:0b:bd:3e: 47:ea:d6:64:ec:b0:37:3d:72:e5:c7:6c:2c:3e:f0: 61:6c:4e:e9:f5:7d:03:6a:18:16:22:13:68:b8:25: a6:8a:ad:fd:6c:68:0f:cf:64:9c:16:4d:fb:e1:20: 5c:c6:27:7c:45:c6:76:79:c3:cf:5a:2b:42:72:cf: 28:0f:e9:8e:fe:b6:ee:6d:1b:e2:8b:6d:eb:5b:93: 3b:7d:36:c4:d9:3c:ab:a3:38:7f:50:ec:88:28:4a: 11:bb:e0:8b:6a:29:83:7a:7c:27:3c:69:86:34:03: a2:c1:ff:01:b1:f6:35:93:1a:85:64:09:52:10:65: 68:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B7:83:30:C9:B9:B0:87:C3:80:8D:51:33:C4:73:F3:10:8F:12:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a7925a3-7a9a-3920-97d4-de9b773e29f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:fa:54:ec:75:1a:06:37:22:55:c1:59:0e:03:b6:31:94:b3: b1:14:66:e5:ee:3d:f1:ca:5a:b3:8a:63:f3:35:ef:66:68:ee: 87:8d:52:1c:a5:6c:f3:a5:d4:e1:2f:c7:55:fe:91:fd:48:0a: 15:8e:02:54:79:fc:7e:6b:b8:76:9f:2d:b4:5c:a5:ce:8a:0c: cd:d8:60:e4:f8:43:62:4f:7a:ab:c2:a5:65:1f:31:75:f7:6c: 19:31:ba:28:ec:60:19:21:76:25:ad:66:d9:5f:09:44:7d:b6: 4a:5c:21:a4:68:ea:3e:c9:6e:dc:4d:8f:11:f3:ca:87:a3:a7: e3:2a:d8:05:4b:16:29:0e:ef:9b:e1:46:17:18:a0:eb:3b:9b: cc:93:4a:7a:40:88:e4:60:8c:4e:b0:6d:ce:15:02:9b:8c:98: b7:7d:69:2c:12:f5:9f:fd:12:2d:f1:89:21:8e:41:7e:41:a7: b6:b3:76:c7:3c:39:8b:8d:32:a6:42:e4:66:62:53:05:af:bc: 0f:0d:66:00:73:13:17:c7:53:de:c5:af:0a:9c:d4:62:fa:1f: a0:8c:17:6a:9f:4a:51:1f:ec:1d:17:4c:39:3e:d5:ef:7f:2d: c3:f3:a1:1e:5c:e4:88:6a:c0:ad:b7:ef:bf:41:2b:f0:6a:b1: 41:c7:ca:c1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjdnlyjnaAYnGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MzRjODFkZmUtYjQ5Zi00NzNlLTkyODYtZGJlZjQ0YjMyMDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizghclle89uTugzBGeOvrQyq5aecYru2Blqa d5/flF/5+ITmMd3MNeb23fKs1c7kBGt5FfFc+CJJQZakhfFPq7vRpbuLwg6D0d59 XjU766u5ryvMO+GD184gnYOFIf26H2VpQwJ0AXAG06qGPiMTUhoCr2CSaSYugDaW daqbSxULhccLvT5H6tZk7LA3PXLlx2wsPvBhbE7p9X0DahgWIhNouCWmiq39bGgP z2ScFk374SBcxid8RcZ2ecPPWitCcs8oD+mO/rbubRvii23rW5M7fTbE2Tyrozh/ UOyIKEoRu+CLaimDenwnPGmGNAOiwf8BsfY1kxqFZAlSEGVowwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNm3gzDJubCHw4CNUTPEc/MQjxLkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGE3OTI1YTMtN2E5YS0z OTIwLTk3ZDQtZGU5Yjc3M2UyOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAC+lTsdRoGNyJVwVkOA7YxlLOxFGbl7j3xylqzimPzNe9maO6HjVIc pWzzpdThL8dV/pH9SAoVjgJUefx+a7h2ny20XKXOigzN2GDk+ENiT3qrwqVlHzF1 92wZMboo7GAZIXYlrWbZXwlEfbZKXCGkaOo+yW7cTY8R88qHo6fjKtgFSxYpDu+b 4UYXGKDrO5vMk0p6QIjkYIxOsG3OFQKbjJi3fWksEvWf/RIt8YkhjkF+Qae2s3bH PDmLjTKmQuRmYlMFr7wPDWYAcxMXx1Pexa8KnNRi+h+gjBdqn0pRH+wdF0w5PtXv fy3D86EeXOSIasCtt++/QSvwarFBx8rB -----END CERTIFICATE-----Generated at Mon Oct 20 20:40:29 2025 by rpki-client