$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0d6efb49-50d4-3c27-aae0-3791eddfbcdc.roa File: 0d6efb49-50d4-3c27-aae0-3791eddfbcdc.roa (raw, json) Hash identifier: Lw8Ptz6FiyBhysfGJnP7HIGWq0V6sa8vIMx7iKtpA+s= Subject key identifier: 57:F4:0D:8F:0F:4F:01:1E:C8:A4:8A:1A:0B:28:22:4B:88:62:0F:D4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523165A00C6087A1BA2C40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0d6efb49-50d4-3c27-aae0-3791eddfbcdc.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396597 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:31:65:a0:0c:60:87:a1:ba:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=52267ed1-755b-4663-abbb-2e01db348596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:38:66:3d:9f:25:00:54:41:c3:c3:aa:73:36: 25:89:14:69:72:74:a2:f9:f9:73:66:40:07:9a:2f: 93:5d:82:8c:94:bb:b1:fb:44:f7:cf:a0:d8:a7:78: 07:c6:16:5e:f1:d7:33:be:7a:14:41:f6:da:02:db: fa:57:e5:6a:cc:75:30:24:5a:de:4f:5d:d3:1f:65: 0f:0e:88:2c:e6:ff:a1:30:74:0a:af:65:cc:34:5d: 9d:81:74:d3:79:e3:53:81:ed:d8:55:9c:3d:84:83: 3e:8f:ad:90:93:d6:ff:7a:e7:6f:49:a2:ba:0d:c6: 41:89:7a:7e:7c:92:53:15:d6:ad:cf:e4:93:63:13: d0:f0:24:dc:e9:49:2e:df:39:28:62:19:2d:cf:0b: 12:43:f7:14:ce:47:16:d9:b6:3e:93:dc:f6:18:99: 2d:ff:be:33:74:82:b5:b4:36:dd:72:7b:84:f2:9f: 2a:f8:76:d1:5b:ef:2c:a1:f0:a5:a9:fb:d7:d8:6f: 8b:f6:20:16:9c:82:33:11:e3:12:b4:5c:73:3d:4d: 51:53:30:10:ec:63:3c:14:81:89:fb:2b:b9:d1:8b: 8b:bb:51:a4:2e:e5:6c:29:13:37:3c:12:a8:4e:ca: c6:e6:12:99:80:60:01:a9:de:99:eb:3c:a2:40:f1: 9a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F4:0D:8F:0F:4F:01:1E:C8:A4:8A:1A:0B:28:22:4B:88:62:0F:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0d6efb49-50d4-3c27-aae0-3791eddfbcdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:85:0d:80:33:db:ee:41:bb:5e:7a:b5:b9:b5:ea:44:88:7f: 23:08:25:61:a3:7c:3f:a8:5e:04:f7:6f:85:1b:5c:ff:e1:8c: 08:b0:5d:16:87:b3:48:ef:dc:55:7c:8c:7f:b5:49:64:91:f7: 8c:8f:33:2a:fc:fb:55:99:57:65:43:c1:c1:18:62:5d:6f:bd: 28:1a:ba:f2:82:35:62:a2:10:89:e3:78:02:45:11:29:0c:57: c7:7f:b6:89:2c:d4:32:da:f7:a1:45:47:3d:80:7b:1b:d2:d8: 35:a9:6a:af:68:01:97:84:92:fd:27:f3:d2:ee:f0:d3:7f:a6: b7:7a:2a:ac:14:14:dc:91:a9:35:a2:b8:4a:3a:87:5e:a1:64: 21:7d:cf:c9:87:86:89:0a:24:42:47:ed:8a:cc:b7:79:6b:a2: bb:9d:85:c2:64:37:22:e0:23:83:a9:6a:8e:52:17:88:15:79: ff:68:31:f6:24:61:47:d5:61:07:cc:42:4e:7e:e5:ce:25:99: 3a:5d:c9:1a:ce:99:3f:4c:05:e3:fa:1b:b3:cb:ff:1c:40:06: a4:86:74:50:3f:b6:53:5e:29:61:12:b7:46:91:07:ad:08:5a: 21:a9:34:22:e7:e4:1e:ec:5a:ca:7d:f3:da:74:73:2d:77:fd: 0c:80:4b:55 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjFloAxgh6G6LEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NTIyNjdlZDEtNzU1Yi00NjYzLWFiYmItMmUwMWRiMzQ4NTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgThmPZ8lAFRBw8OqczYliRRpcnSi+flzZkAH mi+TXYKMlLux+0T3z6DYp3gHxhZe8dczvnoUQfbaAtv6V+VqzHUwJFreT13TH2UP Dogs5v+hMHQKr2XMNF2dgXTTeeNTge3YVZw9hIM+j62Qk9b/eudvSaK6DcZBiXp+ fJJTFdatz+STYxPQ8CTc6Uku3zkoYhktzwsSQ/cUzkcW2bY+k9z2GJkt/74zdIK1 tDbdcnuE8p8q+HbRW+8sofClqfvX2G+L9iAWnIIzEeMStFxzPU1RUzAQ7GM8FIGJ +yu50YuLu1GkLuVsKRM3PBKoTsrG5hKZgGABqd6Z6zyiQPGaoQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFf0DY8PTwEeyKSKGgsoIkuIYg/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGQ2ZWZiNDktNTBkNC0z YzI3LWFhZTAtMzc5MWVkZGZiY2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB1hQ2AM9vuQbteerW5tepEiH8jCCVho3w/qF4E92+FG1z/4YwIsF0W h7NI79xVfIx/tUlkkfeMjzMq/PtVmVdlQ8HBGGJdb70oGrrygjViohCJ43gCRREp DFfHf7aJLNQy2vehRUc9gHsb0tg1qWqvaAGXhJL9J/PS7vDTf6a3eiqsFBTckak1 orhKOodeoWQhfc/Jh4aJCiRCR+2KzLd5a6K7nYXCZDci4CODqWqOUheIFXn/aDH2 JGFH1WEHzEJOfuXOJZk6Xckazpk/TAXj+huzy/8cQAakhnRQP7ZTXilhErdGkQet CFohqTQi5+Qe7FrKffPadHMtd/0MgEtV -----END CERTIFICATE-----Generated at Mon Oct 20 15:48:46 2025 by rpki-client