$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f1b1e97-2489-3d9a-b658-7894e5aec93e.roa File: 0f1b1e97-2489-3d9a-b658-7894e5aec93e.roa (raw, json) Hash identifier: JxWYwkQPax4pjTE59axA9T73YSoEwW30nVsiEMMY++E= Subject key identifier: 2D:9E:6A:76:EC:D2:C0:7B:E6:62:3C:A9:25:CF:4C:59:B1:49:56:AC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F52325C463BE1081763EA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f1b1e97-2489-3d9a-b658-7894e5aec93e.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396605 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:32:5c:46:3b:e1:08:17:63:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=adfc900c-2601-40ef-86e6-8e45594ff1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:24:19:d1:88:45:96:dd:16:c4:01:ed:56:51: a6:25:e2:f6:75:44:da:70:df:b7:1c:98:d2:bc:6f: ba:89:78:c0:b4:8e:e9:8e:4f:ba:39:2d:26:b5:83: 52:b8:1c:d7:38:94:67:f0:7f:c6:57:df:e3:0f:9a: c5:d4:17:e5:e5:84:55:6d:b4:9e:59:6f:83:aa:d1: 85:8b:41:5e:3b:e8:d4:d9:d5:97:42:d7:30:2f:50: cf:7e:d5:2b:16:50:6f:95:ee:15:57:47:8c:b0:38: 59:e4:2b:ec:43:0f:d3:b1:e1:33:d4:39:d7:d1:d8: 5e:f4:5a:bb:dc:5d:ff:79:b1:55:db:19:c8:6e:ac: 31:71:c5:56:5c:b1:93:6c:a1:1f:29:0c:dc:ab:cd: b9:66:34:40:8f:c0:1b:b9:89:eb:36:37:de:43:8d: fa:dd:07:d2:a5:f9:e7:b4:53:57:40:1f:0d:13:f7: 89:cf:71:ef:a6:b8:6e:1c:d9:1b:cc:86:84:f6:a0: c1:a7:27:50:48:81:5d:ac:dc:f5:3b:a9:99:a0:71: fe:3a:fd:c2:29:7a:93:17:35:6c:e4:c6:a3:1e:eb: 9b:b9:38:56:ca:d9:15:22:02:a8:08:70:ac:c8:81: 11:0b:38:6a:57:92:ef:42:f9:19:e0:ae:22:5b:c3: ec:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9E:6A:76:EC:D2:C0:7B:E6:62:3C:A9:25:CF:4C:59:B1:49:56:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f1b1e97-2489-3d9a-b658-7894e5aec93e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b3:be:e4:7e:36:63:b4:5f:4c:ec:90:92:41:10:7b:fb:b5: b9:8b:2d:60:bd:bb:7a:f4:66:54:3a:bb:50:44:92:7e:73:c5: 2e:6c:84:83:8b:6e:e6:0f:c8:52:cc:28:7c:57:62:db:ac:4f: 56:7a:07:88:69:ec:89:3c:83:10:a7:8c:af:3a:43:c2:a4:32: 01:87:c1:51:fa:99:ad:51:e5:7b:c2:c9:a5:65:27:ef:9f:2a: e9:62:8b:3c:a4:42:83:33:fe:05:55:22:67:52:0c:09:1e:ec: 73:2c:3e:ce:00:29:d1:cd:cb:57:21:1c:aa:73:37:ac:4a:13: 9e:da:67:be:f8:3b:79:38:1d:c6:af:b7:d8:e5:a6:60:87:88: b2:9d:58:e0:74:cd:6f:4f:34:3e:48:7f:38:cd:cd:e9:68:95: 00:18:18:44:af:16:b0:ba:f8:66:30:38:78:6d:ae:8e:87:49: e1:a1:20:d9:e6:9a:ec:c6:92:8f:f6:29:58:a3:5e:a3:05:45: 12:7e:e3:9f:71:8c:9c:55:b5:61:68:0f:f4:b0:ef:57:8f:64: 62:94:27:41:cd:69:c2:62:3b:7c:a5:05:1d:76:77:67:35:3f: 07:a5:fa:58:3d:be:88:fd:94:01:10:30:7e:4d:74:8c:fa:7a: d5:58:b6:64 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjJcRjvhCBdj6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YWRmYzkwMGMtMjYwMS00MGVmLTg2ZTYtOGU0NTU5NGZmMWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCQZ0YhFlt0WxAHtVlGmJeL2dUTacN+3HJjS vG+6iXjAtI7pjk+6OS0mtYNSuBzXOJRn8H/GV9/jD5rF1Bfl5YRVbbSeWW+DqtGF i0FeO+jU2dWXQtcwL1DPftUrFlBvle4VV0eMsDhZ5CvsQw/TseEz1DnX0dhe9Fq7 3F3/ebFV2xnIbqwxccVWXLGTbKEfKQzcq825ZjRAj8AbuYnrNjfeQ4363QfSpfnn tFNXQB8NE/eJz3HvprhuHNkbzIaE9qDBpydQSIFdrNz1O6mZoHH+Ov3CKXqTFzVs 5MajHuubuThWytkVIgKoCHCsyIERCzhqV5LvQvkZ4K4iW8PsVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC2eanbs0sB75mI8qSXPTFmxSVasMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGYxYjFlOTctMjQ4OS0z ZDlhLWI2NTgtNzg5NGU1YWVjOTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAVs77kfjZjtF9M7JCSQRB7+7W5iy1gvbt69GZUOrtQRJJ+c8UubISD i27mD8hSzCh8V2LbrE9WegeIaeyJPIMQp4yvOkPCpDIBh8FR+pmtUeV7wsmlZSfv nyrpYos8pEKDM/4FVSJnUgwJHuxzLD7OACnRzctXIRyqczesShOe2me++Dt5OB3G r7fY5aZgh4iynVjgdM1vTzQ+SH84zc3paJUAGBhErxawuvhmMDh4ba6Oh0nhoSDZ 5prsxpKP9ilYo16jBUUSfuOfcYycVbVhaA/0sO9Xj2RilCdBzWnCYjt8pQUddndn NT8HpfpYPb6I/ZQBEDB+TXSM+nrVWLZk -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:14 2025 by rpki-client