$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/15aba026-abd9-329f-bf1e-5e973ea35a1e.roa File: 15aba026-abd9-329f-bf1e-5e973ea35a1e.roa (raw, json) Hash identifier: uWjdZSJ6RVGWzhI1v0BE1iOxQjD1h9zcpjI5Rowuv+g= Subject key identifier: 9E:BD:D2:14:31:86:0A:86:70:E7:E6:FE:D4:5C:57:18:07:86:33:50 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523B268ECEDDE939DF9400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/15aba026-abd9-329f-bf1e-5e973ea35a1e.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 36629 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3b:26:8e:ce:dd:e9:39:df:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=718d9a82-6bd5-4ebc-b7a2-19cc029ba640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2f:25:1f:23:35:45:2e:08:22:b1:33:ce:b2: 6f:be:64:65:9c:70:53:98:39:26:f7:9e:ed:70:0b: 6f:1d:a8:87:59:30:a1:bf:8d:ba:c3:5e:a2:34:e3: 57:76:a0:07:3c:0c:fc:a6:c7:5a:e3:a7:54:aa:9d: e6:83:4b:49:f0:db:aa:16:53:1c:ca:61:49:8c:ad: 57:65:a1:54:f8:1e:60:b2:4a:c9:77:e6:b6:9b:49: 69:60:34:97:d7:47:d1:a2:2e:b8:a2:7b:b1:ce:df: f5:35:5a:af:e3:ca:4c:f4:93:af:d0:f1:82:f4:1e: 21:f4:58:de:6b:cf:26:bd:ce:80:3b:fc:89:03:c6: 1b:5b:c0:1f:95:96:03:13:61:42:e9:28:31:b2:47: 21:f9:a1:43:e0:ff:7c:4e:64:5d:d7:ea:d8:fa:32: 5c:92:53:d6:98:3a:78:5f:e6:14:e9:d9:55:95:77: 0a:3b:7d:ca:79:34:b8:98:ea:0e:ae:a5:37:c1:3f: 0e:d9:5d:13:a5:5f:cc:a7:20:81:75:de:59:56:04: 77:ed:54:14:2e:07:53:6f:c4:e5:ec:ef:8c:7a:cf: 4a:88:f6:e1:8d:48:93:d9:e4:7b:82:07:ad:ed:79: 0f:5c:c6:a6:70:84:2c:59:17:66:3f:ac:f6:64:f8: 5f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BD:D2:14:31:86:0A:86:70:E7:E6:FE:D4:5C:57:18:07:86:33:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/15aba026-abd9-329f-bf1e-5e973ea35a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a5:3b:c5:9b:41:e1:99:2b:2e:43:23:d5:04:f6:db:2a:5f: d7:9f:54:ea:df:15:2d:de:1c:13:45:3c:ed:c6:2a:be:ae:56: 08:e0:c8:e0:3d:4f:98:eb:4b:3a:67:f4:e4:d7:bc:a0:ba:68: af:c6:be:3d:1b:8a:51:c6:3c:c6:94:44:5e:7b:c3:ce:8e:65: 2b:0c:bb:5d:bf:43:02:cb:6f:f8:20:e7:30:e9:14:5b:a4:a4: fc:ab:59:e9:d0:85:27:51:1d:35:dd:a0:38:64:c1:b8:d5:9d: 5e:fa:6f:13:3a:56:d9:f7:95:36:4a:e7:c7:3d:94:9a:02:e8: f0:44:22:bf:4a:c5:ea:d1:3d:be:70:f2:6d:ac:78:7b:e3:cd: eb:e9:13:29:22:ab:5d:aa:ac:22:7d:a9:4e:b1:d5:22:1b:16: 10:bf:68:c9:7e:4b:65:d0:12:0d:03:c0:5f:bd:74:dd:ae:c8: fc:08:ef:9b:0c:09:ed:ef:2d:f4:24:6d:b8:ca:b9:8b:c3:7b: 6f:9f:c6:fc:45:3c:f4:1c:b5:70:a6:a7:08:b0:ce:b6:05:b1: 86:5b:eb:ac:ef:74:b7:1d:74:f0:39:4c:ae:72:a3:73:97:f9: f2:48:c0:04:a8:a2:9a:d7:52:70:44:51:24:87:7d:11:8b:32: 42:70:14:42 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/Ujsmjs7d6TnflAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NzE4ZDlhODItNmJkNS00ZWJjLWI3YTItMTljYzAyOWJhNjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS8lHyM1RS4IIrEzzrJvvmRlnHBTmDkm957t cAtvHaiHWTChv426w16iNONXdqAHPAz8psda46dUqp3mg0tJ8NuqFlMcymFJjK1X ZaFU+B5gskrJd+a2m0lpYDSX10fRoi64onuxzt/1NVqv48pM9JOv0PGC9B4h9Fje a88mvc6AO/yJA8YbW8AflZYDE2FC6Sgxskch+aFD4P98TmRd1+rY+jJcklPWmDp4 X+YU6dlVlXcKO33KeTS4mOoOrqU3wT8O2V0TpV/MpyCBdd5ZVgR37VQULgdTb8Tl 7O+Mes9KiPbhjUiT2eR7gget7XkPXMamcIQsWRdmP6z2ZPhfPwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ690hQxhgqGcOfm/tRcVxgHhjNQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTVhYmEwMjYtYWJkOS0z MjlmLWJmMWUtNWU5NzNlYTM1YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCDpTvFm0HhmSsuQyPVBPbbKl/Xn1Tq3xUt3hwTRTztxiq+rlYI4Mjg PU+Y60s6Z/Tk17ygumivxr49G4pRxjzGlERee8POjmUrDLtdv0MCy2/4IOcw6RRb pKT8q1np0IUnUR013aA4ZMG41Z1e+m8TOlbZ95U2SufHPZSaAujwRCK/SsXq0T2+ cPJtrHh7483r6RMpIqtdqqwifalOsdUiGxYQv2jJfktl0BINA8BfvXTdrsj8CO+b DAnt7y30JG24yrmLw3tvn8b8RTz0HLVwpqcIsM62BbGGW+us73S3HXTwOUyucqNz l/nySMAEqKKa11JwRFEkh30RizJCcBRC -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:49 2025 by rpki-client