$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a330572-11ec-38af-8cb4-336bebb4e3df.roa File: 1a330572-11ec-38af-8cb4-336bebb4e3df.roa (raw, json) Hash identifier: InZ5YIxRC2IgfNju/k1WBNWnJNhWo0Vzk+cWQ4mYiIw= Subject key identifier: F4:6F:0D:FB:C5:1A:0E:34:E2:24:B2:97:B1:74:30:02:98:9E:30:52 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F52388BC5E1B27580D69D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a330572-11ec-38af-8cb4-336bebb4e3df.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 36625 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:38:8b:c5:e1:b2:75:80:d6:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=684049bb-b9ed-4efa-9c9a-700b9a732044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e7:2f:f8:73:d7:a4:ee:51:9a:6e:8c:63:03: 50:ab:19:ee:f0:9e:97:e8:cb:26:c5:4d:e3:bb:e0: a2:dc:5f:15:5d:d0:01:83:04:00:85:5a:71:22:91: 75:8d:8b:6c:f0:77:a7:cb:7d:bd:b2:17:bc:01:7b: 42:73:70:7a:33:32:df:aa:cb:54:0b:23:d5:31:8b: 8b:1b:84:b2:15:3c:40:52:7f:fd:81:b5:bc:08:17: 62:01:74:82:c5:57:c8:9b:73:d9:6e:0a:d5:3e:97: 19:b6:52:d8:4c:ba:68:79:56:99:df:f5:3e:a7:14: 13:43:5d:0d:a0:c6:6f:28:26:c2:e2:c2:d4:42:05: 41:32:1b:ba:b2:bf:d2:fe:6f:45:1b:4d:4b:2a:31: f5:59:0e:52:37:1f:e1:70:04:8a:b2:c4:61:4b:7a: b2:b9:39:8f:e0:ee:21:44:c4:cf:74:76:c0:89:6e: a7:95:16:b2:3a:28:df:fb:f0:ff:50:e5:94:7e:bd: 77:6b:33:b9:a5:92:06:0a:b1:60:a6:ba:f4:97:87: 94:e3:6b:a3:6c:3d:bc:c8:9f:bf:16:c1:27:13:b1: 23:87:fe:40:8f:6d:2f:f7:be:15:24:09:d3:a6:1c: ae:1b:f8:a1:c2:81:66:ef:cf:e2:eb:90:a1:2f:cc: bf:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6F:0D:FB:C5:1A:0E:34:E2:24:B2:97:B1:74:30:02:98:9E:30:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a330572-11ec-38af-8cb4-336bebb4e3df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:4f:2c:e7:1d:24:a7:95:3e:01:9b:e0:12:82:12:55:15:15: cc:25:95:a6:78:6e:8f:ed:f0:52:68:79:3d:39:d7:4f:c6:59: 3b:a3:9d:d4:15:21:b7:c0:6a:9e:e7:0c:84:ed:e2:a7:8c:19: 79:00:91:4f:af:04:d4:8b:7a:40:ea:5e:aa:88:f1:ac:c8:38: 98:ab:43:d8:11:63:48:97:ba:68:80:e3:8f:c1:92:57:9e:a1: 3e:42:4c:55:21:94:6e:b3:00:16:c2:b4:97:e7:b0:c0:db:f7: 40:3c:36:83:a2:96:ca:9a:93:12:a1:59:ab:49:82:fc:04:f7: 03:d3:43:36:c0:f6:4d:07:57:79:de:53:d3:42:84:0f:1d:9a: 7b:40:74:d6:e8:15:39:e0:9f:56:0b:13:76:92:af:53:1e:d2: e6:38:e8:cb:b6:f6:54:9b:3f:9f:d3:17:a8:be:0f:30:ea:e8: 30:d2:f8:1b:04:ea:12:ae:a9:40:40:8a:1f:15:c3:84:da:4f: 6e:76:f6:92:1c:4e:2c:bb:79:56:2b:e8:02:3f:04:b1:41:3f: c7:42:d4:51:b1:e5:11:a0:1b:6a:0e:6e:1d:df:6e:49:0f:ba: 64:11:9b:46:87:57:2a:b5:e4:a7:0a:2a:34:34:a5:9e:03:7d: fe:2f:d7:28 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjiLxeGydYDWnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk Njg0MDQ5YmItYjllZC00ZWZhLTljOWEtNzAwYjlhNzMyMDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+cv+HPXpO5Rmm6MYwNQqxnu8J6X6MsmxU3j u+Ci3F8VXdABgwQAhVpxIpF1jYts8Heny329she8AXtCc3B6MzLfqstUCyPVMYuL G4SyFTxAUn/9gbW8CBdiAXSCxVfIm3PZbgrVPpcZtlLYTLpoeVaZ3/U+pxQTQ10N oMZvKCbC4sLUQgVBMhu6sr/S/m9FG01LKjH1WQ5SNx/hcASKssRhS3qyuTmP4O4h RMTPdHbAiW6nlRayOijf+/D/UOWUfr13azO5pZIGCrFgprr0l4eU42ujbD28yJ+/ FsEnE7Ejh/5Aj20v974VJAnTphyuG/ihwoFm78/i65ChL8y/TwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPRvDfvFGg404iSyl7F0MAKYnjBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWEzMzA1NzItMTFlYy0z OGFmLThjYjQtMzM2YmViYjRlM2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBzTyznHSSnlT4Bm+ASghJVFRXMJZWmeG6P7fBSaHk9OddPxlk7o53U FSG3wGqe5wyE7eKnjBl5AJFPrwTUi3pA6l6qiPGsyDiYq0PYEWNIl7pogOOPwZJX nqE+QkxVIZRuswAWwrSX57DA2/dAPDaDopbKmpMSoVmrSYL8BPcD00M2wPZNB1d5 3lPTQoQPHZp7QHTW6BU54J9WCxN2kq9THtLmOOjLtvZUmz+f0xeovg8w6ugw0vgb BOoSrqlAQIofFcOE2k9udvaSHE4su3lWK+gCPwSxQT/HQtRRseURoBtqDm4d325J D7pkEZtGh1cqteSnCio0NKWeA33+L9co -----END CERTIFICATE-----Generated at Mon Oct 20 10:38:39 2025 by rpki-client