$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1aa06692-b809-3553-b7e5-2c7c80be727f.roa File: 1aa06692-b809-3553-b7e5-2c7c80be727f.roa (raw, json) Hash identifier: jXbVFnKffeaMhZFMBlD/NkjV8bp9cls8Si5uPBYmTAY= Subject key identifier: E0:8A:14:6A:38:58:82:1E:67:D6:C8:3F:0E:6D:B4:AA:5B:72:ED:61 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F52366AF9044FD8C3FF5880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1aa06692-b809-3553-b7e5-2c7c80be727f.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396555 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:36:6a:f9:04:4f:d8:c3:ff:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=dfa1825d-ede3-4f4f-bee4-da98dc2ef206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:73:63:24:55:37:ca:84:d6:7d:7d:b4:7d:27: 90:64:c7:5c:87:d3:20:d1:f9:e5:78:8c:1c:44:b3: c1:35:7d:25:5e:92:ed:ed:7c:46:f5:2c:16:75:3d: fe:d8:c8:71:25:8f:0b:41:71:05:bf:44:18:22:cb: 3f:bb:a8:dd:a0:c3:4c:88:e9:6f:05:30:e1:d4:6f: ba:ae:f9:a4:37:3c:d9:aa:80:e1:e2:59:85:2a:d8: 9b:31:02:78:12:99:21:4d:b2:3f:bf:99:40:c7:47: c1:53:52:fd:03:8a:c3:e4:a7:d8:28:91:43:22:6e: 1b:23:1d:0e:77:b6:06:0b:31:1d:fa:83:ca:ed:b1: 06:36:43:f7:cf:0b:f5:0f:d6:41:cb:30:c5:58:ac: a0:7a:f0:af:51:32:1c:10:ca:08:3e:15:5d:39:92: 97:e7:fe:92:11:30:df:2f:f3:f8:bc:ef:c4:99:bb: f7:cb:f9:e0:46:31:c4:ad:a4:b4:02:22:22:e2:34: 78:6b:3f:41:01:67:95:79:e1:bf:1a:4a:85:5c:4f: 4a:2b:e5:14:c7:d6:8a:ee:fd:61:4f:d0:ed:a7:f8: 4b:77:18:8f:c4:63:ee:9b:f3:b8:b8:c5:d0:42:9c: 4f:00:57:42:92:b7:83:f7:77:7c:61:9f:c6:d6:03: 3a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8A:14:6A:38:58:82:1E:67:D6:C8:3F:0E:6D:B4:AA:5B:72:ED:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1aa06692-b809-3553-b7e5-2c7c80be727f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b8:7c:65:07:0c:40:59:46:3f:c7:a9:ab:97:1c:1a:cc:61: 6d:d1:e6:ef:14:02:bf:56:0b:92:2a:d4:bc:eb:5f:71:fc:44: 75:da:b2:85:f6:5a:55:ad:a9:0b:41:98:12:03:e6:f0:3c:22: 48:ce:b8:66:c4:7c:82:04:bd:87:c4:b6:9d:22:1b:77:db:64: b7:17:c5:0c:b0:5e:30:c6:07:6c:9d:4c:e4:c2:34:b9:5f:f8: d1:b5:13:16:18:a0:da:60:97:8f:aa:92:7f:bf:13:bd:e4:29: 19:e4:c5:19:de:34:32:cd:ee:7f:e5:2b:a0:b5:e9:13:30:18: 5b:b3:7d:73:f6:f4:39:fe:6b:af:e7:7b:34:da:cd:7f:fa:bb: 37:3f:55:44:2f:af:30:64:1b:06:be:3b:7f:25:e0:8f:b8:f0: 21:8e:40:68:78:f6:c0:66:db:7d:a9:ea:0c:82:88:43:f8:bb: b3:17:b2:82:79:06:99:9c:68:d1:d5:97:fa:10:29:7d:e4:4e: d4:a1:e0:41:d2:55:b6:c8:cc:d6:28:3a:ac:4a:1a:29:37:0b: 78:da:dd:1c:59:3f:4e:8f:16:55:ab:cf:f7:a4:57:f1:5d:d0: bf:b7:02:70:cb:e8:2f:6b:d9:53:c0:2d:bd:ae:3a:a8:64:48: 9e:7d:3d:29 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjZq+QRP2MP/WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZGZhMTgyNWQtZWRlMy00ZjRmLWJlZTQtZGE5OGRjMmVmMjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznNjJFU3yoTWfX20fSeQZMdch9Mg0fnleIwc RLPBNX0lXpLt7XxG9SwWdT3+2MhxJY8LQXEFv0QYIss/u6jdoMNMiOlvBTDh1G+6 rvmkNzzZqoDh4lmFKtibMQJ4EpkhTbI/v5lAx0fBU1L9A4rD5KfYKJFDIm4bIx0O d7YGCzEd+oPK7bEGNkP3zwv1D9ZByzDFWKygevCvUTIcEMoIPhVdOZKX5/6SETDf L/P4vO/Embv3y/ngRjHEraS0AiIi4jR4az9BAWeVeeG/GkqFXE9KK+UUx9aK7v1h T9Dtp/hLdxiPxGPum/O4uMXQQpxPAFdCkreD93d8YZ/G1gM6wQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOCKFGo4WIIeZ9bIPw5ttKpbcu1hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWFhMDY2OTItYjgwOS0z NTUzLWI3ZTUtMmM3YzgwYmU3MjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZuHxlBwxAWUY/x6mrlxwazGFt0ebvFAK/VguSKtS8619x/ER12rKF 9lpVrakLQZgSA+bwPCJIzrhmxHyCBL2HxLadIht322S3F8UMsF4wxgdsnUzkwjS5 X/jRtRMWGKDaYJePqpJ/vxO95CkZ5MUZ3jQyze5/5SugtekTMBhbs31z9vQ5/muv 53s02s1/+rs3P1VEL68wZBsGvjt/JeCPuPAhjkBoePbAZtt9qeoMgohD+LuzF7KC eQaZnGjR1Zf6ECl95E7UoeBB0lW2yMzWKDqsShopNwt42t0cWT9OjxZVq8/3pFfx XdC/twJwy+gva9lTwC29rjqoZEiefT0p -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:38 2025 by rpki-client