$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b59a356-3a3b-35d1-ab4e-417f84fd1f8d.roa File: 1b59a356-3a3b-35d1-ab4e-417f84fd1f8d.roa (raw, json) Hash identifier: NV5yjgACuzRRbd1I/SRJIG7MMGKikSg5VOdHvG9+KpM= Subject key identifier: CC:22:50:8B:0C:21:34:E4:4A:BA:61:5C:51:D0:76:A6:C0:7F:79:CD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523CD4F9307E495DFFF400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b59a356-3a3b-35d1-ab4e-417f84fd1f8d.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397209 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3c:d4:f9:30:7e:49:5d:ff:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=096d56a7-b79d-4718-9405-5b5d4bad9bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e6:5b:7a:c4:04:5b:48:0f:84:8d:af:b8:5b: c6:d6:98:75:45:90:2a:22:f6:e8:41:75:c9:61:75: 47:dc:b7:e7:8f:f3:a1:a7:f6:49:a9:3d:04:6e:2e: 54:d7:9d:cd:ff:15:7e:1b:5e:f8:f4:e7:1d:dc:c2: 56:9b:bf:7d:36:8b:09:f9:83:d5:a0:68:6e:71:ce: c1:1f:ee:03:4d:20:70:54:9c:67:b0:52:8d:ec:93: 7f:58:fd:b3:bc:a6:81:3f:2b:83:81:34:bb:77:0a: 42:cd:8f:33:45:b9:1c:45:5d:36:df:ff:6f:c0:65: d7:4c:75:98:47:ba:5c:70:d7:52:ed:8b:5f:ef:8a: a0:5a:1b:42:c2:17:a1:ad:9e:fa:34:61:36:1c:65: aa:b6:53:9a:d5:42:c1:2a:75:72:8f:64:40:d1:ea: f2:9d:ea:5d:1c:9a:19:cc:22:5b:c1:b8:d1:95:fd: 90:6b:cd:f2:4d:a3:72:a3:5c:1b:e9:52:f3:07:92: f6:d9:85:00:0f:66:5f:ec:e4:e0:aa:b6:de:a0:15: 95:9b:d7:6a:d6:59:e4:f3:5a:7c:7d:52:5d:b8:0a: c6:93:30:4d:82:80:8d:d1:17:0f:e8:d4:81:f9:47: cd:c2:69:7e:f0:c4:d0:cc:0f:e7:c0:a2:27:2f:80: 3b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:22:50:8B:0C:21:34:E4:4A:BA:61:5C:51:D0:76:A6:C0:7F:79:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b59a356-3a3b-35d1-ab4e-417f84fd1f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:f2:ea:8a:85:bc:c1:c7:3d:4d:27:31:6d:9a:18:5e:03:06: 57:41:88:96:d7:64:6f:20:f8:d0:2c:15:87:02:a6:1a:fb:56: b0:92:b0:a4:dc:60:12:20:3b:5f:34:f4:be:cd:9b:ea:34:a3: 67:3d:21:96:85:ec:91:de:23:aa:8b:11:3d:62:32:0e:e9:09: b0:2b:67:fe:12:29:57:b2:f4:68:b3:74:23:99:a3:30:e9:39: 63:b9:f9:10:ba:09:db:05:d6:7e:07:6f:de:bb:92:a2:5a:3a: 72:8c:c2:80:02:a1:53:5c:3f:a3:e7:d0:b3:f1:da:54:77:09: af:16:54:cc:6d:37:be:aa:b5:22:b6:f5:44:2b:c3:32:c3:13: a0:52:33:66:3b:85:89:52:52:7f:1f:7f:91:49:f9:14:ef:de: 86:4c:50:48:a0:24:8a:ed:a7:da:02:7a:17:b8:ce:a2:67:c1: 94:ec:23:18:f2:03:e9:07:0f:ac:be:f7:a4:97:96:14:94:1d: 76:79:fb:0d:53:c4:d1:d3:8a:0f:77:e9:c4:25:36:01:ec:69: fe:a1:ce:75:89:37:39:bc:b7:bc:b7:b5:bc:c9:e8:1f:35:cd: ce:da:84:bc:07:db:c2:3d:d9:9d:80:92:4d:f7:11:63:4a:b0: 94:f8:da:97 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjzU+TB+SV3/9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MDk2ZDU2YTctYjc5ZC00NzE4LTk0MDUtNWI1ZDRiYWQ5YmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeZbesQEW0gPhI2vuFvG1ph1RZAqIvboQXXJ YXVH3Lfnj/Ohp/ZJqT0Ebi5U153N/xV+G1749Ocd3MJWm799NosJ+YPVoGhucc7B H+4DTSBwVJxnsFKN7JN/WP2zvKaBPyuDgTS7dwpCzY8zRbkcRV023/9vwGXXTHWY R7pccNdS7Ytf74qgWhtCwhehrZ76NGE2HGWqtlOa1ULBKnVyj2RA0erynepdHJoZ zCJbwbjRlf2Qa83yTaNyo1wb6VLzB5L22YUAD2Zf7OTgqrbeoBWVm9dq1lnk81p8 fVJduArGkzBNgoCN0RcP6NSB+UfNwml+8MTQzA/nwKInL4A77wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMwiUIsMITTkSrphXFHQdqbAf3nNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWI1OWEzNTYtM2EzYi0z NWQxLWFiNGUtNDE3Zjg0ZmQxZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBU8uqKhbzBxz1NJzFtmhheAwZXQYiW12RvIPjQLBWHAqYa+1awkrCk 3GASIDtfNPS+zZvqNKNnPSGWheyR3iOqixE9YjIO6QmwK2f+EilXsvRos3QjmaMw 6TljufkQugnbBdZ+B2/eu5KiWjpyjMKAAqFTXD+j59Cz8dpUdwmvFlTMbTe+qrUi tvVEK8MywxOgUjNmO4WJUlJ/H3+RSfkU796GTFBIoCSK7afaAnoXuM6iZ8GU7CMY 8gPpBw+svvekl5YUlB12efsNU8TR04oPd+nEJTYB7Gn+oc51iTc5vLe8t7W8yegf Nc3O2oS8B9vCPdmdgJJN9xFjSrCU+NqX -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:26 2025 by rpki-client