$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21c8994c-b7a9-3921-a776-411828754690.roa File: 21c8994c-b7a9-3921-a776-411828754690.roa (raw, json) Hash identifier: k91l/QEOHUjgmR+kIGhNHBSqs3aeB522yR/NKPBCnVY= Subject key identifier: 4B:7C:D7:78:51:1E:D1:6F:3F:31:DE:B7:F7:AF:49:27:DA:4C:1D:AB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523A599ECF07E17C1E1460 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21c8994c-b7a9-3921-a776-411828754690.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396614 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3a:59:9e:cf:07:e1:7c:1e:14:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=f4a67c73-60d2-4891-933e-b1aa9bda928f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:31:86:0e:c5:79:fb:77:99:76:c0:8d:1d:73: 34:15:94:4d:63:08:18:7a:30:b8:1f:fb:79:18:6c: a0:a3:5b:52:1e:66:70:3f:82:54:2d:c9:61:bc:71: 77:4b:2b:90:75:1c:69:87:9a:12:80:79:09:84:68: 7d:4d:aa:7e:f5:e1:de:08:42:49:c8:48:04:b4:05: 27:04:d9:17:13:c4:92:92:ba:8e:e4:0c:d5:e6:61: af:77:70:eb:e0:5d:41:c5:2e:1f:19:89:07:ff:f5: 3e:8b:9b:cd:50:91:51:24:1a:85:f1:74:5c:48:d5: c9:e7:f1:56:85:da:e6:ac:52:19:58:c7:c8:90:55: 26:06:73:b8:7a:3f:31:23:44:c1:fe:36:45:c8:c3: da:8e:3d:c5:ba:82:f8:f4:10:f2:38:d7:0e:22:a8: 07:56:52:72:9d:0a:e5:ac:bf:1e:b5:e5:60:dd:0b: 81:5b:27:61:c0:cd:a1:27:d0:bc:9f:92:f7:e2:da: 88:b7:ff:4b:a7:44:f2:9b:13:90:0d:bb:c2:53:c4: aa:42:41:43:16:38:cd:b1:c5:90:d4:ec:f9:94:7d: e3:25:6c:11:c3:f4:84:d5:96:f2:54:81:92:8a:5b: 4a:a9:7e:a1:28:bd:39:c3:10:ab:d7:65:d0:0c:5d: 43:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7C:D7:78:51:1E:D1:6F:3F:31:DE:B7:F7:AF:49:27:DA:4C:1D:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21c8994c-b7a9-3921-a776-411828754690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:00:b3:ce:9a:d6:97:28:5f:39:e9:ff:06:40:d3:18:cd:da: 97:05:cf:cb:9e:c5:5a:66:f6:22:7c:d7:64:96:6c:5a:8d:53: 35:39:9e:d8:c3:30:4b:e3:1d:54:f4:8b:c6:17:2c:09:c3:d0: c8:05:d6:07:71:b7:4d:e6:f1:fd:2d:a0:94:e9:c2:06:41:43: 6a:61:87:30:73:0f:2d:2f:2f:35:dd:9e:d5:b5:20:48:45:54: e3:65:a7:1a:d1:23:2a:fc:cd:87:b7:57:40:2c:c9:ff:1b:84: ed:09:d3:77:df:28:93:cb:72:b0:94:cf:08:d2:22:08:a9:44: 7d:b1:48:fd:ee:b5:ea:27:45:88:24:a4:b1:57:4b:7b:d4:3d: 2c:2e:65:8b:db:20:fb:9f:41:08:05:41:e1:af:7d:b4:fd:f8: b2:f2:40:81:fd:8b:54:a1:c0:0d:25:84:68:ec:d1:28:2c:b6: a5:3e:e5:ca:ac:96:ce:8d:1c:00:ac:23:8d:e8:75:4b:38:6c: fa:2c:20:be:b5:60:a4:62:51:d4:bc:60:14:3f:30:7d:12:98: 5a:10:99:82:d0:c0:cf:50:db:6b:d5:f2:18:06:21:ca:bd:7c: a0:78:a7:a8:4f:88:23:a7:62:7f:c5:84:39:2c:58:fb:5b:e7: bc:69:61:1f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjpZns8H4XweFGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZjRhNjdjNzMtNjBkMi00ODkxLTkzM2UtYjFhYTliZGE5MjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDGGDsV5+3eZdsCNHXM0FZRNYwgYejC4H/t5 GGygo1tSHmZwP4JULclhvHF3SyuQdRxph5oSgHkJhGh9Tap+9eHeCEJJyEgEtAUn BNkXE8SSkrqO5AzV5mGvd3Dr4F1BxS4fGYkH//U+i5vNUJFRJBqF8XRcSNXJ5/FW hdrmrFIZWMfIkFUmBnO4ej8xI0TB/jZFyMPajj3FuoL49BDyONcOIqgHVlJynQrl rL8eteVg3QuBWydhwM2hJ9C8n5L34tqIt/9Lp0TymxOQDbvCU8SqQkFDFjjNscWQ 1Oz5lH3jJWwRw/SE1ZbyVIGSiltKqX6hKL05wxCr12XQDF1DmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEt813hRHtFvPzHet/evSSfaTB2rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjFjODk5NGMtYjdhOS0z OTIxLWE3NzYtNDExODI4NzU0NjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAnALPOmtaXKF856f8GQNMYzdqXBc/LnsVaZvYifNdklmxajVM1OZ7Y wzBL4x1U9IvGFywJw9DIBdYHcbdN5vH9LaCU6cIGQUNqYYcwcw8tLy813Z7VtSBI RVTjZaca0SMq/M2Ht1dALMn/G4TtCdN33yiTy3KwlM8I0iIIqUR9sUj97rXqJ0WI JKSxV0t71D0sLmWL2yD7n0EIBUHhr320/fiy8kCB/YtUocANJYRo7NEoLLalPuXK rJbOjRwArCON6HVLOGz6LCC+tWCkYlHUvGAUPzB9EphaEJmC0MDPUNtr1fIYBiHK vXygeKeoT4gjp2J/xYQ5LFj7W+e8aWEf -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:13 2025 by rpki-client