$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2777dde9-282f-3b5b-8856-a49f372de817.roa File: 2777dde9-282f-3b5b-8856-a49f372de817.roa (raw, json) Hash identifier: kYMLnhfoLuvxMYMgLmttfqUINZmpECu9nC8q25wmsb0= Subject key identifier: D2:85:8A:BE:8B:6E:F6:96:01:41:23:C8:25:F7:42:A8:47:77:7D:5B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523DBC766DFB6B4C5CAD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2777dde9-282f-3b5b-8856-a49f372de817.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396582 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3d:bc:76:6d:fb:6b:4c:5c:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=8bcb4283-dc7f-4229-ba59-f9856e654d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:67:d9:d6:38:96:e5:29:7a:ce:51:65:43:0d: cf:ed:06:9a:06:b8:9c:ed:30:1d:7d:46:ae:26:a2: e5:a8:57:70:8b:b1:01:f9:6f:88:24:5d:6c:bb:f5: 7e:03:2e:d8:fc:82:b2:6d:38:ec:f4:d1:48:aa:51: f1:ac:99:36:a7:1d:a4:12:65:7a:12:dc:80:68:e0: 90:9f:73:f4:ca:fb:75:2a:71:81:f4:87:ad:fa:70: f2:5e:e6:9e:77:61:52:7a:27:91:a7:1e:c0:53:cf: 08:49:19:0a:9a:0c:0e:38:ff:73:d7:2e:29:e3:2b: 41:c4:24:45:c8:d6:dd:5d:ef:37:d6:71:5a:db:1b: e8:c7:51:25:86:70:8e:83:8d:b8:38:db:83:40:e6: 8e:14:78:62:3c:02:66:af:7d:b2:9e:42:6e:78:bc: c3:8f:d6:12:5c:f5:16:22:c1:c8:b1:37:b0:8e:d1: e5:f5:4c:39:4b:91:4e:06:e1:50:ae:0b:56:92:ad: 67:c0:b9:03:23:9d:20:7f:78:47:1d:88:6c:cc:f9: 6c:86:ae:52:52:0c:48:73:09:54:c8:ea:d1:ee:d4: 6b:34:da:33:2b:f8:a6:6b:37:01:69:9b:fe:c6:87: 7c:70:36:09:2f:cf:9d:65:c7:b9:cd:aa:88:8e:3b: b5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:85:8A:BE:8B:6E:F6:96:01:41:23:C8:25:F7:42:A8:47:77:7D:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2777dde9-282f-3b5b-8856-a49f372de817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:c1:0b:64:5e:0f:d2:70:35:e9:69:f1:15:af:67:0b:8f:86: 1c:fa:43:ff:33:60:dd:81:be:0f:d1:d8:ee:d7:69:5f:4a:50: 0e:77:7a:62:bf:4b:da:43:cc:0f:46:57:1c:2d:b5:e9:95:74: d9:b0:7c:5f:4b:9c:3a:98:73:3b:a5:53:b8:79:b5:68:44:d5: 6a:3c:5d:b9:a8:29:36:ba:0e:ca:8e:59:2b:98:26:64:1d:61: 20:cb:11:f6:ad:1d:76:df:1f:2a:f3:af:a2:89:fc:2d:a8:0b: 6c:21:eb:af:e8:c9:f4:6e:d7:48:57:6c:ef:85:13:dc:c4:f9: f8:08:0e:86:76:d8:3b:e2:15:a9:af:b0:aa:70:03:22:f1:7c: 53:97:20:9a:c6:1b:32:f8:7e:02:b1:ec:04:09:e2:48:83:20: bc:43:1f:78:01:b8:aa:a5:c4:d1:68:2d:17:3c:36:99:ad:2e: 72:e6:70:70:bd:89:7d:1f:13:c1:05:b6:42:c2:79:bf:50:eb: b8:bd:36:4a:5a:df:44:15:47:f6:d1:4e:6f:36:9a:43:07:75: e8:7e:20:c4:4c:9a:af:e4:6e:29:cd:6f:eb:3f:fc:39:2c:37: 48:53:e0:f8:39:0b:47:ad:53:c3:d3:15:64:6b:49:11:49:59: 61:b1:ba:18 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/Uj28dm37a0xcrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk OGJjYjQyODMtZGM3Zi00MjI5LWJhNTktZjk4NTZlNjU0ZDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWfZ1jiW5Sl6zlFlQw3P7QaaBric7TAdfUau JqLlqFdwi7EB+W+IJF1su/V+Ay7Y/IKybTjs9NFIqlHxrJk2px2kEmV6EtyAaOCQ n3P0yvt1KnGB9Iet+nDyXuaed2FSeieRpx7AU88ISRkKmgwOOP9z1y4p4ytBxCRF yNbdXe831nFa2xvox1ElhnCOg424ONuDQOaOFHhiPAJmr32ynkJueLzDj9YSXPUW IsHIsTewjtHl9Uw5S5FOBuFQrgtWkq1nwLkDI50gf3hHHYhszPlshq5SUgxIcwlU yOrR7tRrNNozK/imazcBaZv+xod8cDYJL8+dZce5zaqIjju1xQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNKFir6LbvaWAUEjyCX3QqhHd31bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjc3N2RkZTktMjgyZi0z YjViLTg4NTYtYTQ5ZjM3MmRlODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAywQtkXg/ScDXpafEVr2cLj4Yc+kP/M2Ddgb4P0dju12lfSlAOd3pi v0vaQ8wPRlccLbXplXTZsHxfS5w6mHM7pVO4ebVoRNVqPF25qCk2ug7KjlkrmCZk HWEgyxH2rR123x8q86+iifwtqAtsIeuv6Mn0btdIV2zvhRPcxPn4CA6Gdtg74hWp r7CqcAMi8XxTlyCaxhsy+H4CsewECeJIgyC8Qx94AbiqpcTRaC0XPDaZrS5y5nBw vYl9HxPBBbZCwnm/UOu4vTZKWt9EFUf20U5vNppDB3XofiDETJqv5G4pzW/rP/w5 LDdIU+D4OQtHrVPD0xVka0kRSVlhsboY -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:12 2025 by rpki-client