$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/331659fb-df7f-3bd8-910d-c89c8fb0bf1a.roa File: 331659fb-df7f-3bd8-910d-c89c8fb0bf1a.roa (raw, json) Hash identifier: HMqbMlgp6Oy5EzQwFytcRHHizJ2up8ujbkm6M6kYkaw= Subject key identifier: 8D:16:08:75:CF:05:41:CF:67:E6:3F:C1:86:AB:41:86:D7:B0:83:11 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F5235885C0B8171D5D70C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/331659fb-df7f-3bd8-910d-c89c8fb0bf1a.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397194 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:35:88:5c:0b:81:71:d5:d7:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=583fddaf-9174-4f56-8bae-fdda1760901a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:29:cc:46:7c:83:e9:30:d0:e1:b4:89:d0:5f: e4:06:51:eb:17:93:25:e3:04:82:39:61:4b:c5:f2: 3e:be:26:e5:57:88:1b:cb:86:3f:87:2b:a2:50:68: 57:bb:31:f7:dd:c5:ce:73:71:dd:b6:3c:47:bb:0c: 27:23:8a:40:f2:bc:4b:35:28:92:97:b1:a6:a0:23: 66:5b:76:d1:81:45:1b:c7:fe:33:9a:07:e6:d5:e0: 5b:e6:c0:53:fc:63:c6:18:c1:1e:a2:2f:12:c7:13: d3:85:44:ff:a5:e5:9a:06:cd:f7:46:0a:09:d4:92: 87:68:f7:42:fe:24:1e:9b:4d:e9:e5:9c:55:b1:e2: 3a:23:4c:8e:90:c9:ea:75:e7:dc:bc:6a:5c:6b:61: 4b:af:fc:cd:3f:00:ae:15:13:a9:8a:be:2d:58:a0: 42:80:c8:bc:9f:22:b4:b7:6e:d6:2a:f0:09:82:2e: 9b:6b:a3:7c:1a:52:11:26:6e:97:0e:fb:78:49:78: 7e:df:f8:01:9e:ca:62:bc:75:00:d9:64:25:72:78: 23:58:0e:d3:1f:a0:5b:56:51:91:2b:e0:8d:af:76: 70:53:bc:f5:eb:02:8c:5b:e7:28:02:78:60:6e:79: a1:0f:58:ea:9b:c3:2c:df:19:5e:47:b7:e2:5d:da: 83:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:16:08:75:CF:05:41:CF:67:E6:3F:C1:86:AB:41:86:D7:B0:83:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/331659fb-df7f-3bd8-910d-c89c8fb0bf1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:71:ea:7a:bb:71:14:ab:35:f7:87:64:a1:2f:92:ed:cd:9a: 33:d0:a2:da:d2:76:6e:fc:4d:dc:5f:98:11:05:34:04:fc:23: 98:77:ec:01:6a:03:5c:39:c6:ee:1b:61:ce:9a:c8:6d:59:58: 58:cc:ce:a1:44:3e:1c:72:13:ad:e8:2e:9c:a7:21:3d:c3:fe: 48:ce:41:0c:ff:16:fb:a3:43:33:c2:a5:64:f5:42:84:9d:8d: c9:66:17:54:d8:74:18:3e:2d:95:6b:bf:34:5b:92:c7:49:8b: 17:e2:3a:4b:4a:e7:60:e3:64:9e:7f:6f:aa:97:8a:57:a8:ec: fa:8d:03:4f:64:82:99:19:7b:48:16:42:ed:9d:a7:54:64:33: 13:ea:c5:b6:73:4f:e7:63:bc:27:40:52:b9:7f:79:f4:f6:b0: 7c:cd:77:e5:9c:ac:b3:7e:53:9d:c6:3c:45:bc:64:ec:a5:00: 41:ed:bc:be:5a:d7:39:33:1f:86:39:24:a1:f1:94:e4:e7:0e: b4:ae:70:61:4b:d4:a2:dd:c9:37:9a:95:03:6f:0f:2f:c5:4d: 67:eb:ad:c9:7f:eb:26:bc:2b:7f:4d:df:bf:3a:8e:2a:07:b5: 1d:bb:6f:4a:18:7c:a5:d1:4b:2b:a7:5f:d6:83:4d:de:d0:bb: ef:bf:e0:05 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjWIXAuBcdXXDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NTgzZmRkYWYtOTE3NC00ZjU2LThiYWUtZmRkYTE3NjA5MDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkynMRnyD6TDQ4bSJ0F/kBlHrF5Ml4wSCOWFL xfI+viblV4gby4Y/hyuiUGhXuzH33cXOc3HdtjxHuwwnI4pA8rxLNSiSl7GmoCNm W3bRgUUbx/4zmgfm1eBb5sBT/GPGGMEeoi8SxxPThUT/peWaBs33RgoJ1JKHaPdC /iQem03p5ZxVseI6I0yOkMnqdefcvGpca2FLr/zNPwCuFROpir4tWKBCgMi8nyK0 t27WKvAJgi6ba6N8GlIRJm6XDvt4SXh+3/gBnspivHUA2WQlcngjWA7TH6BbVlGR K+CNr3ZwU7z16wKMW+coAnhgbnmhD1jqm8Ms3xleR7fiXdqDOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI0WCHXPBUHPZ+Y/wYarQYbXsIMRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzMxNjU5ZmItZGY3Zi0z YmQ4LTkxMGQtYzg5YzhmYjBiZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+cep6u3EUqzX3h2ShL5LtzZoz0KLa0nZu/E3cX5gRBTQE/COYd+wB agNcOcbuG2HOmshtWVhYzM6hRD4cchOt6C6cpyE9w/5IzkEM/xb7o0MzwqVk9UKE nY3JZhdU2HQYPi2Va780W5LHSYsX4jpLSudg42Sef2+ql4pXqOz6jQNPZIKZGXtI FkLtnadUZDMT6sW2c0/nY7wnQFK5f3n09rB8zXflnKyzflOdxjxFvGTspQBB7by+ Wtc5Mx+GOSSh8ZTk5w60rnBhS9Si3ck3mpUDbw8vxU1n663Jf+smvCt/Td+/Oo4q B7Udu29KGHyl0Usrp1/Wg03e0Lvvv+AF -----END CERTIFICATE-----Generated at Mon Oct 20 08:08:00 2025 by rpki-client