$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3635bacf-d73e-3f47-8a82-a8a92a109fac.roa File: 3635bacf-d73e-3f47-8a82-a8a92a109fac.roa (raw, json) Hash identifier: Zs3aKfur8C0kM9ULL286MOWyTPR68b2vdnHAFDInWQg= Subject key identifier: D3:D4:B8:73:E7:98:59:C9:BD:84:96:F4:C7:1B:58:3C:5B:18:1F:4B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F5237C66BD0DDAB97E9F740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3635bacf-d73e-3f47-8a82-a8a92a109fac.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396613 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:37:c6:6b:d0:dd:ab:97:e9:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=d362c385-06fe-453b-8511-f4c74f690079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:b2:1d:45:ef:24:16:24:64:2c:3b:15:e5: 28:54:85:7e:0e:2f:d5:f0:88:f2:3f:1a:01:d6:cc: a4:9f:f4:0c:8a:0e:7b:60:01:5c:90:44:f1:c2:5a: 28:7f:b6:c4:82:02:a5:ef:87:85:2b:82:94:be:4c: ae:e1:b1:48:6d:36:7a:75:3c:4b:ae:a3:f0:f0:52: ad:ca:3f:34:2c:20:38:d0:17:59:23:55:a0:76:73: 75:f6:c0:52:bc:10:1c:e6:54:2a:8d:e6:b7:15:23: ec:5f:c8:cc:25:88:7f:0b:32:6c:19:5c:7d:cd:0e: 5d:45:bf:cf:e9:4f:48:ec:2a:27:ff:65:7e:3a:4b: 4e:e3:bf:e3:22:31:6d:50:92:6a:b8:13:e8:83:47: b1:2c:82:3d:7f:b6:a1:8b:ba:06:5a:77:c4:a4:d0: f9:de:7d:9f:67:16:47:2e:08:5f:45:24:7f:67:34: f4:e2:08:73:d3:19:39:67:23:36:c4:61:9c:03:6f: 71:8d:00:b9:b2:8a:bb:7d:0a:02:20:e3:e0:d4:aa: df:4e:96:8a:15:ae:95:9f:ea:19:70:06:f0:d5:94: ca:51:bb:74:12:26:f3:e6:0e:7d:c3:c1:03:c0:4d: 42:a2:f8:de:2d:60:69:0f:57:da:14:f5:51:25:31: 36:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D4:B8:73:E7:98:59:C9:BD:84:96:F4:C7:1B:58:3C:5B:18:1F:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3635bacf-d73e-3f47-8a82-a8a92a109fac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:c2:35:a8:4e:a2:06:ec:f4:9d:9d:fb:31:e2:49:46:85:a3: 93:f9:6b:6f:af:41:73:e1:56:ca:40:7b:75:87:3c:89:b5:f9: 25:01:e9:7d:29:ea:93:74:aa:df:7f:22:71:74:51:b4:66:77: c5:a8:38:05:f4:52:e1:c1:12:da:67:3b:34:2d:25:33:fb:fe: 3a:2d:1e:59:8f:46:2a:6f:14:73:82:77:20:e3:63:fa:13:09: e3:1c:95:c4:e7:0d:c4:d9:c6:ff:d5:05:00:67:02:67:10:d4: 70:5a:a0:04:34:f8:37:97:db:36:32:1f:da:32:dc:06:27:53: 53:7f:70:4d:38:e8:b1:7f:41:1e:3b:83:1b:4e:8e:b6:bb:49: d8:71:76:d9:3a:0a:16:9d:12:fb:82:f9:ac:9a:58:f1:d2:89: 9d:20:26:cc:87:86:07:75:84:77:b5:10:f8:3f:43:87:8a:dd: ca:ab:d3:86:ad:0d:ad:b9:b3:1d:1d:2b:4d:d2:22:dc:63:7d: f3:5b:a9:21:4c:14:12:38:5a:e7:b2:4b:9c:d9:d6:47:03:2e: 74:39:ad:14:a5:a5:64:8c:ff:09:b9:0b:26:2a:b9:43:38:c4: ec:dd:78:d9:28:84:41:59:ec:29:b5:b7:00:d7:b2:9a:65:44: e4:22:7f:b9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjfGa9Ddq5fp90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZDM2MmMzODUtMDZmZS00NTNiLTg1MTEtZjRjNzRmNjkwMDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPayHUXvJBYkZCw7FeUoVIV+Di/V8IjyPxoB 1sykn/QMig57YAFckETxwloof7bEggKl74eFK4KUvkyu4bFIbTZ6dTxLrqPw8FKt yj80LCA40BdZI1WgdnN19sBSvBAc5lQqjea3FSPsX8jMJYh/CzJsGVx9zQ5dRb/P 6U9I7Con/2V+OktO47/jIjFtUJJquBPog0exLII9f7ahi7oGWnfEpND53n2fZxZH LghfRSR/ZzT04ghz0xk5ZyM2xGGcA29xjQC5soq7fQoCIOPg1KrfTpaKFa6Vn+oZ cAbw1ZTKUbt0Eibz5g59w8EDwE1CovjeLWBpD1faFPVRJTE2QQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNPUuHPnmFnJvYSW9McbWDxbGB9LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzYzNWJhY2YtZDczZS0z ZjQ3LThhODItYThhOTJhMTA5ZmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBTwjWoTqIG7PSdnfsx4klGhaOT+Wtvr0Fz4VbKQHt1hzyJtfklAel9 KeqTdKrffyJxdFG0ZnfFqDgF9FLhwRLaZzs0LSUz+/46LR5Zj0YqbxRzgncg42P6 EwnjHJXE5w3E2cb/1QUAZwJnENRwWqAENPg3l9s2Mh/aMtwGJ1NTf3BNOOixf0Ee O4MbTo62u0nYcXbZOgoWnRL7gvmsmljx0omdICbMh4YHdYR3tRD4P0OHit3Kq9OG rQ2tubMdHStN0iLcY33zW6khTBQSOFrnskuc2dZHAy50Oa0UpaVkjP8JuQsmKrlD OMTs3XjZKIRBWewptbcA17KaZUTkIn+5 -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:42 2025 by rpki-client