$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/364987c1-50f3-3a07-b441-05a88a10725a.roa File: 364987c1-50f3-3a07-b441-05a88a10725a.roa (raw, json) Hash identifier: ufJNbukHbltIrlx80zlwLFjOkOfrogeMafC17wnTUcs= Subject key identifier: 0D:58:4C:9E:BC:B9:E4:21:3F:50:AD:F1:C9:D8:C3:78:A1:1B:0E:06 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F5238291BAFAAFA5AF733C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/364987c1-50f3-3a07-b441-05a88a10725a.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396560 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:38:29:1b:af:aa:fa:5a:f7:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=ceef889b-3aae-47dd-968f-dfee84064ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e7:c9:c5:ef:0f:50:96:bd:33:ac:11:58:b7: 31:4a:f6:5a:69:9e:aa:73:fb:58:bf:6d:e5:87:6d: 9e:24:87:2e:74:17:99:ea:da:93:95:56:c2:d9:f3: fa:30:c1:60:25:17:08:21:25:b1:43:ea:50:5f:00: 11:4a:c1:67:54:7b:2c:b6:49:e8:5c:5d:ac:4a:3a: 9d:b1:4f:34:8e:a5:19:f1:a9:e5:15:83:3c:b7:f8: 79:d5:ca:40:93:e5:87:41:56:c9:d6:c9:c7:44:2c: 5d:3b:a9:14:53:73:3b:b0:4e:2a:bb:19:4c:bd:de: 79:3d:ce:13:59:c1:ce:9d:73:54:72:c1:df:a1:c3: 15:ab:ee:6c:bd:98:44:46:b1:31:d1:d2:75:b9:d0: ba:59:b3:93:d5:40:e5:c1:cb:b6:67:e3:8c:85:42: 9d:89:91:78:78:49:c6:1d:9c:77:4b:f4:40:ea:73: 2a:29:a7:72:97:a5:88:5f:9a:32:0d:cd:6e:4f:f1: 29:ba:44:91:d0:47:20:fd:7f:66:93:3f:ef:a6:e9: 9f:5a:15:d1:cb:4e:1a:38:3d:d2:a4:3a:ee:30:39: e8:4e:1d:83:8d:32:04:dd:44:89:80:75:17:42:40: 68:3b:81:a0:a5:02:08:0d:68:12:95:94:48:7e:b9: ce:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:58:4C:9E:BC:B9:E4:21:3F:50:AD:F1:C9:D8:C3:78:A1:1B:0E:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/364987c1-50f3-3a07-b441-05a88a10725a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:cf:07:59:03:0e:c0:e3:40:61:2b:b5:b9:11:e1:10:ad:d3: c2:8f:1e:b3:f1:fe:b7:fa:25:11:83:6a:60:6c:c1:f1:29:67: f4:aa:72:e0:c6:b7:db:af:ff:59:eb:cd:7c:16:88:12:fd:19: 31:93:ba:f5:00:10:cb:8d:9e:ab:38:1f:b4:ea:a7:b8:bc:53: 1c:23:09:55:5e:0f:1e:88:7d:e3:2a:99:05:fb:2c:0f:66:f6: e1:df:69:59:55:70:8b:7a:42:0b:e7:37:51:c8:66:eb:9d:27: 63:77:63:e1:cf:f5:05:b0:ca:76:25:0e:68:d8:79:4d:b2:f3: a6:35:c7:dd:28:26:2c:d5:2c:f6:f9:be:2c:f2:41:95:27:b7: 82:e8:99:9a:b5:1e:c5:45:03:27:42:07:ab:5c:a5:25:8c:ef: 70:9c:ba:b5:1b:4d:63:b1:4d:a9:46:23:94:2c:57:7b:04:2d: 2f:7d:b7:5f:0d:ab:3d:a9:ee:f6:59:b9:1d:11:ea:68:c5:ce: 35:b1:1f:61:62:5f:c1:32:41:64:bb:48:64:a7:ce:0e:7e:4f: 00:b7:ae:9a:86:e4:03:85:e4:20:17:7a:33:41:56:2a:ca:cc: 01:90:ca:b0:55:84:2b:97:18:f6:96:7f:62:e6:e0:5d:b4:08: 28:af:e3:a7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjgpG6+q+lr3M8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk Y2VlZjg4OWItM2FhZS00N2RkLTk2OGYtZGZlZTg0MDY0YmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOfJxe8PUJa9M6wRWLcxSvZaaZ6qc/tYv23l h22eJIcudBeZ6tqTlVbC2fP6MMFgJRcIISWxQ+pQXwARSsFnVHsstknoXF2sSjqd sU80jqUZ8anlFYM8t/h51cpAk+WHQVbJ1snHRCxdO6kUU3M7sE4quxlMvd55Pc4T WcHOnXNUcsHfocMVq+5svZhERrEx0dJ1udC6WbOT1UDlwcu2Z+OMhUKdiZF4eEnG HZx3S/RA6nMqKadyl6WIX5oyDc1uT/EpukSR0Ecg/X9mkz/vpumfWhXRy04aOD3S pDruMDnoTh2DjTIE3USJgHUXQkBoO4GgpQIIDWgSlZRIfrnOhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA1YTJ68ueQhP1Ct8cnYw3ihGw4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzY0OTg3YzEtNTBmMy0z YTA3LWI0NDEtMDVhODhhMTA3MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBjzwdZAw7A40BhK7W5EeEQrdPCjx6z8f63+iURg2pgbMHxKWf0qnLg xrfbr/9Z6818FogS/Rkxk7r1ABDLjZ6rOB+06qe4vFMcIwlVXg8eiH3jKpkF+ywP Zvbh32lZVXCLekIL5zdRyGbrnSdjd2Phz/UFsMp2JQ5o2HlNsvOmNcfdKCYs1Sz2 +b4s8kGVJ7eC6JmatR7FRQMnQgerXKUljO9wnLq1G01jsU2pRiOULFd7BC0vfbdf Das9qe72WbkdEepoxc41sR9hYl/BMkFku0hkp84Ofk8At66ahuQDheQgF3ozQVYq yswBkMqwVYQrlxj2ln9i5uBdtAgor+On -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:14 2025 by rpki-client