$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37432031-824b-389e-8e2d-eddf0a49dcd6.roa File: 37432031-824b-389e-8e2d-eddf0a49dcd6.roa (raw, json) Hash identifier: nUc4VSwtfAMttgkcKxdxygMis5iD/DHi6eSKezyFFF4= Subject key identifier: 33:F9:A6:2E:AF:D4:CE:F8:A8:69:CD:F4:BB:C5:DD:0E:97:A8:C1:83 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523924A3F03B369587C880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37432031-824b-389e-8e2d-eddf0a49dcd6.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396550 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:39:24:a3:f0:3b:36:95:87:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=eb4e656b-767e-455e-9b69-7dd195f8d0c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9f:a4:5a:40:8e:8a:3d:e8:5b:e7:22:43:52: a8:bb:60:5c:a6:49:e4:a5:87:fa:8f:05:74:25:f3: 9a:2c:57:bb:5c:f4:05:10:3a:a6:09:85:45:de:34: 92:e8:5e:43:e8:21:73:ac:d6:ca:1a:b6:b0:b5:ce: bb:58:6c:73:0d:d7:01:05:61:73:fc:92:45:1e:b4: de:a8:fe:b6:09:40:d6:f2:32:ef:f9:0e:74:76:e1: e8:8d:6a:95:50:6b:3b:52:7b:0d:9f:34:2a:a6:15: 1f:fb:e0:e0:5a:36:56:06:cc:83:f8:03:b5:35:bb: 2c:a6:24:1c:cc:f0:0f:2a:7c:1c:e7:2f:51:9b:b2: ef:a7:ed:c5:d5:69:74:01:d5:8d:0b:38:51:1c:52: 80:9b:11:a4:76:b5:a7:27:39:38:f6:31:c4:74:07: 9c:9c:63:11:91:2e:15:76:50:76:07:c6:a7:9b:51: 00:d4:37:54:2c:b7:c4:44:d5:44:8a:f3:7a:26:5e: f2:de:06:4a:94:b0:71:67:ab:46:1a:7b:96:59:ad: 1b:b8:d5:b0:0b:5c:f6:33:a2:5d:4b:24:1a:83:44: 69:a9:a2:a1:2c:19:ff:27:25:0f:28:3c:80:e6:3f: 6c:4b:75:9d:44:fc:bf:a3:ff:2f:85:2f:9e:8d:f0: e1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F9:A6:2E:AF:D4:CE:F8:A8:69:CD:F4:BB:C5:DD:0E:97:A8:C1:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37432031-824b-389e-8e2d-eddf0a49dcd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:36:86:79:55:a1:b0:aa:4e:f5:5c:8b:36:89:40:79:58:b0: 9b:24:75:80:80:ff:76:dd:b2:a6:79:58:cb:4f:ed:58:ed:55: 5a:57:9f:0f:38:82:12:8a:33:32:c4:85:4b:d7:60:db:4f:6c: 5d:be:1e:e9:b8:2a:8e:f3:af:9a:97:03:bc:00:79:2a:b5:4f: ee:cc:b4:40:78:a6:ec:79:53:f9:15:fe:77:16:db:07:2f:80: 7c:f2:8d:2f:55:b7:07:c3:72:3d:99:fc:b2:6a:8e:29:c3:d2: ba:c8:bd:3c:10:cc:90:33:dd:6e:7e:33:07:1a:b5:ba:be:f4: 38:33:80:d8:3b:83:29:93:4e:68:a1:3f:c9:79:6e:42:fb:de: 49:45:eb:fa:4b:e3:e8:0f:50:93:25:02:58:03:97:89:27:c4: 23:f4:2d:45:3f:6b:c2:95:0c:be:f8:d7:fb:8c:ee:35:fa:db: 5d:11:65:57:e5:96:c1:76:8b:1a:27:fc:5d:42:64:20:ab:aa: 26:bb:36:6a:ab:af:59:7a:20:60:eb:db:a4:eb:5e:21:7b:ef: 8c:b8:9b:4a:7b:d1:41:db:b7:95:f3:e1:8e:d2:54:3e:ba:f0: f4:85:a6:4b:fd:9f:c0:67:e8:85:c7:90:68:9b:b5:f8:b7:de: 42:c3:48:e0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/Ujkko/A7NpWHyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZWI0ZTY1NmItNzY3ZS00NTVlLTliNjktN2RkMTk1ZjhkMGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5+kWkCOij3oW+ciQ1Kou2BcpknkpYf6jwV0 JfOaLFe7XPQFEDqmCYVF3jSS6F5D6CFzrNbKGrawtc67WGxzDdcBBWFz/JJFHrTe qP62CUDW8jLv+Q50duHojWqVUGs7UnsNnzQqphUf++DgWjZWBsyD+AO1NbsspiQc zPAPKnwc5y9Rm7Lvp+3F1Wl0AdWNCzhRHFKAmxGkdrWnJzk49jHEdAecnGMRkS4V dlB2B8anm1EA1DdULLfERNVEivN6Jl7y3gZKlLBxZ6tGGnuWWa0buNWwC1z2M6Jd SyQag0RpqaKhLBn/JyUPKDyA5j9sS3WdRPy/o/8vhS+ejfDh9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDP5pi6v1M74qGnN9LvF3Q6XqMGDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzc0MzIwMzEtODI0Yi0z ODllLThlMmQtZWRkZjBhNDlkY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCKNoZ5VaGwqk71XIs2iUB5WLCbJHWAgP923bKmeVjLT+1Y7VVaV58P OIISijMyxIVL12DbT2xdvh7puCqO86+alwO8AHkqtU/uzLRAeKbseVP5Ff53FtsH L4B88o0vVbcHw3I9mfyyao4pw9K6yL08EMyQM91ufjMHGrW6vvQ4M4DYO4Mpk05o oT/JeW5C+95JRev6S+PoD1CTJQJYA5eJJ8Qj9C1FP2vClQy++Nf7jO41+ttdEWVX 5ZbBdosaJ/xdQmQgq6omuzZqq69ZeiBg69uk614he++MuJtKe9FB27eV8+GO0lQ+ uvD0haZL/Z/AZ+iFx5Bom7X4t95Cw0jg -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:23 2025 by rpki-client