$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38e76479-d368-3e6a-bc5b-36cc20eaa82b.roa File: 38e76479-d368-3e6a-bc5b-36cc20eaa82b.roa (raw, json) Hash identifier: 7bILKAL0WcAgTqa1vzpy3FpTh9oCL8oGIENIXSaMvBk= Subject key identifier: FD:99:37:2D:22:ED:93:62:91:A5:5E:9C:8F:46:EF:62:FC:9D:58:BC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523BD51D2D376ED21B9100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38e76479-d368-3e6a-bc5b-36cc20eaa82b.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397210 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3b:d5:1d:2d:37:6e:d2:1b:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=6ac70f1e-319e-417f-b737-86e49fd13258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:34:40:1e:2a:88:c0:53:b5:a5:af:7c:34:55: 5d:7d:44:ee:0d:00:32:48:98:0f:0f:6f:13:3b:3b: 66:64:fa:67:15:02:3e:a0:54:14:33:b4:73:ea:32: 50:ce:a5:8d:ae:46:9e:44:51:cc:51:9b:c2:c9:da: b7:1b:44:52:db:b5:f1:fa:3d:64:f9:5f:3b:2e:1a: 88:4f:c8:7d:92:7e:02:50:af:5c:ac:b0:70:c3:36: 7b:0c:41:bb:57:2d:4e:55:d2:7d:6a:6a:7b:3e:28: e8:88:66:dc:a2:dd:58:ea:33:a9:f4:2d:95:05:8b: 4c:7f:f9:61:b7:7b:85:f5:ae:42:cb:47:18:ff:d4: dd:7d:58:c2:7b:04:79:7a:d4:e4:64:24:7c:ad:c7: 45:3f:0c:48:c0:a8:93:ba:de:91:07:dd:09:9e:d2: 59:8f:ac:ee:4b:82:a5:8b:8e:e5:3d:d7:ba:16:31: 0d:a8:78:fe:43:26:cd:d3:1a:0b:e4:5f:6f:54:95: 89:e6:45:0f:9c:42:bb:e4:0d:94:a0:14:49:42:2a: 6c:95:07:72:bc:48:e9:82:d9:f4:b5:dc:45:32:ef: 10:46:44:6b:cb:5e:80:47:b4:e4:9f:c5:26:45:0a: d7:21:2f:0b:62:df:81:62:b4:ca:ff:39:34:af:8e: c1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:99:37:2D:22:ED:93:62:91:A5:5E:9C:8F:46:EF:62:FC:9D:58:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38e76479-d368-3e6a-bc5b-36cc20eaa82b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:2f:29:f5:c0:51:2a:77:a4:ad:cd:af:ce:4f:84:00:f0:1c: d6:63:f1:71:7e:94:1c:41:b5:15:16:6b:bb:41:47:cb:c6:9b: 7c:7a:76:1b:36:26:82:fd:1f:9a:52:28:9b:a7:7d:b1:56:58: 4a:83:6b:7b:9b:3b:cd:db:f2:1f:af:7c:db:b5:eb:2f:a9:96: e7:07:c2:30:43:05:30:52:2f:c6:05:14:39:a6:05:29:d0:82: ab:9f:5e:19:bb:3c:24:51:d5:23:88:21:8c:b7:41:e1:0e:8d: f7:4c:fa:eb:cf:88:d5:05:0c:da:af:22:a1:1c:a7:6d:21:fe: 58:71:43:80:a1:e8:2b:17:de:76:94:08:aa:eb:f1:d9:d7:af: ed:53:f1:9a:d3:bb:18:41:73:d4:34:0d:2e:b3:1a:0b:ed:74: c3:a9:24:03:36:af:c9:8d:37:3c:23:b5:db:99:7d:eb:22:f6: 11:af:c4:83:ac:ee:48:3e:5c:4e:aa:6a:31:1f:d6:82:64:1e: a3:7e:d8:04:f0:5b:06:00:38:0b:b1:69:fe:88:ed:95:d8:e0: 3c:cd:65:67:25:8b:97:73:3c:4e:a3:ad:02:04:b5:54:8c:62: 4d:41:8f:8a:1a:cd:86:25:11:ff:b3:f8:62:33:b3:0e:96:03: e1:59:76:09 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjvVHS03btIbkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NmFjNzBmMWUtMzE5ZS00MTdmLWI3MzctODZlNDlmZDEzMjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTRAHiqIwFO1pa98NFVdfUTuDQAySJgPD28T OztmZPpnFQI+oFQUM7Rz6jJQzqWNrkaeRFHMUZvCydq3G0RS27Xx+j1k+V87LhqI T8h9kn4CUK9crLBwwzZ7DEG7Vy1OVdJ9amp7PijoiGbcot1Y6jOp9C2VBYtMf/lh t3uF9a5Cy0cY/9TdfVjCewR5etTkZCR8rcdFPwxIwKiTut6RB90JntJZj6zuS4Kl i47lPde6FjENqHj+QybN0xoL5F9vVJWJ5kUPnEK75A2UoBRJQipslQdyvEjpgtn0 tdxFMu8QRkRry16AR7Tkn8UmRQrXIS8LYt+BYrTK/zk0r47BpQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP2ZNy0i7ZNikaVenI9G72L8nVi8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzhlNzY0NzktZDM2OC0z ZTZhLWJjNWItMzZjYzIwZWFhODJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQARLyn1wFEqd6Stza/OT4QA8BzWY/FxfpQcQbUVFmu7QUfLxpt8enYb NiaC/R+aUiibp32xVlhKg2t7mzvN2/Ifr3zbtesvqZbnB8IwQwUwUi/GBRQ5pgUp 0IKrn14ZuzwkUdUjiCGMt0HhDo33TPrrz4jVBQzaryKhHKdtIf5YcUOAoegrF952 lAiq6/HZ16/tU/Ga07sYQXPUNA0usxoL7XTDqSQDNq/JjTc8I7XbmX3rIvYRr8SD rO5IPlxOqmoxH9aCZB6jftgE8FsGADgLsWn+iO2V2OA8zWVnJYuXczxOo60CBLVU jGJNQY+KGs2GJRH/s/hiM7MOlgPhWXYJ -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:03 2025 by rpki-client