$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b17fe67-f014-318e-a766-667fa5056720.roa File: 3b17fe67-f014-318e-a766-667fa5056720.roa (raw, json) Hash identifier: cJBj0Y9DO/vpXW5l2BRosrrhHc3L8S4HHrjP4u7dJJQ= Subject key identifier: 22:F7:72:17:51:A3:2F:B4:EB:B4:E0:0C:49:F7:98:00:03:5E:6A:5D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F5235E2DD56A959C5061860 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b17fe67-f014-318e-a766-667fa5056720.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396611 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:35:e2:dd:56:a9:59:c5:06:18:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=3fdd0f31-ed5d-4ff4-b485-02afd5daebc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b3:5a:cb:82:3a:20:bb:1b:48:ab:c9:26:20: 31:72:32:4f:8f:43:36:a0:90:b7:9f:f4:e7:ef:8f: 65:fb:18:ff:38:1a:e8:7f:ba:2c:8e:e6:5a:f8:a3: 0b:ab:d2:40:84:82:c0:5b:a5:c9:2d:39:a3:0d:7a: 2e:b9:48:63:a0:86:e7:70:8e:ce:aa:8d:d3:8d:87: 67:19:5e:e8:11:f2:47:03:dc:76:a6:4b:e4:9f:77: a9:a7:05:2b:c3:03:28:49:1b:da:43:0b:21:52:1d: ff:61:98:fa:fd:30:7e:6f:a3:af:89:d0:d3:38:26: df:61:7c:19:79:57:39:cf:c0:3c:89:56:3e:9b:9e: 30:44:58:ff:7d:a8:ae:91:fa:e9:bb:69:73:92:30: 1e:e5:fd:d9:de:a6:85:bd:96:2f:d0:a9:c5:aa:55: 6f:1a:0b:0d:eb:b7:00:a7:b2:38:96:83:42:02:35: ca:0e:a2:75:a9:cc:5e:9f:f8:4a:39:7b:45:42:4f: b8:47:ff:33:16:8c:35:ac:f2:05:32:33:15:5e:c6: 80:c8:f4:d8:ca:28:21:8f:d7:4c:ed:52:41:3e:ad: a5:70:eb:db:3b:41:7b:82:09:11:29:10:e3:0c:fe: 98:6f:0c:95:f4:b4:d9:8a:62:55:62:9f:22:5d:a4: b2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F7:72:17:51:A3:2F:B4:EB:B4:E0:0C:49:F7:98:00:03:5E:6A:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b17fe67-f014-318e-a766-667fa5056720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:0d:65:cd:2a:38:77:c7:8b:ec:e0:e3:ef:e8:ad:73:7a:45: 95:9d:92:b9:9d:1c:bc:01:e0:73:f9:95:61:72:66:2e:c7:a1: 30:00:98:51:6e:46:47:c9:73:dc:e9:30:72:1a:88:91:01:bf: 51:10:c9:46:fc:b0:fe:a7:fb:f8:59:85:71:38:b8:62:c1:81: 90:5d:86:d6:23:bf:5a:fc:35:3a:e6:c2:9d:44:96:b0:b9:d1: ee:f5:a9:95:32:dd:4b:f8:d8:ed:ee:79:f9:5b:3b:0f:f8:42: e7:6d:fd:da:a1:2e:0e:c1:9f:90:ce:9d:21:5f:c6:c4:9b:80: c0:0f:a6:29:1b:00:8f:5e:55:5c:9a:a1:c8:77:36:68:61:0a: f9:1d:48:35:8b:87:5e:6a:6c:f4:ea:2a:42:6c:e0:38:8b:a7: 25:8e:93:24:be:70:28:76:07:ff:78:2c:52:f1:50:cc:da:2e: fc:a5:b0:01:24:cf:a6:d8:29:0f:0b:ad:2f:9f:9e:32:81:ae: 42:12:c2:5b:f8:76:79:6d:ae:0d:cf:62:cd:c4:7b:1b:c4:71: d5:47:ca:06:f2:85:c4:9c:7b:5b:ce:48:68:84:47:d5:0d:ff: a1:75:79:69:0b:9a:2c:1e:37:2a:01:36:1f:22:aa:5f:22:d5: 08:3e:0f:bf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjXi3VapWcUGGGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk M2ZkZDBmMzEtZWQ1ZC00ZmY0LWI0ODUtMDJhZmQ1ZGFlYmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7Nay4I6ILsbSKvJJiAxcjJPj0M2oJC3n/Tn 749l+xj/OBrof7osjuZa+KMLq9JAhILAW6XJLTmjDXouuUhjoIbncI7Oqo3TjYdn GV7oEfJHA9x2pkvkn3eppwUrwwMoSRvaQwshUh3/YZj6/TB+b6OvidDTOCbfYXwZ eVc5z8A8iVY+m54wRFj/faiukfrpu2lzkjAe5f3Z3qaFvZYv0KnFqlVvGgsN67cA p7I4loNCAjXKDqJ1qcxen/hKOXtFQk+4R/8zFow1rPIFMjMVXsaAyPTYyighj9dM 7VJBPq2lcOvbO0F7ggkRKRDjDP6YbwyV9LTZimJVYp8iXaSyKQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCL3chdRoy+067TgDEn3mAADXmpdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2IxN2ZlNjctZjAxNC0z MThlLWE3NjYtNjY3ZmE1MDU2NzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCJDWXNKjh3x4vs4OPv6K1zekWVnZK5nRy8AeBz+ZVhcmYux6EwAJhR bkZHyXPc6TByGoiRAb9REMlG/LD+p/v4WYVxOLhiwYGQXYbWI79a/DU65sKdRJaw udHu9amVMt1L+Njt7nn5WzsP+ELnbf3aoS4OwZ+Qzp0hX8bEm4DAD6YpGwCPXlVc mqHIdzZoYQr5HUg1i4deamz06ipCbOA4i6cljpMkvnAodgf/eCxS8VDM2i78pbAB JM+m2CkPC60vn54yga5CEsJb+HZ5ba4Nz2LNxHsbxHHVR8oG8oXEnHtbzkhohEfV Df+hdXlpC5osHjcqATYfIqpfItUIPg+/ -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:44 2025 by rpki-client