$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ecd9ebd-5aca-3470-b0e7-3d749e98d3de.roa File: 3ecd9ebd-5aca-3470-b0e7-3d749e98d3de.roa (raw, json) Hash identifier: Jlo5F5scn/cGbC6d/LAvvgqMlDZtGt2EhAySAkOEo6c= Subject key identifier: 9F:64:C5:4A:32:88:FC:5C:99:1F:31:BF:34:0A:C3:31:8F:84:84:99 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F52317784FAEF43436DD4C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ecd9ebd-5aca-3470-b0e7-3d749e98d3de.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396540 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:31:77:84:fa:ef:43:43:6d:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=57b1db3c-0f99-4494-a82f-b5352375a1a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f0:55:9d:ef:bc:48:f9:dc:99:ef:b5:ce:c8: f7:c6:ed:a2:b7:7e:86:58:37:1e:70:03:f7:62:70: 98:a5:c2:6d:ac:c8:c0:45:fb:4d:fc:f6:55:00:d3: 00:43:f9:ed:e6:6e:e7:b0:a5:1d:70:7c:52:da:b4: c8:04:17:14:5e:5c:75:6f:de:12:a2:38:2b:d7:09: 92:7d:ae:41:d0:f8:c0:86:c6:6e:75:75:30:86:ea: 5f:e8:4d:d4:8b:c0:cd:e1:b3:68:7b:28:82:de:de: 94:98:fb:78:f6:37:46:3f:94:2e:1f:cb:59:79:c4: e8:fd:32:d3:2f:d7:59:b4:1d:91:0d:ed:9a:1f:0f: c5:d0:a7:e3:e9:c6:de:e3:79:58:10:67:25:44:e3: 09:64:c9:94:20:00:eb:52:70:a1:b2:9e:f4:24:61: 2a:0a:15:48:a8:ee:85:35:ea:51:42:88:fb:cb:7a: de:89:7d:9a:c0:72:e4:a0:68:7c:2f:08:17:98:05: d0:9e:aa:80:bb:62:87:d6:36:a5:d3:ac:aa:07:3e: 2c:66:a6:15:ab:77:9e:f1:2f:6f:73:d1:7c:06:ef: fb:9a:87:4f:f8:5d:81:47:eb:7c:44:09:fd:e4:07: e7:4a:67:d4:8e:33:2a:f0:66:1f:7b:1c:02:21:8c: f9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:64:C5:4A:32:88:FC:5C:99:1F:31:BF:34:0A:C3:31:8F:84:84:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ecd9ebd-5aca-3470-b0e7-3d749e98d3de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:dd:6f:a0:ab:94:57:6c:24:3f:41:f2:68:13:db:b7:39:86: c6:01:e2:91:b4:0f:b3:16:3b:62:3b:13:26:2f:57:5f:64:28: d4:53:68:d7:38:6f:f0:25:bb:43:0c:62:bc:85:b0:79:ee:03: 40:1f:f6:b1:ec:a7:e2:a8:f5:62:4b:60:9b:55:8a:f9:90:99: 84:f5:a1:cf:7d:48:ca:52:49:c6:da:ec:d2:48:d4:ee:10:76: 21:cb:05:c0:3e:1e:f6:8a:b3:17:41:a6:9b:e0:88:cd:15:c6: 60:e6:8e:ec:ab:c6:4a:0a:60:05:50:ea:37:e5:d9:4f:f6:f1: 53:32:7c:5e:6a:04:c4:3d:3a:fa:ea:83:7e:48:e4:81:2f:54: c6:e5:ec:99:aa:c3:95:94:3b:7e:51:28:f0:d8:6f:45:52:ae: 59:24:f9:3d:59:a1:b4:3d:bc:a9:ad:9f:3e:2a:3e:ee:47:00: 25:52:5e:15:0a:ed:31:45:a9:88:6f:23:d3:e8:43:8b:b1:97: e6:2e:0f:11:c2:ff:41:f7:f5:7c:8e:88:25:c3:f0:ee:7b:b3: 72:65:1a:b7:8c:65:51:5a:46:4c:b2:a1:0c:54:c5:7b:96:7e: 1e:2a:2f:fa:d3:e2:f3:fb:c5:6e:bb:9a:64:49:53:29:a0:8c: 44:b3:c8:50 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjF3hPrvQ0Nt1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NTdiMWRiM2MtMGY5OS00NDk0LWE4MmYtYjUzNTIzNzVhMWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPBVne+8SPncme+1zsj3xu2it36GWDcecAP3 YnCYpcJtrMjARftN/PZVANMAQ/nt5m7nsKUdcHxS2rTIBBcUXlx1b94Sojgr1wmS fa5B0PjAhsZudXUwhupf6E3Ui8DN4bNoeyiC3t6UmPt49jdGP5QuH8tZecTo/TLT L9dZtB2RDe2aHw/F0Kfj6cbe43lYEGclROMJZMmUIADrUnChsp70JGEqChVIqO6F NepRQoj7y3reiX2awHLkoGh8LwgXmAXQnqqAu2KH1jal06yqBz4sZqYVq3ee8S9v c9F8Bu/7modP+F2BR+t8RAn95AfnSmfUjjMq8GYfexwCIYz5MQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ9kxUoyiPxcmR8xvzQKwzGPhISZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2VjZDllYmQtNWFjYS0z NDcwLWIwZTctM2Q3NDllOThkM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBl3W+gq5RXbCQ/QfJoE9u3OYbGAeKRtA+zFjtiOxMmL1dfZCjUU2jX OG/wJbtDDGK8hbB57gNAH/ax7KfiqPViS2CbVYr5kJmE9aHPfUjKUknG2uzSSNTu EHYhywXAPh72irMXQaab4IjNFcZg5o7sq8ZKCmAFUOo35dlP9vFTMnxeagTEPTr6 6oN+SOSBL1TG5eyZqsOVlDt+USjw2G9FUq5ZJPk9WaG0PbyprZ8+Kj7uRwAlUl4V Cu0xRamIbyPT6EOLsZfmLg8Rwv9B9/V8joglw/Due7NyZRq3jGVRWkZMsqEMVMV7 ln4eKi/60+Lz+8Vuu5pkSVMpoIxEs8hQ -----END CERTIFICATE-----Generated at Mon Oct 20 10:22:51 2025 by rpki-client