$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f4a9125-8f6d-3a3e-ac3f-42ecf44f6087.roa File: 3f4a9125-8f6d-3a3e-ac3f-42ecf44f6087.roa (raw, json) Hash identifier: F38XYnsOi183QJaodlCevJYLzpOodtTPmJkm1GJle20= Subject key identifier: 12:DD:0B:82:51:FA:BE:89:AE:27:A0:24:DB:1D:E7:E9:7A:56:B9:09 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523A6A779EE9CECF452380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f4a9125-8f6d-3a3e-ac3f-42ecf44f6087.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397198 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3a:6a:77:9e:e9:ce:cf:45:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=5a6e1ae6-0b95-40cd-bdef-aa84dcf648a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8a:90:74:cb:e3:98:2d:c6:e2:c3:c8:9c:d4: 25:48:b2:85:f3:e3:6e:39:e6:b9:6a:5b:ab:89:f9: f2:c4:98:65:4a:ba:85:43:d9:62:ea:c7:fb:9b:66: 28:d2:0a:ee:b3:41:d8:51:b8:58:20:21:41:5c:67: ba:9c:b4:25:a2:1d:09:9a:90:54:59:e5:fd:d2:c0: 2d:3b:fd:4c:3b:3a:de:a9:38:65:72:d2:16:c5:0c: ac:88:d3:c8:a8:bb:b8:bb:dd:b9:16:8d:70:33:65: ac:8b:75:57:6d:f9:db:5d:db:b5:3f:2e:6f:ae:87: d7:46:0c:e0:b6:31:10:29:de:a7:6c:1f:d7:2f:0e: b4:0c:9c:00:74:a8:50:88:ba:f6:cf:ef:bf:8d:2d: 2d:cb:42:57:c3:ec:7d:ce:dc:d0:8c:79:fe:d3:b9: 13:59:9a:bb:92:9e:81:64:bb:a4:c6:52:8f:2a:10: 88:94:a5:b1:ac:5a:a8:6b:be:ba:02:4d:b6:ad:8b: 91:be:58:5e:f4:be:84:7e:70:d3:ba:1a:29:19:48: 69:73:72:e3:01:a6:74:63:d0:99:33:b6:85:42:a8: 0b:31:d2:d9:05:8d:92:6a:75:eb:9a:b1:2f:90:e3: d0:08:06:ee:06:37:54:20:65:6b:7d:13:1f:ac:76: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DD:0B:82:51:FA:BE:89:AE:27:A0:24:DB:1D:E7:E9:7A:56:B9:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f4a9125-8f6d-3a3e-ac3f-42ecf44f6087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d3:68:d4:14:a7:53:e4:b4:47:ff:94:3b:41:f5:75:21:e2: 4e:97:95:a3:10:35:c6:62:66:61:5f:08:67:eb:60:c4:b7:54: 16:d4:f4:a7:4d:f7:19:74:4a:f1:c8:1b:23:2b:2a:78:fa:e6: d3:c0:a4:08:f2:42:11:75:29:d5:2c:92:aa:38:11:bc:13:85: 14:43:1d:02:5e:14:40:36:53:cf:cd:0d:f1:51:77:44:33:6f: 39:69:4e:e3:ad:f5:62:c0:b1:ab:c9:44:b0:22:cb:a5:97:ee: 04:ca:ad:db:60:4f:72:1a:63:b2:6b:ad:5b:66:7f:ed:d1:b9: bc:fa:1a:7e:1d:cd:e9:8e:76:20:4a:5b:cc:02:04:be:55:d0: 87:84:6f:b4:06:8e:a5:c3:75:8d:b3:69:b8:62:75:d2:61:9d: b3:64:83:7f:c1:c2:e1:b1:53:7d:31:f7:a6:27:8d:50:55:7f: 61:48:19:d9:15:e7:b5:65:9c:e4:83:2a:25:fe:0b:40:d3:46: 35:f3:49:7b:a8:e3:ae:75:23:d7:90:1c:4d:80:84:4d:87:09: 99:4d:a8:96:0c:ee:9f:e3:9d:5f:2a:45:3d:26:70:b8:39:2d: a2:d5:12:31:38:4f:33:97:5e:ed:6b:52:13:ab:9e:bd:d0:d7: 7a:bc:45:c6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/Ujpqd57pzs9FI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NWE2ZTFhZTYtMGI5NS00MGNkLWJkZWYtYWE4NGRjZjY0OGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIqQdMvjmC3G4sPInNQlSLKF8+NuOea5alur ifnyxJhlSrqFQ9li6sf7m2Yo0grus0HYUbhYICFBXGe6nLQloh0JmpBUWeX90sAt O/1MOzreqThlctIWxQysiNPIqLu4u925Fo1wM2Wsi3VXbfnbXdu1Py5vrofXRgzg tjEQKd6nbB/XLw60DJwAdKhQiLr2z++/jS0ty0JXw+x9ztzQjHn+07kTWZq7kp6B ZLukxlKPKhCIlKWxrFqoa766Ak22rYuRvlhe9L6EfnDTuhopGUhpc3LjAaZ0Y9CZ M7aFQqgLMdLZBY2SanXrmrEvkOPQCAbuBjdUIGVrfRMfrHZtQwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBLdC4JR+r6JriegJNsd5+l6VrkJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2Y0YTkxMjUtOGY2ZC0z YTNlLWFjM2YtNDJlY2Y0NGY2MDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCD02jUFKdT5LRH/5Q7QfV1IeJOl5WjEDXGYmZhXwhn62DEt1QW1PSn TfcZdErxyBsjKyp4+ubTwKQI8kIRdSnVLJKqOBG8E4UUQx0CXhRANlPPzQ3xUXdE M285aU7jrfViwLGryUSwIsull+4Eyq3bYE9yGmOya61bZn/t0bm8+hp+Hc3pjnYg SlvMAgS+VdCHhG+0Bo6lw3WNs2m4YnXSYZ2zZIN/wcLhsVN9MfemJ41QVX9hSBnZ Fee1ZZzkgyol/gtA00Y180l7qOOudSPXkBxNgIRNhwmZTaiWDO6f451fKkU9JnC4 OS2i1RIxOE8zl17ta1ITq5690Nd6vEXG -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:31 2025 by rpki-client