$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45bfc77e-86dd-39d9-bf00-d6130c6de646.roa File: 45bfc77e-86dd-39d9-bf00-d6130c6de646.roa (raw, json) Hash identifier: R8FJvqimaiD3GJYdH6BM6ZBfCM+2Hb7vBOXqjCcImp4= Subject key identifier: FE:27:58:6C:13:D0:94:A8:41:6D:48:99:DD:D3:3C:0C:8C:93:46:01 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F52365AABEF7A6938B5BF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45bfc77e-86dd-39d9-bf00-d6130c6de646.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396605 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:36:5a:ab:ef:7a:69:38:b5:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=06c9c6e2-2dff-4e2d-a9df-5e364a104a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d4:e5:7d:8c:24:fd:d9:95:51:dd:5c:3e:01: 57:dc:7f:33:70:df:00:98:4e:21:b1:70:8c:bb:e5: c1:16:28:98:8d:e3:92:c2:34:97:80:e4:19:fe:ae: 03:dc:d0:06:98:22:ec:02:07:3d:0f:55:68:1b:63: 8d:cc:cc:5b:e9:df:e0:66:5e:78:3a:78:0a:d5:62: 05:2e:ee:e8:e4:e3:d6:66:0d:61:40:ae:b4:b8:fd: 49:b8:0d:a2:9d:1b:0f:35:20:c7:9a:5c:0f:86:11: 84:40:e7:b8:51:ac:0f:f5:ef:2c:39:86:00:e8:99: 60:13:43:c3:97:f7:7b:a7:64:e9:60:6c:a3:ad:7a: 97:a8:67:8d:ce:90:81:7e:3e:06:79:e0:bb:41:97: d8:55:96:53:eb:56:40:c5:70:cb:d0:e5:b7:5d:e7: 9b:87:56:0f:85:9f:29:6f:ed:db:21:54:ac:99:19: 58:e5:e6:bc:66:62:00:ed:eb:66:8f:1d:d9:3e:58: 0a:25:a4:30:9d:9f:82:02:e9:f4:2c:85:80:bd:b5: f8:46:77:b0:06:cc:63:c3:71:fc:ac:30:fe:bd:a7: 65:ea:c0:1f:85:0b:0d:de:a0:60:1a:7a:e1:04:15: c2:60:a9:98:72:54:6c:c9:cf:ca:74:8e:58:c9:bf: ec:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:27:58:6C:13:D0:94:A8:41:6D:48:99:DD:D3:3C:0C:8C:93:46:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45bfc77e-86dd-39d9-bf00-d6130c6de646.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:21:2d:41:21:7b:82:89:8e:d1:0b:8c:4f:2f:81:0d:3d:d8: 2a:19:30:21:ce:ab:5a:6e:9f:27:57:a3:60:44:c2:7b:ae:23: 63:7f:4b:54:15:b7:7e:b0:9a:49:90:24:c7:c1:65:24:3c:0c: 9a:f8:bd:ef:08:a1:4e:20:77:84:13:d0:a4:1a:fe:3e:20:66: 78:dd:e9:01:3e:6f:5c:2c:ce:d8:40:4c:59:77:5b:c8:63:0c: 18:f6:aa:b8:ce:5b:98:17:57:85:31:f0:0a:0a:f4:bf:45:7f: 65:61:ee:94:f5:2a:8b:10:57:b6:3a:0f:55:ef:d2:9e:12:c8: 61:1b:7b:ff:9b:5a:ab:c1:9d:03:66:6a:4d:9e:26:fe:4c:1e: 41:8d:eb:3d:ed:bd:0d:32:16:bf:b8:65:f0:60:28:d6:66:a7: 29:77:11:b2:55:28:23:ae:f0:d1:cf:f6:6d:51:2b:11:da:5b: 21:ba:f6:4c:2c:8f:82:ec:36:3e:3e:8b:f0:c3:aa:01:45:b6: a3:85:ab:77:b4:23:d3:df:9e:ec:46:9b:ac:f3:69:6b:86:31: 43:f7:72:92:d2:a3:6a:b8:a9:65:3a:a2:e1:0c:6d:01:da:fa: 9e:ae:4e:6f:4b:35:ac:bf:2f:12:25:d5:f1:f2:6f:11:56:4c: 81:13:73:e3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjZaq+96aTi1v4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MDZjOWM2ZTItMmRmZi00ZTJkLWE5ZGYtNWUzNjRhMTA0YTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtTlfYwk/dmVUd1cPgFX3H8zcN8AmE4hsXCM u+XBFiiYjeOSwjSXgOQZ/q4D3NAGmCLsAgc9D1VoG2ONzMxb6d/gZl54OngK1WIF Lu7o5OPWZg1hQK60uP1JuA2inRsPNSDHmlwPhhGEQOe4UawP9e8sOYYA6JlgE0PD l/d7p2TpYGyjrXqXqGeNzpCBfj4GeeC7QZfYVZZT61ZAxXDL0OW3Xeebh1YPhZ8p b+3bIVSsmRlY5ea8ZmIA7etmjx3ZPlgKJaQwnZ+CAun0LIWAvbX4RnewBsxjw3H8 rDD+vadl6sAfhQsN3qBgGnrhBBXCYKmYclRsyc/KdI5Yyb/s9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP4nWGwT0JSoQW1Imd3TPAyMk0YBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDViZmM3N2UtODZkZC0z OWQ5LWJmMDAtZDYxMzBjNmRlNjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB1IS1BIXuCiY7RC4xPL4ENPdgqGTAhzqtabp8nV6NgRMJ7riNjf0tU Fbd+sJpJkCTHwWUkPAya+L3vCKFOIHeEE9CkGv4+IGZ43ekBPm9cLM7YQExZd1vI YwwY9qq4zluYF1eFMfAKCvS/RX9lYe6U9SqLEFe2Og9V79KeEshhG3v/m1qrwZ0D ZmpNnib+TB5Bjes97b0NMha/uGXwYCjWZqcpdxGyVSgjrvDRz/ZtUSsR2lshuvZM LI+C7DY+Povww6oBRbajhat3tCPT357sRpus82lrhjFD93KS0qNquKllOqLhDG0B 2vqerk5vSzWsvy8SJdXx8m8RVkyBE3Pj -----END CERTIFICATE-----Generated at Mon Oct 20 13:22:43 2025 by rpki-client