$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47726de3-e3d9-30ae-85d4-452d8d428980.roa File: 47726de3-e3d9-30ae-85d4-452d8d428980.roa (raw, json) Hash identifier: EYISWaJitxTDgBCF05kYwSgdK/8f9amRSIpIFw5EuaI= Subject key identifier: 32:9E:1B:9F:AF:BE:07:88:CA:99:FC:4C:0A:51:77:B8:8F:71:B8:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F5235215E9ADA82864D6B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47726de3-e3d9-30ae-85d4-452d8d428980.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396571 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:35:21:5e:9a:da:82:86:4d:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=9c098e2b-6be4-4b59-9552-63767f2f3076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:10:ff:c0:bb:95:ab:f9:7c:4b:0a:f3:cb:48: 83:72:54:85:8d:b2:2f:dd:d2:87:20:39:5c:ee:48: aa:37:59:94:35:54:75:38:1b:12:1f:32:35:91:e7: 47:d2:58:18:be:c8:4b:9c:5a:05:ae:b6:70:f5:ab: f7:e7:77:9b:14:82:7f:48:a8:bf:24:32:c0:39:39: 06:de:79:2b:5e:c7:a8:14:a8:1a:ad:97:93:aa:b2: e9:8b:07:db:37:ef:0a:6c:ec:35:bf:f2:ea:bc:d9: a6:af:52:8d:17:a3:b7:56:b4:f0:11:4b:0a:a6:12: fe:1f:0b:13:74:cd:c8:6f:db:63:a4:b1:17:99:ed: 56:a7:ab:0b:fa:b7:99:51:06:9b:d3:43:db:96:5d: 13:05:46:c3:da:b6:b4:bb:fb:b3:9c:fc:89:95:24: 57:5c:e9:1d:2c:2b:51:4e:a1:f1:3a:b4:d9:53:8c: b4:13:c3:4d:16:5b:f7:2a:21:3a:d7:66:15:16:29: 6d:9e:a9:a9:aa:c4:87:a5:2f:93:89:2a:cb:7b:bd: 3d:a0:94:c7:3d:2b:95:55:11:4d:0f:e4:f1:31:7e: 56:e1:e9:9d:0e:f1:4b:51:98:e2:da:98:f4:02:b5: 71:67:cb:12:f4:96:1a:5b:9e:a8:a9:92:a6:84:53: 36:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9E:1B:9F:AF:BE:07:88:CA:99:FC:4C:0A:51:77:B8:8F:71:B8:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47726de3-e3d9-30ae-85d4-452d8d428980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:40:26:1f:96:0c:d3:07:5a:0f:9e:95:86:57:0c:ca:93:c6: 38:31:15:59:2a:3b:9e:a8:ee:8b:56:d1:de:2d:c6:dc:8f:29: 7e:db:72:d6:b0:be:10:b6:1a:09:fc:58:ce:8c:d7:78:f0:86: 44:87:84:17:d1:1a:b5:ec:13:ed:89:54:c0:8e:a2:fc:13:8c: a9:75:9d:90:d7:4d:bf:7e:44:9c:8e:2b:e9:3d:ef:80:ca:55: d0:35:b8:39:fa:29:59:fc:c7:31:74:cc:c4:54:3e:5e:45:08: 34:6d:15:d9:88:bf:6a:16:e5:67:53:d1:4f:7b:4c:91:cd:b8: 2b:1d:3b:57:04:8f:de:14:c8:7c:cf:98:05:0f:03:61:eb:ae: ec:6d:57:74:4b:0e:99:e8:bd:f9:08:eb:45:8a:db:0e:e0:a4: d6:a2:29:04:69:2d:9f:81:9c:e0:c1:80:0c:60:97:7e:b8:e6: c4:23:1e:ef:d5:a5:69:51:ae:8d:97:87:68:ed:b9:e9:71:6c: 26:fd:9e:0d:ab:4c:ba:36:63:c6:ee:e1:b2:ee:a0:d5:cb:f7: ce:25:fb:08:a3:f4:c1:4d:7b:55:7e:96:59:5b:e3:c7:a1:8c: 92:1b:1d:46:1e:aa:08:18:12:60:49:f6:98:11:d1:f5:42:da: 41:c3:f0:95 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjUhXpragoZNawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk OWMwOThlMmItNmJlNC00YjU5LTk1NTItNjM3NjdmMmYzMDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhD/wLuVq/l8Swrzy0iDclSFjbIv3dKHIDlc 7kiqN1mUNVR1OBsSHzI1kedH0lgYvshLnFoFrrZw9av353ebFIJ/SKi/JDLAOTkG 3nkrXseoFKgarZeTqrLpiwfbN+8KbOw1v/LqvNmmr1KNF6O3VrTwEUsKphL+HwsT dM3Ib9tjpLEXme1Wp6sL+reZUQab00Pbll0TBUbD2ra0u/uznPyJlSRXXOkdLCtR TqHxOrTZU4y0E8NNFlv3KiE612YVFiltnqmpqsSHpS+TiSrLe709oJTHPSuVVRFN D+TxMX5W4emdDvFLUZji2pj0ArVxZ8sS9JYaW56oqZKmhFM2/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDKeG5+vvgeIypn8TApRd7iPcbiEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDc3MjZkZTMtZTNkOS0z MGFlLTg1ZDQtNDUyZDhkNDI4OTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBPQCYflgzTB1oPnpWGVwzKk8Y4MRVZKjueqO6LVtHeLcbcjyl+23LW sL4QthoJ/FjOjNd48IZEh4QX0Rq17BPtiVTAjqL8E4ypdZ2Q102/fkScjivpPe+A ylXQNbg5+ilZ/McxdMzEVD5eRQg0bRXZiL9qFuVnU9FPe0yRzbgrHTtXBI/eFMh8 z5gFDwNh667sbVd0Sw6Z6L35COtFitsO4KTWoikEaS2fgZzgwYAMYJd+uObEIx7v 1aVpUa6Nl4do7bnpcWwm/Z4Nq0y6NmPG7uGy7qDVy/fOJfsIo/TBTXtVfpZZW+PH oYySGx1GHqoIGBJgSfaYEdH1QtpBw/CV -----END CERTIFICATE-----Generated at Mon Oct 20 10:26:05 2025 by rpki-client