$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa File: 525cb902-d047-345f-b98a-33a46136085b.roa (raw, json) Hash identifier: 1dw4HvtxbiSbJ7f9DtxFvd3p4ixL3MzWPTBvoGAoyIE= Subject key identifier: FF:A9:21:84:3D:67:75:6E:4B:80:6F:82:74:67:9A:88:E6:CD:71:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523C75943442ECD3900000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396578 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3c:75:94:34:42:ec:d3:90:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=988a85c4-6a4d-4dad-abff-5ac61ad3583e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2c:4a:e4:e5:2d:b3:14:1a:a5:70:e9:dd:83: b6:29:32:75:7e:44:08:86:1e:53:e4:af:80:bf:72: cb:f3:20:3c:f7:b3:22:86:59:79:df:7e:d0:70:99: 8e:b8:2b:3f:4c:70:82:6d:4b:0d:af:a7:5b:5d:a0: 12:16:1f:f6:77:22:95:ad:56:c0:10:60:81:27:95: 27:99:44:76:e8:d7:c7:4d:0d:e5:9a:20:c7:c3:7d: db:c7:a7:a9:4c:bd:ed:b9:2c:df:50:04:2a:b0:47: 23:c9:60:73:29:ba:bb:a3:8c:88:15:c5:39:2a:c8: 53:8e:6e:ea:2d:9c:89:b2:3a:5f:91:5c:32:cf:69: 94:28:14:55:1d:15:8a:d5:f7:fc:47:84:72:a2:1d: 69:05:81:91:7a:e6:bc:c0:29:1b:cc:15:8b:98:44: 13:a1:36:b8:2c:fb:96:36:28:43:fe:80:bc:bf:46: b2:63:0c:74:7e:fc:a6:9b:ed:c9:f0:8d:8b:14:35: 06:5d:a9:a3:cd:88:b4:f1:10:7c:6f:e7:4d:a0:07: ab:f1:02:43:6c:f1:c0:2f:fb:c8:5c:10:c4:de:54: 94:84:cf:2a:91:88:80:7a:cd:0f:af:e9:5d:4d:46: 3f:b7:b8:dd:ed:11:09:a2:7d:8b:ff:d9:ad:e4:63: 2f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A9:21:84:3D:67:75:6E:4B:80:6F:82:74:67:9A:88:E6:CD:71:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:1e:23:c4:40:aa:fc:a5:2c:8f:ca:a1:bc:6b:ae:2c:2a:31: 55:b6:e5:f2:67:c3:d7:ef:3a:11:2e:4d:94:00:29:53:50:92: 88:3c:57:21:da:f5:7c:0a:fb:b6:a7:85:2c:3f:27:f7:63:d4: 6c:f4:4f:84:6e:16:16:92:e7:77:8a:dd:d7:53:98:3e:db:d8: 8e:6d:48:a9:f2:ec:57:28:46:72:9c:e4:4f:de:f5:a5:95:89: 87:9c:a8:d8:84:3d:c9:f9:94:15:f3:e9:09:93:3a:75:bc:cb: 0f:eb:80:c9:bd:e4:79:3c:63:5a:a7:07:17:34:92:3d:7a:7e: a6:dd:a8:88:59:1c:2a:3f:1b:88:d0:5c:b7:4f:44:af:9d:56: d5:f0:84:cb:d0:5a:ea:ff:6c:40:53:f3:43:3c:4b:4c:18:39: c1:fc:8b:69:61:6e:41:25:c4:83:cd:91:bd:64:2b:a8:ad:af: 7e:fe:53:5e:e4:ad:20:6a:75:50:f8:b1:0e:87:4f:13:aa:90: a6:d3:5c:de:a8:47:b6:a9:b1:cd:05:9d:2b:e2:64:a2:59:32: 06:e8:78:36:b6:ca:be:ce:a7:88:bf:7a:d1:54:61:ea:87:d8: 6d:b7:9a:b1:c1:f5:e8:4d:a7:4a:c1:dd:80:53:db:a3:c7:b2: 4e:16:42:26 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/Ujx1lDRC7NOQAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk OTg4YTg1YzQtNmE0ZC00ZGFkLWFiZmYtNWFjNjFhZDM1ODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyxK5OUtsxQapXDp3YO2KTJ1fkQIhh5T5K+A v3LL8yA897Mihll5337QcJmOuCs/THCCbUsNr6dbXaASFh/2dyKVrVbAEGCBJ5Un mUR26NfHTQ3lmiDHw33bx6epTL3tuSzfUAQqsEcjyWBzKbq7o4yIFcU5KshTjm7q LZyJsjpfkVwyz2mUKBRVHRWK1ff8R4Ryoh1pBYGReua8wCkbzBWLmEQToTa4LPuW NihD/oC8v0ayYwx0fvymm+3J8I2LFDUGXamjzYi08RB8b+dNoAer8QJDbPHAL/vI XBDE3lSUhM8qkYiAes0Pr+ldTUY/t7jd7REJon2L/9mt5GMvSwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP+pIYQ9Z3VuS4BvgnRnmojmzXFWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTI1Y2I5MDItZDA0Ny0z NDVmLWI5OGEtMzNhNDYxMzYwODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAaHiPEQKr8pSyPyqG8a64sKjFVtuXyZ8PX7zoRLk2UAClTUJKIPFch 2vV8Cvu2p4UsPyf3Y9Rs9E+EbhYWkud3it3XU5g+29iObUip8uxXKEZynORP3vWl lYmHnKjYhD3J+ZQV8+kJkzp1vMsP64DJveR5PGNapwcXNJI9en6m3aiIWRwqPxuI 0Fy3T0SvnVbV8ITL0Frq/2xAU/NDPEtMGDnB/ItpYW5BJcSDzZG9ZCuora9+/lNe 5K0ganVQ+LEOh08TqpCm01zeqEe2qbHNBZ0r4mSiWTIG6Hg2tsq+zqeIv3rRVGHq h9htt5qxwfXoTadKwd2AU9ujx7JOFkIm -----END CERTIFICATE-----Generated at Mon Oct 20 15:23:01 2025 by rpki-client