$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/54d25cbb-7b65-334e-bd13-e7e58b7576e6.roa File: 54d25cbb-7b65-334e-bd13-e7e58b7576e6.roa (raw, json) Hash identifier: 9Ck4oc8JpALNlJqDoEF5xcCIC9sjLZlHmGiEmqnHnRc= Subject key identifier: B6:68:D6:E6:68:31:AB:38:32:47:DE:8E:39:90:F9:A1:22:AE:64:7B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F5231310C070B3C767CA280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/54d25cbb-7b65-334e-bd13-e7e58b7576e6.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 27544 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:31:31:0c:07:0b:3c:76:7c:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=ccae7471-bf87-407b-9c8a-00524efd3b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:77:a1:34:7d:d2:ca:20:5c:47:52:17:11:f4: b0:b2:52:25:02:d2:c2:9d:f1:0b:43:93:31:b2:b8: 55:73:8d:ff:df:32:14:b1:f1:56:4a:1d:23:82:e0: b6:1e:bd:dc:cb:c9:8a:b5:4c:14:65:3b:3f:c2:ed: a6:6c:7c:9f:52:17:78:8f:8f:7b:c2:9a:d6:b8:e4: 80:1e:4f:af:35:cc:9b:76:40:ce:dc:5d:b4:8a:4e: e4:2c:0c:31:77:80:28:fe:1b:de:ca:f0:c6:4a:51: 22:4b:17:1a:e2:5b:29:ce:92:95:09:fa:b2:39:91: 22:76:2c:d1:4d:ae:38:a1:c1:24:9b:7b:8a:50:fb: 4d:3c:10:18:d9:54:e6:d4:29:dc:6c:8a:2d:4f:4f: 83:d4:78:89:d7:f2:29:76:42:2d:f2:44:29:ef:bb: a0:13:fb:51:43:4a:c5:c2:75:e2:6a:06:90:41:03: 7a:ac:1e:47:7d:ac:da:d7:84:f6:a4:04:47:fe:d3: 20:54:94:6d:32:9b:0a:33:54:8c:54:0c:34:07:b0: 93:32:c1:71:a9:27:2f:99:fe:1a:c1:a8:05:9a:ab: b2:bc:72:52:81:91:27:0c:ea:d8:cf:14:4a:23:f2: 5e:69:af:b9:e7:59:79:e7:38:f7:19:6f:42:e0:97: 50:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:68:D6:E6:68:31:AB:38:32:47:DE:8E:39:90:F9:A1:22:AE:64:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/54d25cbb-7b65-334e-bd13-e7e58b7576e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:ea:92:7d:48:a3:75:b1:73:09:34:ef:f2:3c:0a:cd:04:cc: 3f:ee:50:88:a9:7e:d8:3c:cd:e0:38:49:76:1d:40:b2:45:53: 15:1a:cd:67:a5:73:fd:cf:7e:02:7b:c6:19:d5:5f:ab:71:d0: 9e:dd:6b:74:93:8f:69:a2:5a:57:71:9f:79:16:e8:bd:ba:8b: 6b:52:b3:85:a5:4b:a2:7c:27:79:fd:95:f7:4e:c5:ef:7f:6c: cd:12:87:03:9e:a7:c8:11:eb:6a:e3:6a:6a:47:59:36:8f:3e: 6b:bd:8e:c7:a6:68:26:80:d5:7f:07:c2:f8:e8:5f:a2:6b:51: 58:a8:a2:38:e7:51:0d:bf:bb:67:94:24:07:7f:07:ad:09:8c: 4d:b5:ee:e5:cd:b1:64:03:7b:74:d5:11:d3:4a:80:b4:c4:e2: 5a:39:e1:45:b0:bb:d2:d0:53:7a:df:79:fc:a0:02:15:05:40: 78:2a:a3:81:ad:7e:01:00:c3:5d:ef:22:78:8d:5e:cc:e6:6b: 04:33:e9:f0:61:64:db:92:76:1b:9d:35:3b:48:3d:3f:dc:9c: 4e:b4:1d:59:ea:1c:67:fa:e6:cb:3d:2e:3b:c0:79:e9:2d:df: a2:4c:01:67:5b:3e:89:42:26:43:58:80:01:f1:78:74:bd:22: 0d:05:e9:8b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjExDAcLPHZ8ooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk Y2NhZTc0NzEtYmY4Ny00MDdiLTljOGEtMDA1MjRlZmQzYjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83ehNH3SyiBcR1IXEfSwslIlAtLCnfELQ5Mx srhVc43/3zIUsfFWSh0jguC2Hr3cy8mKtUwUZTs/wu2mbHyfUhd4j497wprWuOSA Hk+vNcybdkDO3F20ik7kLAwxd4Ao/hveyvDGSlEiSxca4lspzpKVCfqyOZEidizR Ta44ocEkm3uKUPtNPBAY2VTm1CncbIotT0+D1HiJ1/IpdkIt8kQp77ugE/tRQ0rF wnXiagaQQQN6rB5Hfaza14T2pARH/tMgVJRtMpsKM1SMVAw0B7CTMsFxqScvmf4a wagFmquyvHJSgZEnDOrYzxRKI/Jeaa+551l55zj3GW9C4JdQCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLZo1uZoMas4MkfejjmQ+aEirmR7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTRkMjVjYmItN2I2NS0z MzRlLWJkMTMtZTdlNThiNzU3NmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCH6pJ9SKN1sXMJNO/yPArNBMw/7lCIqX7YPM3gOEl2HUCyRVMVGs1n pXP9z34Ce8YZ1V+rcdCe3Wt0k49polpXcZ95Fui9uotrUrOFpUuifCd5/ZX3TsXv f2zNEocDnqfIEetq42pqR1k2jz5rvY7HpmgmgNV/B8L46F+ia1FYqKI451ENv7tn lCQHfwetCYxNte7lzbFkA3t01RHTSoC0xOJaOeFFsLvS0FN633n8oAIVBUB4KqOB rX4BAMNd7yJ4jV7M5msEM+nwYWTbknYbnTU7SD0/3JxOtB1Z6hxn+ubLPS47wHnp Ld+iTAFnWz6JQiZDWIAB8Xh0vSINBemL -----END CERTIFICATE-----Generated at Mon Oct 20 10:22:43 2025 by rpki-client