$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5559f029-47d4-3b1d-8cec-099d16206891.roa File: 5559f029-47d4-3b1d-8cec-099d16206891.roa (raw, json) Hash identifier: RaD1lt4R+Lx9m/HDuUPn3OpDdbfstDEsU+Jf96Z2sKU= Subject key identifier: 69:09:93:0C:28:1A:B1:81:E0:02:FC:7F:7A:AC:22:26:62:C0:EF:1A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523CA3209C6210B116CC80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5559f029-47d4-3b1d-8cec-099d16206891.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396595 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3c:a3:20:9c:62:10:b1:16:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=07d7eb17-ecd2-489d-8572-a70623df7e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:68:24:67:6f:57:0e:a1:2a:8c:94:28:5f:a0: 31:b6:a3:5b:49:db:e6:a0:6e:a2:43:c1:e1:31:5f: ba:95:b0:ae:f8:e0:9b:a2:18:cb:16:0a:55:af:e7: 7e:6a:0e:ae:6c:55:f9:f4:d1:5e:ca:e6:dc:dd:a1: f2:fe:96:be:e4:21:97:65:91:30:38:d6:52:da:df: ec:1a:21:0a:7f:a3:68:6f:c1:04:7f:7a:b0:10:cb: 81:3f:bd:20:6a:04:14:d4:3e:70:7f:dd:41:45:6c: 31:b4:ab:6e:1c:68:39:5a:40:4a:45:b5:43:b2:8d: 43:7e:69:87:7c:c1:95:f2:c7:2d:9f:52:57:e2:bf: 61:2a:8c:a0:9d:81:4e:37:d6:cd:45:38:84:39:fc: b9:58:6f:44:d8:84:11:5a:e9:7b:85:78:40:0d:0c: 07:51:0f:73:c1:69:49:98:79:94:6b:bd:fa:40:38: b5:31:63:cd:19:3f:c8:e7:28:c2:1b:67:cd:32:e4: 0e:91:09:21:bb:bc:41:4f:33:9a:30:dd:08:e7:ae: 26:89:ef:01:97:0e:92:9d:31:b4:5b:1d:cf:68:81: bf:3d:dc:bb:e2:97:f7:a2:74:32:d0:55:0c:ff:62: 83:69:e1:72:a8:6c:4e:2e:76:63:5f:c7:0d:ef:3b: c5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:09:93:0C:28:1A:B1:81:E0:02:FC:7F:7A:AC:22:26:62:C0:EF:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5559f029-47d4-3b1d-8cec-099d16206891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:4e:e7:79:c5:08:8b:9b:c3:47:0b:66:dd:cc:5a:38:b6:49: 36:95:39:62:c1:57:50:8e:3e:80:87:9c:d8:32:d3:54:f3:86: 17:83:63:2a:8c:cd:2b:24:d1:02:a4:5d:fa:d3:7c:b1:af:aa: 91:73:8f:6c:58:94:f9:c8:4f:c2:3b:e5:c4:5b:62:aa:a9:97: cf:56:2e:38:36:42:d3:6e:3e:38:f6:41:b8:c0:b3:a2:23:08: a1:bf:e0:f9:c4:c2:3b:2f:48:78:80:7c:03:bf:53:7d:d9:3f: 84:b5:f8:e1:6e:d0:28:ad:b6:ad:f2:0c:48:fa:1b:b0:0e:68: 22:bd:2b:ea:db:1a:b7:5f:af:39:3b:5d:f9:7b:0c:92:09:71: 5d:6f:40:c6:9f:75:81:af:0a:f8:e3:9d:92:f3:ec:de:ed:04: 53:dc:c8:6f:b3:25:ce:e4:f5:32:72:79:06:5c:67:33:b6:15: 98:11:c5:83:cd:8a:3b:81:51:ad:76:4f:12:38:1b:20:5b:de: 84:d4:7a:ac:6d:9b:f3:02:2b:ac:85:fd:f7:91:30:2a:c2:71: 80:8b:3e:e9:a3:8a:37:0d:41:d1:56:a2:21:80:3a:e5:c9:de: 29:05:27:99:5a:10:ed:ec:69:0e:af:cf:8d:ee:b3:92:94:82: 7b:59:26:b8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjyjIJxiELEWzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MDdkN2ViMTctZWNkMi00ODlkLTg1NzItYTcwNjIzZGY3ZTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2gkZ29XDqEqjJQoX6AxtqNbSdvmoG6iQ8Hh MV+6lbCu+OCbohjLFgpVr+d+ag6ubFX59NFeyubc3aHy/pa+5CGXZZEwONZS2t/s GiEKf6Nob8EEf3qwEMuBP70gagQU1D5wf91BRWwxtKtuHGg5WkBKRbVDso1DfmmH fMGV8sctn1JX4r9hKoygnYFON9bNRTiEOfy5WG9E2IQRWul7hXhADQwHUQ9zwWlJ mHmUa736QDi1MWPNGT/I5yjCG2fNMuQOkQkhu7xBTzOaMN0I564mie8Blw6SnTG0 Wx3PaIG/Pdy74pf3onQy0FUM/2KDaeFyqGxOLnZjX8cN7zvFSQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGkJkwwoGrGB4AL8f3qsIiZiwO8aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTU1OWYwMjktNDdkNC0z YjFkLThjZWMtMDk5ZDE2MjA2ODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB2Tud5xQiLm8NHC2bdzFo4tkk2lTliwVdQjj6Ah5zYMtNU84YXg2Mq jM0rJNECpF3603yxr6qRc49sWJT5yE/CO+XEW2KqqZfPVi44NkLTbj449kG4wLOi Iwihv+D5xMI7L0h4gHwDv1N92T+EtfjhbtAorbat8gxI+huwDmgivSvq2xq3X685 O135ewySCXFdb0DGn3WBrwr4452S8+ze7QRT3MhvsyXO5PUycnkGXGczthWYEcWD zYo7gVGtdk8SOBsgW96E1HqsbZvzAiushf33kTAqwnGAiz7po4o3DUHRVqIhgDrl yd4pBSeZWhDt7GkOr8+N7rOSlIJ7WSa4 -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:48 2025 by rpki-client