$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/574a93c6-a18f-3df5-a131-c283150c7482.roa File: 574a93c6-a18f-3df5-a131-c283150c7482.roa (raw, json) Hash identifier: jjn274NgYgF3378+SYVDty06i+yU5J93Y3Kruh3OXWE= Subject key identifier: 82:49:B5:48:AC:A3:34:24:01:BD:83:F6:79:2C:15:63:E7:0F:E1:CA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F5235100416E86C9CF4EF00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/574a93c6-a18f-3df5-a131-c283150c7482.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396594 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:35:10:04:16:e8:6c:9c:f4:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=ed3bc164-bf6d-4359-9b58-8c1a64bde498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3a:4e:17:d4:e2:64:82:b0:01:66:0b:f6:64: 26:f8:35:80:ed:1f:60:81:e5:e6:58:9e:aa:b0:45: 0c:d9:cf:a2:db:1d:c1:2a:d3:a6:3a:88:3f:36:74: 68:8b:aa:51:91:90:54:e0:9e:d9:96:6e:7c:e2:66: fb:0b:25:66:03:c5:43:1c:1c:e2:28:4e:b5:77:8e: b9:55:07:90:e7:ef:fd:4f:3f:e8:1f:7e:06:eb:31: bc:31:5d:3a:a9:64:31:25:af:eb:31:5c:4e:6d:b6: 1e:42:05:e6:94:fa:9f:33:53:61:db:34:dd:f1:40: 0a:8b:fe:6e:62:38:0f:8d:31:25:47:9d:2c:f1:32: 6f:8c:d5:f6:dd:af:27:f7:aa:18:2a:f7:aa:08:b4: 17:22:bd:53:73:03:dc:9d:77:70:95:5d:45:dc:e7: 10:57:67:99:f3:84:fa:98:3a:6e:42:5a:e3:28:06: ec:3e:81:af:b1:15:02:85:7b:0a:e3:6e:73:4b:e6: 37:8f:fd:ff:77:93:21:07:61:ab:cd:97:ee:55:54: bf:32:5c:5f:03:7d:85:49:e7:27:c3:56:8e:95:6a: 2b:b3:73:8c:ef:03:96:25:f1:30:2d:27:8a:30:6a: 54:3f:fa:c4:1e:a0:66:e4:39:e4:5f:55:ce:64:d0: 51:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:49:B5:48:AC:A3:34:24:01:BD:83:F6:79:2C:15:63:E7:0F:E1:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/574a93c6-a18f-3df5-a131-c283150c7482.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:11:5c:69:28:01:6b:22:06:82:ef:d8:0a:f2:3c:b1:6f:ac: 21:c8:16:a1:36:05:e3:b2:9b:1e:7e:90:9e:47:51:0c:54:8e: b6:b0:1a:3b:5b:cb:33:39:79:0a:34:60:44:b3:6f:37:e3:65: 8a:be:8f:e3:c6:a3:56:80:63:a0:8e:0f:29:5f:e7:9e:f7:b5: 5b:0d:4e:b1:94:8b:04:2e:96:f9:2a:b7:50:78:45:ff:df:41: 61:e0:4b:b8:c7:ce:d3:6d:cf:df:29:26:02:94:2b:5f:36:4a: 79:b2:16:29:b1:61:e4:21:2b:b9:eb:a7:91:8a:6b:b6:9b:c0: d5:c0:29:1f:b9:c3:19:e2:37:86:da:61:08:03:b0:c3:ae:8e: 20:93:51:2f:5e:14:d9:59:f6:98:0c:a2:c4:ea:6b:a7:9d:ff: cc:0d:6d:fb:c9:26:54:08:57:93:15:32:be:f0:c8:bc:ee:ee: d2:c7:a9:2a:1b:ca:88:27:c6:5d:82:59:44:09:4b:da:48:ec: 31:a8:9d:5a:1f:df:44:c7:81:99:d5:f0:69:bf:be:83:4b:d1: d5:ad:19:e1:e0:72:8a:fc:50:b8:8d:8e:e9:c2:e5:f4:e8:70: 95:23:4d:89:0c:e5:84:f3:b2:50:ae:07:d3:a0:31:40:69:ca: db:86:ab:90 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjUQBBbobJz07wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZWQzYmMxNjQtYmY2ZC00MzU5LTliNTgtOGMxYTY0YmRlNDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDpOF9TiZIKwAWYL9mQm+DWA7R9ggeXmWJ6q sEUM2c+i2x3BKtOmOog/NnRoi6pRkZBU4J7Zlm584mb7CyVmA8VDHBziKE61d465 VQeQ5+/9Tz/oH34G6zG8MV06qWQxJa/rMVxObbYeQgXmlPqfM1Nh2zTd8UAKi/5u YjgPjTElR50s8TJvjNX23a8n96oYKveqCLQXIr1TcwPcnXdwlV1F3OcQV2eZ84T6 mDpuQlrjKAbsPoGvsRUChXsK425zS+Y3j/3/d5MhB2GrzZfuVVS/MlxfA32FSecn w1aOlWors3OM7wOWJfEwLSeKMGpUP/rEHqBm5DnkX1XOZNBRxQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIJJtUisozQkAb2D9nksFWPnD+HKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTc0YTkzYzYtYTE4Zi0z ZGY1LWExMzEtYzI4MzE1MGM3NDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBFEVxpKAFrIgaC79gK8jyxb6whyBahNgXjspsefpCeR1EMVI62sBo7 W8szOXkKNGBEs28342WKvo/jxqNWgGOgjg8pX+ee97VbDU6xlIsELpb5KrdQeEX/ 30Fh4Eu4x87Tbc/fKSYClCtfNkp5shYpsWHkISu566eRimu2m8DVwCkfucMZ4jeG 2mEIA7DDro4gk1EvXhTZWfaYDKLE6munnf/MDW37ySZUCFeTFTK+8Mi87u7Sx6kq G8qIJ8ZdgllECUvaSOwxqJ1aH99Ex4GZ1fBpv76DS9HVrRnh4HKK/FC4jY7pwuX0 6HCVI02JDOWE87JQrgfToDFAacrbhquQ -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:09 2025 by rpki-client