$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa4817d-b49c-314b-a92d-17a0633781f1.roa File: 5aa4817d-b49c-314b-a92d-17a0633781f1.roa (raw, json) Hash identifier: p9EUTj0J4iLdi5BX0l/VcGvhRm6w1z+LmxEg+xD8KBo= Subject key identifier: 14:D3:1C:8E:19:1B:66:21:CE:72:79:C7:9B:3F:85:4E:E2:5D:E7:ED Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F52385D252FEF0168E2BDC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa4817d-b49c-314b-a92d-17a0633781f1.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396549 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:38:5d:25:2f:ef:01:68:e2:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=3710456b-caee-49f2-b86e-ace40e4c6ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5a:b6:f1:48:7a:db:31:63:cb:62:0d:46:5a: 62:28:57:6f:cf:57:99:35:4d:a5:96:6d:c2:09:4c: 6b:37:45:70:58:c8:8e:d3:73:57:b6:d3:0d:c4:69: 28:04:65:c4:bb:f2:59:a0:ba:94:75:50:4b:fc:69: b4:c5:7f:f9:33:c4:83:fd:5b:cb:e5:97:f9:fd:57: 88:68:5d:dd:06:fd:01:8f:ac:1e:98:30:d8:27:8a: 1d:5c:8d:06:b6:7b:03:ec:ac:a3:98:2f:67:4c:29: 83:43:93:d8:da:6b:2f:b9:d3:0e:de:d6:e4:6e:36: e4:49:b0:ec:22:ec:92:c0:a4:66:2d:c9:4e:f8:7b: 2d:13:12:c7:ad:75:a8:eb:62:6d:f3:03:ca:96:59: 23:ed:f9:9f:f4:6a:31:11:78:78:0f:a4:50:4a:5e: e1:22:07:3c:d6:e9:d7:3b:c6:7c:b5:84:45:e3:fa: 5f:88:8f:3a:87:b2:c5:22:c7:b1:cd:32:37:6c:8b: 34:48:1f:ec:59:a7:09:0c:1c:fc:b2:d6:21:d6:70: e3:d6:e3:25:5a:26:ac:31:54:aa:60:89:ba:78:74: 80:fb:0d:57:62:fd:8d:a1:cc:94:16:83:ba:a3:f6: a8:e7:5e:6e:35:2b:f9:a0:f3:99:5e:5a:1e:d0:6e: 0b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D3:1C:8E:19:1B:66:21:CE:72:79:C7:9B:3F:85:4E:E2:5D:E7:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa4817d-b49c-314b-a92d-17a0633781f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d0:9d:8f:f4:68:d5:65:35:bd:0b:8a:07:fb:74:2d:ba:43: a8:64:55:8d:8a:96:68:03:91:81:5a:1c:5b:6a:b4:11:e6:72: b0:ec:2b:60:a4:ea:bf:39:fc:56:6f:f6:f6:b4:48:54:0e:f9: 56:ad:d1:05:82:0e:1b:1c:43:aa:ec:88:55:d0:09:77:2c:32: c2:85:e5:7c:a5:f8:fc:e9:69:29:89:91:bb:61:d9:8b:d3:db: c9:86:40:ad:55:e8:b8:22:94:f2:14:ab:e9:76:c7:42:1c:67: b0:cf:87:49:39:99:74:fb:a2:da:36:30:54:5a:4c:34:9d:d3: 94:37:0f:06:34:7b:75:4f:83:5e:4f:2a:26:a3:b4:bb:2a:39: c5:83:1a:1f:3d:25:48:5f:95:3b:a4:6c:6f:23:6f:0b:90:30: 1d:10:ae:d0:fe:d4:6e:ef:36:2c:4a:01:22:3c:64:40:53:2a: af:f1:1f:e6:08:ae:f4:48:1b:3f:c1:06:f9:dd:65:46:ea:c8: 92:ae:d1:7b:f0:7c:db:22:4b:81:bf:91:59:67:ac:8b:32:21: 4c:79:1f:dc:82:a2:af:54:ed:7c:b1:55:bc:5c:cf:d1:f9:dd: 56:b3:d0:b2:18:c9:b3:54:4d:c0:a8:9d:22:50:1b:6d:64:85: 2f:99:af:e9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjhdJS/vAWjivcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MzcxMDQ1NmItY2FlZS00OWYyLWI4NmUtYWNlNDBlNGM2Y2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Vq28Uh62zFjy2INRlpiKFdvz1eZNU2llm3C CUxrN0VwWMiO03NXttMNxGkoBGXEu/JZoLqUdVBL/Gm0xX/5M8SD/VvL5Zf5/VeI aF3dBv0Bj6wemDDYJ4odXI0GtnsD7KyjmC9nTCmDQ5PY2msvudMO3tbkbjbkSbDs IuySwKRmLclO+HstExLHrXWo62Jt8wPKllkj7fmf9GoxEXh4D6RQSl7hIgc81unX O8Z8tYRF4/pfiI86h7LFIsexzTI3bIs0SB/sWacJDBz8stYh1nDj1uMlWiasMVSq YIm6eHSA+w1XYv2NocyUFoO6o/ao515uNSv5oPOZXloe0G4LSwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBTTHI4ZG2YhznJ5x5s/hU7iXeftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWFhNDgxN2QtYjQ5Yy0z MTRiLWE5MmQtMTdhMDYzMzc4MWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBO0J2P9GjVZTW9C4oH+3QtukOoZFWNipZoA5GBWhxbarQR5nKw7Ctg pOq/OfxWb/b2tEhUDvlWrdEFgg4bHEOq7IhV0Al3LDLCheV8pfj86WkpiZG7YdmL 09vJhkCtVei4IpTyFKvpdsdCHGewz4dJOZl0+6LaNjBUWkw0ndOUNw8GNHt1T4Ne Tyomo7S7KjnFgxofPSVIX5U7pGxvI28LkDAdEK7Q/tRu7zYsSgEiPGRAUyqv8R/m CK70SBs/wQb53WVG6siSrtF78HzbIkuBv5FZZ6yLMiFMeR/cgqKvVO18sVW8XM/R +d1Ws9CyGMmzVE3AqJ0iUBttZIUvma/p -----END CERTIFICATE-----Generated at Mon Oct 20 10:22:38 2025 by rpki-client