$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68c468d2-bbdd-3e54-8fe0-cd566f21a8f4.roa File: 68c468d2-bbdd-3e54-8fe0-cd566f21a8f4.roa (raw, json) Hash identifier: Gm8//rrT7lLlUwfznAY8sLMkuXfjDRoHfTvxg/Fbx+w= Subject key identifier: 42:8E:DA:74:18:28:F5:A9:9F:D1:23:55:81:B7:A7:04:18:57:38:F3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F5236D054F1D9685256C6C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68c468d2-bbdd-3e54-8fe0-cd566f21a8f4.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 22547 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:36:d0:54:f1:d9:68:52:56:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=1f77c874-e586-4b12-830b-5c2bb1556742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:90:4f:f1:b4:8b:ce:be:c1:9b:0e:83:0e:73: 69:dc:29:40:7a:67:d5:3f:f8:29:fd:64:89:60:b1: 36:c9:7e:79:f5:94:84:a2:9f:98:31:c5:7b:62:f6: 01:72:36:ea:32:1b:86:e0:2f:b7:d6:26:87:14:94: f2:59:ec:66:6b:f9:ba:60:cf:1d:ac:79:34:8b:ef: 35:3a:7d:06:45:ca:2d:b7:7a:1d:2a:55:03:bc:ed: b4:ff:0c:1c:0e:75:f0:78:ea:60:81:d8:eb:65:ea: ca:5f:c5:9b:31:ea:61:14:d8:cf:5c:c3:8b:1f:b5: fe:ef:00:f1:88:de:c8:48:56:8c:bb:68:e1:29:34: 42:74:b7:f3:13:e0:20:82:a9:0c:83:8d:73:17:48: 85:b4:43:3e:7d:72:09:b9:d3:c6:8a:35:c7:63:92: 4f:a6:e9:db:a9:8a:49:6f:d0:ce:83:af:59:04:f5: d6:d6:1d:2e:74:50:22:20:e2:88:c4:ff:b1:71:09: f2:48:8d:4e:64:06:83:f8:48:8a:e4:0f:1a:c9:3d: 3d:c0:55:76:aa:4d:1d:47:d6:83:68:7f:2c:9b:8f: 96:1e:ee:c7:31:c4:6e:61:57:98:37:93:2a:2a:a4: 37:26:53:18:14:92:08:6a:ee:1e:54:7b:3c:f8:81: 51:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8E:DA:74:18:28:F5:A9:9F:D1:23:55:81:B7:A7:04:18:57:38:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68c468d2-bbdd-3e54-8fe0-cd566f21a8f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:73:e9:53:2e:d6:57:71:81:fd:70:97:81:ca:d2:61:0e:b1: 2f:27:8c:8c:fc:55:d4:23:fa:8f:4d:e5:bb:80:2a:2d:eb:b6: a8:68:bf:01:37:79:7e:04:f6:92:87:da:14:9b:50:78:6b:19: f1:ff:03:6f:8f:0c:75:97:62:c5:94:31:f4:9f:79:3d:96:11: 84:8c:a4:fa:eb:0e:53:85:da:73:33:b2:7d:ef:08:2b:dc:f0: 22:58:cb:75:08:d7:90:31:32:c1:89:5c:a6:48:a9:fb:d6:37: b5:84:c5:7e:f2:92:73:fb:ee:00:d7:81:e8:56:93:e7:19:b6: 3b:39:74:b3:7f:78:2d:6e:0b:20:b2:da:57:4e:8b:93:79:f2: f7:9d:70:8d:6d:b4:0c:df:9c:1e:ae:4a:54:08:7e:1d:80:3c: b7:9e:2f:a6:42:0a:82:c7:bd:5d:b0:a8:0b:10:9a:9b:5a:de: a7:bd:ee:b7:96:ae:46:9c:9d:e3:b3:90:21:ea:42:e3:d3:a3: 10:a7:a2:54:f0:92:9a:84:e8:1e:5a:32:d5:18:da:dc:c6:a9: 41:d7:3d:1e:02:ab:ef:4b:85:04:d2:e7:74:8d:4d:26:d0:48: 20:a0:59:45:bc:54:d2:2d:87:8a:6c:a8:f6:b8:0a:eb:97:b7: 33:90:69:b2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjbQVPHZaFJWxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MWY3N2M4NzQtZTU4Ni00YjEyLTgzMGItNWMyYmIxNTU2NzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5BP8bSLzr7Bmw6DDnNp3ClAemfVP/gp/WSJ YLE2yX559ZSEop+YMcV7YvYBcjbqMhuG4C+31iaHFJTyWexma/m6YM8drHk0i+81 On0GRcott3odKlUDvO20/wwcDnXweOpggdjrZerKX8WbMephFNjPXMOLH7X+7wDx iN7ISFaMu2jhKTRCdLfzE+AggqkMg41zF0iFtEM+fXIJudPGijXHY5JPpunbqYpJ b9DOg69ZBPXW1h0udFAiIOKIxP+xcQnySI1OZAaD+EiK5A8ayT09wFV2qk0dR9aD aH8sm4+WHu7HMcRuYVeYN5MqKqQ3JlMYFJIIau4eVHs8+IFRWwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEKO2nQYKPWpn9EjVYG3pwQYVzjzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjhjNDY4ZDItYmJkZC0z ZTU0LThmZTAtY2Q1NjZmMjFhOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBrc+lTLtZXcYH9cJeBytJhDrEvJ4yM/FXUI/qPTeW7gCot67aoaL8B N3l+BPaSh9oUm1B4axnx/wNvjwx1l2LFlDH0n3k9lhGEjKT66w5ThdpzM7J97wgr 3PAiWMt1CNeQMTLBiVymSKn71je1hMV+8pJz++4A14HoVpPnGbY7OXSzf3gtbgsg stpXTouTefL3nXCNbbQM35werkpUCH4dgDy3ni+mQgqCx71dsKgLEJqbWt6nve63 lq5GnJ3js5Ah6kLj06MQp6JU8JKahOgeWjLVGNrcxqlB1z0eAqvvS4UE0ud0jU0m 0EggoFlFvFTSLYeKbKj2uArrl7czkGmy -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:38 2025 by rpki-client