$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a4cf354-4dcb-3b5b-b906-086b5e6b1b11.roa File: 6a4cf354-4dcb-3b5b-b906-086b5e6b1b11.roa (raw, json) Hash identifier: qxsQdwaBE+Mk+AlDAPde1Wkd/r+1J/9QsE81JpyRsys= Subject key identifier: D0:22:53:C2:15:3D:2D:07:7D:DA:7E:00:54:0E:8C:80:3E:36:33:5A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F5239C9F91E064FC94BA280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a4cf354-4dcb-3b5b-b906-086b5e6b1b11.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396591 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:39:c9:f9:1e:06:4f:c9:4b:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=0124007c-aa4c-48a8-a67f-c41f6361a0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4a:5f:b0:b9:d6:67:43:f3:df:17:34:09:77: 4b:6b:ee:46:5e:cb:5e:a9:14:ac:2c:54:71:eb:9b: 42:7e:5a:a6:65:1e:31:e4:51:2f:87:8c:ef:dc:a8: 4c:eb:e3:5c:95:53:00:7f:d3:9f:44:56:24:79:19: e1:95:26:88:60:e4:9e:5c:c0:d9:82:0b:2e:b4:00: 4a:9c:b1:10:7c:ef:8c:4a:48:a8:46:2e:81:db:57: 9a:89:88:bb:0a:df:4b:82:e5:74:1e:6d:13:fb:f1: 72:c0:ca:f8:4a:e6:a9:c4:92:13:5e:a3:54:c7:92: 23:2c:ad:a0:83:06:d0:1c:30:c7:c3:62:6c:70:4b: a8:5c:ae:05:08:fb:41:de:90:aa:4e:d8:b5:67:cc: e3:8f:d5:c8:34:5a:52:67:d0:80:53:90:16:5f:33: 87:82:4e:1b:c6:e8:51:7b:24:27:dd:bb:21:f7:f5: 7e:9d:e0:94:b2:47:05:fd:b5:3f:53:a9:4c:66:03: 9f:a7:18:fe:50:74:c0:96:d3:91:b2:1c:9a:02:77: df:bd:1e:b9:0f:3d:62:d4:3e:d6:aa:44:3f:91:f9: 6d:9c:2e:ac:a1:55:56:43:6e:94:15:d2:7f:0b:de: ad:52:59:35:1b:71:d7:d9:60:19:5b:7b:6b:2f:95: 77:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:22:53:C2:15:3D:2D:07:7D:DA:7E:00:54:0E:8C:80:3E:36:33:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a4cf354-4dcb-3b5b-b906-086b5e6b1b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a0:b3:a1:03:70:85:9f:eb:b8:8f:c3:96:95:4c:9d:61:4e: 6a:8b:0c:b0:e6:16:c8:81:93:e5:19:b7:10:c1:76:d7:ce:52: 64:22:cd:c0:3a:94:05:a5:6a:38:4b:4c:bc:8b:2e:d6:62:15: 84:00:41:8a:14:fb:49:41:18:df:11:6a:73:39:6a:b3:5c:ea: d1:34:cf:ba:67:de:67:35:76:00:22:0a:85:cd:b6:6e:1d:df: 9b:eb:f9:6c:c3:3b:15:86:d1:03:bb:a0:0d:a2:4c:14:4e:53: 3d:7a:3b:ae:f0:3f:bb:4b:af:b5:af:13:9e:97:71:f2:36:9c: f5:12:3e:78:45:95:61:5d:75:fb:de:72:1b:0b:86:3d:e7:10: 86:8c:01:6f:05:9f:30:2e:7b:e5:c2:4f:eb:0e:b0:ff:ee:69: 4a:e9:2f:20:fb:e8:16:fa:c4:50:15:48:1a:6c:58:ac:d8:82: 49:fb:88:02:94:5e:2d:0f:f8:e0:68:40:c9:5e:8f:25:f5:ec: 14:61:2b:b3:c7:24:c8:62:38:4c:39:28:fb:2d:7a:4f:02:65: 63:14:d0:b9:46:54:a3:2a:73:20:5b:0d:48:bb:5a:ca:87:57: 72:a2:8f:87:5f:69:79:ac:cf:9e:1c:b4:24:a1:81:34:70:e9: eb:5b:05:ca -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjnJ+R4GT8lLooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MDEyNDAwN2MtYWE0Yy00OGE4LWE2N2YtYzQxZjYzNjFhMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UpfsLnWZ0Pz3xc0CXdLa+5GXsteqRSsLFRx 65tCflqmZR4x5FEvh4zv3KhM6+NclVMAf9OfRFYkeRnhlSaIYOSeXMDZggsutABK nLEQfO+MSkioRi6B21eaiYi7Ct9LguV0Hm0T+/FywMr4SuapxJITXqNUx5IjLK2g gwbQHDDHw2JscEuoXK4FCPtB3pCqTti1Z8zjj9XINFpSZ9CAU5AWXzOHgk4bxuhR eyQn3bsh9/V+neCUskcF/bU/U6lMZgOfpxj+UHTAltORshyaAnffvR65Dz1i1D7W qkQ/kfltnC6soVVWQ26UFdJ/C96tUlk1G3HX2WAZW3trL5V3BQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNAiU8IVPS0Hfdp+AFQOjIA+NjNaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmE0Y2YzNTQtNGRjYi0z YjViLWI5MDYtMDg2YjVlNmIxYjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBnoLOhA3CFn+u4j8OWlUydYU5qiwyw5hbIgZPlGbcQwXbXzlJkIs3A OpQFpWo4S0y8iy7WYhWEAEGKFPtJQRjfEWpzOWqzXOrRNM+6Z95nNXYAIgqFzbZu Hd+b6/lswzsVhtEDu6ANokwUTlM9ejuu8D+7S6+1rxOel3HyNpz1Ej54RZVhXXX7 3nIbC4Y95xCGjAFvBZ8wLnvlwk/rDrD/7mlK6S8g++gW+sRQFUgabFis2IJJ+4gC lF4tD/jgaEDJXo8l9ewUYSuzxyTIYjhMOSj7LXpPAmVjFNC5RlSjKnMgWw1Iu1rK h1dyoo+HX2l5rM+eHLQkoYE0cOnrWwXK -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:48 2025 by rpki-client