$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c5cb338-e96e-3817-a83f-4c50a4a02840.roa File: 6c5cb338-e96e-3817-a83f-4c50a4a02840.roa (raw, json) Hash identifier: ybOXpph/mSUT+IyVhKVjwGcMTlwTi6To2f8K31jmALU= Subject key identifier: CB:ED:25:42:F2:81:50:70:2E:17:2F:9D:EB:BA:ED:AC:29:69:CB:25 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F52301E36F503E4F151BE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c5cb338-e96e-3817-a83f-4c50a4a02840.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397201 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:30:1e:36:f5:03:e4:f1:51:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=65a77e0e-0ce2-4303-9ad8-aeedbe12a1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:82:36:09:71:0e:86:8d:ce:f0:6e:7d:7e:ec: ea:2d:aa:c1:a5:60:54:d5:8c:11:dd:87:a7:b1:98: 6d:48:4b:8b:55:bd:b7:55:72:b5:87:0e:a1:6e:17: cf:ff:38:28:88:ff:b1:2c:ad:c5:a6:8a:54:97:6c: 36:a1:b9:e2:e8:d0:06:4c:81:c8:19:0e:b0:5d:69: c8:05:1f:7f:df:77:d5:a9:97:f1:cd:5f:6f:11:51: 81:fe:b8:d5:bd:0e:37:d4:b3:c8:2a:85:65:cd:42: 62:7d:ee:b8:99:32:80:7f:15:1a:1e:21:89:aa:d1: cd:65:4d:a9:75:29:5a:5c:96:3f:68:56:18:4e:0e: 0b:b4:6d:49:f8:90:18:7c:d9:62:a7:47:27:73:1f: cf:d6:bb:9c:d7:51:10:0a:b7:da:32:5b:48:7f:e3: 40:60:8e:67:db:a2:97:5f:ea:9c:4b:12:03:99:4e: 85:79:70:34:20:6e:5e:99:d7:fa:eb:0f:28:cc:27: dd:a2:14:5d:c5:a4:93:35:ac:34:57:69:0f:3b:4d: cd:05:8b:ff:6e:f3:96:c3:f8:73:1b:2b:1b:39:cf: 5b:69:36:d6:60:2d:47:ef:67:a6:8d:54:1e:ee:62: 04:7a:a0:bf:42:dd:a9:6e:1b:87:80:e1:c7:60:75: 2c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:ED:25:42:F2:81:50:70:2E:17:2F:9D:EB:BA:ED:AC:29:69:CB:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c5cb338-e96e-3817-a83f-4c50a4a02840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:01:af:32:7e:d1:6c:b2:23:a2:54:c5:c1:50:44:71:40:f5: 2c:86:3f:4e:c0:d5:b1:b4:46:c6:70:71:f2:4d:b6:87:4a:c0: 45:5e:71:3c:a3:90:ad:5a:38:c1:32:ae:0b:c8:5d:e4:7c:2a: d5:6a:c6:77:c5:1c:6c:7f:af:ee:1c:61:b7:17:8a:e4:09:43: 01:27:6a:fc:1f:c9:b4:96:b4:63:bd:50:4e:cc:12:66:cc:2a: c8:a2:0b:00:94:3a:c5:e0:c5:56:f9:df:46:8f:b9:08:67:06: f5:45:98:29:2f:b3:a4:7f:f7:2d:5b:33:f7:d2:b9:fe:78:0a: 90:f4:43:86:aa:49:af:00:bf:32:4c:ed:bb:87:75:37:81:a4: 55:b9:4e:52:56:72:f1:35:32:61:3f:a6:d6:31:e3:ae:af:3b: 49:33:8f:30:10:ff:e7:be:e9:71:a9:45:48:65:51:66:fe:c2: 2c:ff:35:c1:8b:52:85:75:bf:31:23:00:28:94:70:12:2a:46: 9f:1f:0a:f9:a0:27:ef:4b:10:3f:21:0e:5e:fa:41:e9:95:ea: b1:a6:99:0b:13:a4:2d:bb:50:6f:10:f7:ad:c0:aa:25:3c:fb: f5:94:14:64:b2:70:a6:79:54:4b:33:21:03:6a:4c:c2:7a:c6: 6e:f7:f8:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjAeNvUD5PFRvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NjVhNzdlMGUtMGNlMi00MzAzLTlhZDgtYWVlZGJlMTJhMWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYI2CXEOho3O8G59fuzqLarBpWBU1YwR3Yen sZhtSEuLVb23VXK1hw6hbhfP/zgoiP+xLK3FpopUl2w2obni6NAGTIHIGQ6wXWnI BR9/33fVqZfxzV9vEVGB/rjVvQ431LPIKoVlzUJife64mTKAfxUaHiGJqtHNZU2p dSlaXJY/aFYYTg4LtG1J+JAYfNlip0cncx/P1ruc11EQCrfaMltIf+NAYI5n26KX X+qcSxIDmU6FeXA0IG5emdf66w8ozCfdohRdxaSTNaw0V2kPO03NBYv/bvOWw/hz GysbOc9baTbWYC1H72emjVQe7mIEeqC/Qt2pbhuHgOHHYHUs9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMvtJULygVBwLhcvneu67awpacslMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmM1Y2IzMzgtZTk2ZS0z ODE3LWE4M2YtNGM1MGE0YTAyODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB0Aa8yftFssiOiVMXBUERxQPUshj9OwNWxtEbGcHHyTbaHSsBFXnE8 o5CtWjjBMq4LyF3kfCrVasZ3xRxsf6/uHGG3F4rkCUMBJ2r8H8m0lrRjvVBOzBJm zCrIogsAlDrF4MVW+d9Gj7kIZwb1RZgpL7Okf/ctWzP30rn+eAqQ9EOGqkmvAL8y TO27h3U3gaRVuU5SVnLxNTJhP6bWMeOurztJM48wEP/nvulxqUVIZVFm/sIs/zXB i1KFdb8xIwAolHASKkafHwr5oCfvSxA/IQ5e+kHpleqxppkLE6Qtu1BvEPetwKol PPv1lBRksnCmeVRLMyEDakzCesZu9/jr -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:08 2025 by rpki-client