$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78be5fc9-94e1-3f41-9ae3-3a2fbe1774b1.roa File: 78be5fc9-94e1-3f41-9ae3-3a2fbe1774b1.roa (raw, json) Hash identifier: kVHyvXVjSa2OERIet71D0MkILoVfCdvNcuZntOes/O8= Subject key identifier: 19:0A:D7:53:EB:38:5B:52:BE:37:33:DF:63:21:D9:23:36:92:71:24 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F5233985451CF64A94468C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78be5fc9-94e1-3f41-9ae3-3a2fbe1774b1.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 10515 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:33:98:54:51:cf:64:a9:44:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=9ec6c326-a210-4a00-a5bb-bf6163ed9c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0b:c6:df:4c:7e:20:ed:49:2b:dc:5a:6d:f7: 5e:43:35:e7:00:1f:4f:ea:4c:21:0c:9d:7f:34:6f: eb:58:a4:74:3d:db:c9:be:a3:90:a1:61:4d:ce:b6: bc:a2:d0:9a:9a:46:d8:19:15:1e:05:98:1f:0f:61: 61:bf:c9:c7:af:51:f3:06:78:01:cd:16:93:a9:3a: b1:ed:ec:2c:c3:75:43:0b:4d:a5:02:16:c0:3f:b1: cc:89:a6:a9:82:27:0a:82:40:0d:81:f2:bf:06:14: f9:e9:2e:1e:34:72:c1:7d:b5:f6:77:1f:2d:6f:75: ce:59:cd:87:cf:02:2e:bc:17:5e:4c:bd:33:44:c7: d9:bb:35:af:ed:4a:e6:2a:34:5b:86:d8:11:64:fb: 98:d5:12:66:70:1d:05:4d:8e:d8:79:1e:b4:65:65: 36:4d:a4:4d:30:e1:86:55:2a:60:84:76:d6:83:55: 8d:00:21:51:9a:dd:86:fc:32:03:e1:a9:a7:29:cc: c3:a9:b9:78:c8:82:1a:9e:db:57:b4:be:c3:4d:0c: b7:37:31:cb:ab:4c:c5:ee:88:0d:9f:cf:df:ca:ec: 95:ac:36:43:60:c9:e5:d4:72:08:54:c8:a8:80:b8: 8b:61:18:df:dc:86:cd:61:00:6d:2c:d8:f2:b9:2c: 39:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0A:D7:53:EB:38:5B:52:BE:37:33:DF:63:21:D9:23:36:92:71:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78be5fc9-94e1-3f41-9ae3-3a2fbe1774b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:91:6c:70:e7:98:99:e7:a3:f2:9d:4e:d7:ad:97:07:a2:36: f1:90:b2:6e:37:3e:90:5d:e6:b1:75:ff:86:72:62:c4:88:da: 4e:e0:8c:86:34:b4:a1:83:6f:c8:48:cd:38:56:b3:f9:f8:12: 8a:b1:bb:5b:00:e6:7b:db:ef:65:c4:2e:9d:90:0a:8a:30:fd: de:c7:ae:bd:a7:38:11:40:69:4c:5e:29:00:1a:0e:d4:83:67: df:02:15:89:00:59:ec:52:2e:f0:09:73:a3:7c:9f:a4:ad:99: 23:c7:e1:88:0e:67:67:f4:5a:5c:f8:5a:39:1b:75:68:36:dc: bf:51:ed:4e:71:f4:ca:a2:18:5b:6e:39:38:cf:09:09:59:e5: c5:9b:ab:7b:6f:99:f2:28:28:db:13:33:d1:35:25:5d:e2:48: 4c:21:29:e2:f8:5f:1c:72:18:c5:21:77:ac:83:d0:27:a2:78: e5:47:89:25:93:c8:d7:7a:e9:f7:64:57:64:d9:ee:a6:a5:47: 58:f6:07:89:09:b8:9f:d5:c9:dd:2b:41:d9:d0:4c:b0:09:e4: 84:4d:c5:df:8c:ea:ef:f3:56:1e:75:5d:02:51:d2:73:a3:c7: 13:6c:aa:29:5c:8e:27:7b:2b:2a:e2:e8:b3:ab:fb:cd:dd:f0: 6b:39:b7:cb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjOYVFHPZKlEaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk OWVjNmMzMjYtYTIxMC00YTAwLWE1YmItYmY2MTYzZWQ5YzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngvG30x+IO1JK9xabfdeQzXnAB9P6kwhDJ1/ NG/rWKR0PdvJvqOQoWFNzra8otCamkbYGRUeBZgfD2Fhv8nHr1HzBngBzRaTqTqx 7ewsw3VDC02lAhbAP7HMiaapgicKgkANgfK/BhT56S4eNHLBfbX2dx8tb3XOWc2H zwIuvBdeTL0zRMfZuzWv7UrmKjRbhtgRZPuY1RJmcB0FTY7YeR60ZWU2TaRNMOGG VSpghHbWg1WNACFRmt2G/DID4amnKczDqbl4yIIanttXtL7DTQy3NzHLq0zF7ogN n8/fyuyVrDZDYMnl1HIIVMiogLiLYRjf3IbNYQBtLNjyuSw5XwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBkK11PrOFtSvjcz32Mh2SM2knEkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzhiZTVmYzktOTRlMS0z ZjQxLTlhZTMtM2EyZmJlMTc3NGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB5kWxw55iZ56PynU7XrZcHojbxkLJuNz6QXeaxdf+GcmLEiNpO4IyG NLShg2/ISM04VrP5+BKKsbtbAOZ72+9lxC6dkAqKMP3ex669pzgRQGlMXikAGg7U g2ffAhWJAFnsUi7wCXOjfJ+krZkjx+GIDmdn9Fpc+Fo5G3VoNty/Ue1OcfTKohhb bjk4zwkJWeXFm6t7b5nyKCjbEzPRNSVd4khMISni+F8cchjFIXesg9AnonjlR4kl k8jXeun3ZFdk2e6mpUdY9geJCbif1cndK0HZ0EywCeSETcXfjOrv81YedV0CUdJz o8cTbKopXI4neysq4uizq/vN3fBrObfL -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:40 2025 by rpki-client