$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8601d6b0-277f-3107-bcc4-c8b1dee37989.roa File: 8601d6b0-277f-3107-bcc4-c8b1dee37989.roa (raw, json) Hash identifier: 6sTfW8zjljmxAhQ73Yz2ycnwZmJXeTZUbQbqwkVMANg= Subject key identifier: C6:B7:51:B6:62:48:6B:86:33:7A:E1:BA:83:B7:1A:22:AD:DB:4F:B3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523C8325E1CE487317ED00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8601d6b0-277f-3107-bcc4-c8b1dee37989.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396560 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3c:83:25:e1:ce:48:73:17:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=25e537f3-a014-4ca5-90be-d4d79c75bc4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:10:8c:38:57:bc:70:b0:80:9b:b5:8d:5d:d6: 3b:40:e7:9d:32:ad:58:19:ec:ab:d3:2c:8a:f1:82: bc:a9:f8:bf:8e:96:e2:b3:82:70:8b:4c:33:b4:13: 2a:d3:d1:ac:86:c8:79:c0:8c:c5:eb:aa:d4:99:ab: 43:6d:16:b2:7b:d9:9c:36:37:07:6c:7f:ee:79:1c: fc:5f:db:95:cf:b1:af:cc:9d:23:02:84:55:ce:e0: 6c:63:cf:2b:21:48:63:d0:8b:4f:18:e5:aa:ad:b5: 42:81:0e:43:cf:1e:b2:26:08:d4:5b:65:74:30:c2: 59:bd:58:f0:1a:fb:f2:06:c3:9c:0b:16:28:f5:f1: dd:1f:cb:5e:10:28:f4:48:30:1e:ac:36:78:b8:f4: 5f:bf:14:23:1d:d4:ed:4e:30:8e:aa:44:f5:7b:9d: 99:a9:52:ca:0d:98:03:25:93:09:ac:c6:df:fe:a6: 0d:68:ed:cd:f3:31:55:5d:ee:e0:cd:a3:48:3d:dc: ff:7c:ff:3b:22:dc:ba:5e:2a:7b:d3:fd:79:8a:ce: 2b:1f:43:d7:3e:cf:fa:1c:35:19:1f:46:46:08:90: 66:9b:37:de:49:a5:53:80:df:69:dc:c6:b6:b2:d4: c7:8f:0d:6c:5a:d0:c1:32:e6:06:9a:2c:9b:17:da: 42:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B7:51:B6:62:48:6B:86:33:7A:E1:BA:83:B7:1A:22:AD:DB:4F:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8601d6b0-277f-3107-bcc4-c8b1dee37989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:da:9b:5d:3c:66:6e:58:98:c4:39:a3:17:e1:d4:df:f5:1e: d1:40:44:76:77:b1:3c:01:a1:10:9b:44:8a:c2:a0:32:28:f1: 30:31:a6:81:89:51:af:4d:32:75:8b:0f:03:f6:7a:b4:12:ed: ab:64:04:eb:28:3c:f0:5e:8b:a8:42:65:23:e7:07:dc:b7:67: 6c:77:2c:98:58:fd:d4:50:41:8f:d1:82:bd:4d:7a:ff:1c:29: ea:f1:ab:d2:12:10:fa:5a:0a:6d:01:7d:46:7b:78:94:2f:1d: 7b:d9:87:14:e6:f2:12:b0:90:7f:ac:17:ec:ac:2b:df:cf:4a: 12:30:a9:11:29:f0:34:04:53:2c:b2:c6:3d:c5:ee:8d:c7:98: e2:46:31:86:1a:90:06:e2:7f:e1:8c:ea:8f:9e:db:59:e7:a7: 84:7b:20:ee:00:4b:ec:ad:3c:04:a5:3c:77:73:76:e2:05:de: ad:6f:c3:89:a5:98:6a:a1:c8:a1:57:fd:d3:34:a6:ef:97:65: 23:e0:ce:5d:92:ee:5f:26:ab:54:33:72:aa:6c:59:94:17:10: 98:ac:27:29:35:c7:f0:bb:b9:6e:d5:e5:28:a9:0a:53:16:4b: f7:f2:3d:5b:28:d9:eb:f2:ab:5a:be:d1:cb:e2:02:06:64:2d: 2e:9c:26:96 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjyDJeHOSHMX7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MjVlNTM3ZjMtYTAxNC00Y2E1LTkwYmUtZDRkNzljNzViYzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBCMOFe8cLCAm7WNXdY7QOedMq1YGeyr0yyK 8YK8qfi/jpbis4Jwi0wztBMq09Gshsh5wIzF66rUmatDbRaye9mcNjcHbH/ueRz8 X9uVz7GvzJ0jAoRVzuBsY88rIUhj0ItPGOWqrbVCgQ5Dzx6yJgjUW2V0MMJZvVjw GvvyBsOcCxYo9fHdH8teECj0SDAerDZ4uPRfvxQjHdTtTjCOqkT1e52ZqVLKDZgD JZMJrMbf/qYNaO3N8zFVXe7gzaNIPdz/fP87Ity6Xip70/15is4rH0PXPs/6HDUZ H0ZGCJBmmzfeSaVTgN9p3Ma2stTHjw1sWtDBMuYGmiybF9pCnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMa3UbZiSGuGM3rhuoO3GiKt20+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODYwMWQ2YjAtMjc3Zi0z MTA3LWJjYzQtYzhiMWRlZTM3OTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBY2ptdPGZuWJjEOaMX4dTf9R7RQER2d7E8AaEQm0SKwqAyKPEwMaaB iVGvTTJ1iw8D9nq0Eu2rZATrKDzwXouoQmUj5wfct2dsdyyYWP3UUEGP0YK9TXr/ HCnq8avSEhD6WgptAX1Ge3iULx172YcU5vISsJB/rBfsrCvfz0oSMKkRKfA0BFMs ssY9xe6Nx5jiRjGGGpAG4n/hjOqPnttZ56eEeyDuAEvsrTwEpTx3c3biBd6tb8OJ pZhqocihV/3TNKbvl2Uj4M5dku5fJqtUM3KqbFmUFxCYrCcpNcfwu7lu1eUoqQpT Fkv38j1bKNnr8qtavtHL4gIGZC0unCaW -----END CERTIFICATE-----Generated at Tue Oct 21 04:44:25 2025 by rpki-client