$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ba9c099-d3ec-354f-8dee-210da4453ea1.roa File: 8ba9c099-d3ec-354f-8dee-210da4453ea1.roa (raw, json) Hash identifier: WYH4PhMDSgUHiWoZVr1Tbp4aiaALCKUQZY6ao3H47zA= Subject key identifier: E2:B8:24:25:5F:D5:93:E7:26:97:3F:59:ED:35:E1:F5:3D:DC:2B:CE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523E05A9895D5498D8CD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ba9c099-d3ec-354f-8dee-210da4453ea1.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397205 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3e:05:a9:89:5d:54:98:d8:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=f31d65a7-8d0d-4a3d-964c-72344b20845f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:46:64:da:82:ad:4b:94:93:2e:5e:80:87:fc: 16:24:a1:98:c4:59:57:bf:c6:dc:a4:ca:3c:46:6c: 22:c5:6d:fd:a8:e4:78:33:ab:43:14:50:e6:8f:69: 67:2f:51:ad:d0:eb:07:6a:c0:cc:ea:2b:38:c0:6e: 96:10:89:e3:b2:3b:7c:75:b1:d7:3c:84:e4:5c:be: d9:7f:81:9b:19:c5:46:4b:c9:b0:c8:42:e3:73:1d: c3:bd:37:02:ca:0a:c4:49:c4:ae:b4:02:57:d4:ad: d0:05:10:dd:98:06:e9:e9:5f:e3:37:87:bd:3b:2e: db:c8:52:de:b1:28:6c:4b:f9:21:ac:e0:56:d1:39: 1d:a0:94:8d:ec:f4:d9:e8:ad:70:9c:1a:1f:00:39: 25:f1:74:50:81:5d:74:1c:7e:b3:2b:76:02:27:b0: f0:06:c3:a8:9c:1a:99:12:71:d7:08:00:e1:c5:cd: 86:95:c5:e9:96:f9:46:cb:e5:89:ff:eb:12:46:56: d1:f1:d7:eb:e2:ec:85:96:50:7a:af:09:cf:e5:50: 7d:3d:08:77:7c:1c:89:a0:fd:ad:a9:05:07:a5:62: a5:de:ea:3c:92:bd:ee:78:85:7d:bc:e5:25:2d:5b: 29:2d:f4:8f:b2:57:3d:5e:87:03:a6:88:bf:ac:0b: 22:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B8:24:25:5F:D5:93:E7:26:97:3F:59:ED:35:E1:F5:3D:DC:2B:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ba9c099-d3ec-354f-8dee-210da4453ea1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:23:d1:a2:31:ca:6b:46:ed:96:9c:13:fb:b7:01:8f:53:04: 6c:ec:81:66:37:8f:64:de:45:0a:08:a3:8f:6e:18:96:e1:09: 5e:53:79:2c:8d:3d:0c:57:92:bf:b3:ee:76:cf:31:cb:9a:d2: cb:a1:83:2e:5b:5e:bf:69:cf:0d:92:74:da:a0:dc:09:2e:0a: 73:cf:be:b7:fa:84:f8:e8:a9:56:72:b7:25:6f:0a:be:37:7b: df:0f:4d:64:9d:55:d6:35:0a:48:c2:7c:29:93:bc:2e:78:27: 31:38:bb:45:90:52:4b:ad:ea:00:53:f5:f9:8f:37:4e:e8:b3: 25:bc:25:2b:52:af:29:2d:d3:59:e0:47:af:bc:a7:29:a2:44: eb:dd:db:d0:e6:fd:47:05:cc:7d:49:43:cf:3f:77:cc:c0:9f: 3f:fc:e0:8a:4b:e2:cb:7a:ef:20:52:d1:36:db:8c:25:70:2e: ae:9f:f6:43:f3:8e:5b:ab:f5:38:95:fb:2c:01:a8:fd:71:ff: ba:d9:a2:b6:d6:2c:56:bd:c9:bd:6f:0b:44:d3:24:79:70:91: 9f:76:65:a7:e4:69:c0:33:48:5b:fc:cb:75:0b:91:9f:a2:fd: 61:a7:98:2b:7b:4b:28:b5:30:10:dc:2f:3e:8e:cb:25:5b:16: b5:6a:1d:0c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/Uj4FqYldVJjYzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZjMxZDY1YTctOGQwZC00YTNkLTk2NGMtNzIzNDRiMjA4NDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkZk2oKtS5STLl6Ah/wWJKGYxFlXv8bcpMo8 RmwixW39qOR4M6tDFFDmj2lnL1Gt0OsHasDM6is4wG6WEInjsjt8dbHXPITkXL7Z f4GbGcVGS8mwyELjcx3DvTcCygrEScSutAJX1K3QBRDdmAbp6V/jN4e9Oy7byFLe sShsS/khrOBW0TkdoJSN7PTZ6K1wnBofADkl8XRQgV10HH6zK3YCJ7DwBsOonBqZ EnHXCADhxc2GlcXplvlGy+WJ/+sSRlbR8dfr4uyFllB6rwnP5VB9PQh3fByJoP2t qQUHpWKl3uo8kr3ueIV9vOUlLVspLfSPslc9XocDpoi/rAsiawIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOK4JCVf1ZPnJpc/We014fU93CvOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGJhOWMwOTktZDNlYy0z NTRmLThkZWUtMjEwZGE0NDUzZWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAWI9GiMcprRu2WnBP7twGPUwRs7IFmN49k3kUKCKOPbhiW4QleU3ks jT0MV5K/s+52zzHLmtLLoYMuW16/ac8NknTaoNwJLgpzz763+oT46KlWcrclbwq+ N3vfD01knVXWNQpIwnwpk7wueCcxOLtFkFJLreoAU/X5jzdO6LMlvCUrUq8pLdNZ 4EevvKcpokTr3dvQ5v1HBcx9SUPPP3fMwJ8//OCKS+LLeu8gUtE224wlcC6un/ZD 845bq/U4lfssAaj9cf+62aK21ixWvcm9bwtE0yR5cJGfdmWn5GnAM0hb/Mt1C5Gf ov1hp5gre0sotTAQ3C8+jsslWxa1ah0M -----END CERTIFICATE-----Generated at Mon Oct 20 17:53:50 2025 by rpki-client