$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8fc09e35-3d11-34c2-92c3-b36883113d2e.roa File: 8fc09e35-3d11-34c2-92c3-b36883113d2e.roa (raw, json) Hash identifier: o620OSf60Qpcl8OfdI/FiiqXtmSk2XozYxRDEs/GFLU= Subject key identifier: E6:24:AE:A2:56:76:64:14:03:C1:8C:43:AA:DB:90:3C:B5:1D:D6:C3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523E729E6FC57DD5F1A880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8fc09e35-3d11-34c2-92c3-b36883113d2e.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397193 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3e:72:9e:6f:c5:7d:d5:f1:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=0e899a5c-784f-4e18-a7c0-6bb7a4ee9d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2d:0d:b9:b9:52:2c:8f:e2:60:f4:34:ff:8a: 5c:4c:e7:88:fc:5d:06:8b:ea:57:a5:42:5c:a9:bb: ad:60:7e:d5:2e:23:0d:d5:b4:d1:a1:fe:76:4f:c1: 4b:f0:91:07:5e:58:06:87:ce:51:1d:48:cf:f3:e9: 63:3f:b8:04:0f:bd:67:d2:96:4e:f6:5f:3f:99:94: 27:25:f8:de:72:a2:cb:bb:bd:ad:8e:cb:b9:66:2d: 3d:f8:60:5f:64:09:b0:eb:27:87:cf:b8:51:7c:88: 6b:9f:79:8c:1e:62:a9:68:8e:5c:54:e5:00:aa:c4: 7f:14:d9:9e:42:a5:b0:f4:1c:2a:7e:02:d3:d0:f7: 87:bb:c1:81:ae:2c:21:7a:ff:cd:6b:3d:1c:52:13: 86:6b:ec:0e:4a:0b:c9:a2:26:74:7c:df:48:10:d0: 81:a7:91:67:fe:78:70:b4:d4:d1:9c:49:f9:3e:37: b0:46:9e:51:95:73:b6:c4:09:be:a7:bb:07:85:0b: fb:88:6c:c0:c3:30:6e:92:b8:76:f0:d9:c2:6a:f7: d3:52:b4:8b:25:2a:2a:5d:6c:1b:64:b5:c8:b6:88: 5b:32:59:ba:f6:dd:0c:74:45:f4:17:62:db:90:75: ba:f5:19:d7:eb:24:8a:1c:5f:d1:da:ab:61:fc:50: 21:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:24:AE:A2:56:76:64:14:03:C1:8C:43:AA:DB:90:3C:B5:1D:D6:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8fc09e35-3d11-34c2-92c3-b36883113d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d0:f5:38:a4:8b:af:cc:44:b9:88:28:c5:b7:16:96:99:f9: b3:08:07:7c:02:4e:93:fb:ec:7c:59:17:0c:35:84:15:ff:27: a5:02:f4:8a:cc:0d:9c:b5:5e:2b:7d:fc:69:ec:10:7b:f1:85: b2:a6:3a:82:6c:46:ea:75:c8:2b:dc:b5:5b:b0:46:43:c3:77: 3c:af:6e:58:e8:ac:74:f6:0a:5b:82:f3:79:1b:0d:44:ab:06: 08:9a:1b:84:87:56:31:89:8e:cc:af:f3:b3:5a:82:3b:f2:73: 7e:c6:98:c2:33:40:c1:02:a2:94:0a:b2:93:35:df:de:83:7f: 61:cb:c0:87:c5:af:4e:9f:15:bb:17:1e:6a:27:a6:57:e7:40: 0b:13:2d:a4:70:4d:67:ce:f5:81:a4:d8:ef:e1:77:7b:bd:3b: e6:3a:36:da:0d:e8:53:d6:5a:6e:dd:e8:32:1a:66:97:46:63: 3b:be:4a:eb:90:e1:31:21:26:21:95:47:b5:b7:92:76:d2:9a: 44:ac:5a:16:61:40:42:00:81:01:31:04:be:16:ec:0d:a8:79: 64:10:ff:ce:7c:52:f1:47:c4:8e:33:b0:5a:e6:f6:03:c5:e8: b8:d7:d6:74:0a:75:2c:84:ae:35:ec:fd:8b:7b:b4:92:ad:95: 58:40:85:14 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/Uj5ynm/FfdXxqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MGU4OTlhNWMtNzg0Zi00ZTE4LWE3YzAtNmJiN2E0ZWU5ZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS0NublSLI/iYPQ0/4pcTOeI/F0Gi+pXpUJc qbutYH7VLiMN1bTRof52T8FL8JEHXlgGh85RHUjP8+ljP7gED71n0pZO9l8/mZQn JfjecqLLu72tjsu5Zi09+GBfZAmw6yeHz7hRfIhrn3mMHmKpaI5cVOUAqsR/FNme QqWw9BwqfgLT0PeHu8GBriwhev/Naz0cUhOGa+wOSgvJoiZ0fN9IENCBp5Fn/nhw tNTRnEn5PjewRp5RlXO2xAm+p7sHhQv7iGzAwzBukrh28NnCavfTUrSLJSoqXWwb ZLXItohbMlm69t0MdEX0F2LbkHW69RnX6ySKHF/R2qth/FAhAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOYkrqJWdmQUA8GMQ6rbkDy1HdbDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGZjMDllMzUtM2QxMS0z NGMyLTkyYzMtYjM2ODgzMTEzZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBU0PU4pIuvzES5iCjFtxaWmfmzCAd8Ak6T++x8WRcMNYQV/yelAvSK zA2ctV4rffxp7BB78YWypjqCbEbqdcgr3LVbsEZDw3c8r25Y6Kx09gpbgvN5Gw1E qwYImhuEh1YxiY7Mr/OzWoI78nN+xpjCM0DBAqKUCrKTNd/eg39hy8CHxa9OnxW7 Fx5qJ6ZX50ALEy2kcE1nzvWBpNjv4Xd7vTvmOjbaDehT1lpu3egyGmaXRmM7vkrr kOExISYhlUe1t5J20ppErFoWYUBCAIEBMQS+FuwNqHlkEP/OfFLxR8SOM7Ba5vYD xei419Z0CnUshK417P2Le7SSrZVYQIUU -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:39 2025 by rpki-client