$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9505a683-925a-30d4-8ee0-ebb8050e9a35.roa File: 9505a683-925a-30d4-8ee0-ebb8050e9a35.roa (raw, json) Hash identifier: l7qVnquVT9KfK01ZoSX2HxVdE9rnf6RxeMf3LmJ86gA= Subject key identifier: 37:16:62:B2:CA:28:54:FC:B6:9F:A6:13:45:4A:3A:67:2B:90:8E:CE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523DF2B12046861DF46700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9505a683-925a-30d4-8ee0-ebb8050e9a35.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 36618 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3d:f2:b1:20:46:86:1d:f4:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=30f1a393-f467-4e93-a4fb-1ec411b8f1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:76:ec:8d:b8:4a:fd:f9:f5:a1:57:f3:55:97: 74:7f:b1:2e:e9:86:30:b0:f7:22:1b:fe:ab:ce:de: 06:d6:0b:21:d4:85:a4:3a:34:40:59:c7:b6:7c:29: 7d:d2:b1:98:4b:b5:cf:6a:d0:bc:71:af:88:55:86: 1a:89:34:ea:71:3a:53:56:23:b2:d3:86:6d:d5:0f: 47:f5:4d:44:4b:7b:9a:4e:b0:db:dd:28:5d:da:58: 27:02:39:1a:3e:15:58:78:00:dc:b2:cb:ea:62:2c: aa:cb:08:b5:96:25:71:2b:f8:85:4f:bb:4d:07:76: 99:90:5f:9f:1f:fe:ef:e1:4c:4d:3e:a4:1f:23:25: 8e:ce:2d:bc:b4:8f:d4:1c:3f:9e:94:b2:3d:15:15: 34:08:bd:80:27:27:ae:ce:58:f6:27:68:e6:cd:89: ea:c7:5d:84:43:e5:cb:7e:a3:38:c3:32:46:d9:24: a4:82:01:d1:cf:f5:18:0e:a7:0f:5b:b3:b0:d9:a9: f6:8b:dd:fc:c6:cb:9b:78:ea:7a:39:18:bd:31:da: 3e:63:65:19:d0:1a:58:2f:7c:fb:f0:4e:67:59:ab: c3:99:85:a2:05:24:77:a1:c4:f8:00:29:7d:7a:1d: 30:87:60:e2:ad:58:69:b9:45:57:c2:73:aa:9c:9b: 07:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:16:62:B2:CA:28:54:FC:B6:9F:A6:13:45:4A:3A:67:2B:90:8E:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9505a683-925a-30d4-8ee0-ebb8050e9a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:c6:a2:56:d7:1c:f7:26:0e:45:9b:8e:bb:17:6c:e3:c2:be: e1:8b:ac:f1:da:ae:e6:f8:02:dc:75:d8:d9:c3:36:0c:c2:c7: 03:a1:97:14:a0:8a:d5:64:f6:a8:dc:46:07:40:03:12:f5:46: a2:f5:86:b0:f2:99:12:b2:94:aa:1d:81:8a:c8:41:fc:b0:7d: c0:b5:a5:fb:ea:25:34:9a:62:83:89:d3:45:2e:3a:07:09:85: 60:e9:fe:d7:bb:9b:d1:ff:02:84:35:eb:05:e7:a3:5a:6f:da: 52:69:4c:4a:e9:ca:17:28:31:f5:04:24:0c:b2:ce:3c:69:ac: 73:db:86:b7:33:c2:e8:cb:88:d0:12:60:33:d2:81:0d:44:73: 00:1b:38:8e:27:ff:51:45:56:a3:6c:c5:3c:e4:66:f1:d0:71: 4e:da:a6:98:d0:32:b3:6d:5e:0d:bc:e8:5d:bf:23:c9:13:a8: ef:2a:ba:4a:cb:03:ec:e8:2e:3d:07:83:4c:97:be:bd:7e:50: 8f:24:2a:de:18:da:05:9c:b9:46:5d:15:eb:57:79:65:a3:5f: aa:29:36:ec:c7:73:53:62:04:61:f2:2f:8a:d4:00:9f:c9:fb: ab:34:08:5e:62:82:97:bd:e6:25:62:86:fc:38:6b:58:a3:0b: da:35:b7:94 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/Uj3ysSBGhh30ZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MzBmMWEzOTMtZjQ2Ny00ZTkzLWE0ZmItMWVjNDExYjhmMWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnbsjbhK/fn1oVfzVZd0f7Eu6YYwsPciG/6r zt4G1gsh1IWkOjRAWce2fCl90rGYS7XPatC8ca+IVYYaiTTqcTpTViOy04Zt1Q9H 9U1ES3uaTrDb3Shd2lgnAjkaPhVYeADcssvqYiyqywi1liVxK/iFT7tNB3aZkF+f H/7v4UxNPqQfIyWOzi28tI/UHD+elLI9FRU0CL2AJyeuzlj2J2jmzYnqx12EQ+XL fqM4wzJG2SSkggHRz/UYDqcPW7Ow2an2i938xsubeOp6ORi9Mdo+Y2UZ0BpYL3z7 8E5nWavDmYWiBSR3ocT4ACl9eh0wh2DirVhpuUVXwnOqnJsHBQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDcWYrLKKFT8tp+mE0VKOmcrkI7OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTUwNWE2ODMtOTI1YS0z MGQ0LThlZTAtZWJiODA1MGU5YTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBexqJW1xz3Jg5Fm467F2zjwr7hi6zx2q7m+ALcddjZwzYMwscDoZcU oIrVZPao3EYHQAMS9Uai9Yaw8pkSspSqHYGKyEH8sH3AtaX76iU0mmKDidNFLjoH CYVg6f7Xu5vR/wKENesF56Nab9pSaUxK6coXKDH1BCQMss48aaxz24a3M8Loy4jQ EmAz0oENRHMAGziOJ/9RRVajbMU85Gbx0HFO2qaY0DKzbV4NvOhdvyPJE6jvKrpK ywPs6C49B4NMl769flCPJCreGNoFnLlGXRXrV3llo1+qKTbsx3NTYgRh8i+K1ACf yfurNAheYoKXveYlYob8OGtYowvaNbeU -----END CERTIFICATE-----Generated at Mon Oct 20 10:45:15 2025 by rpki-client