$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/972b46d2-94d8-3c27-94bd-eee15e154e15.roa File: 972b46d2-94d8-3c27-94bd-eee15e154e15.roa (raw, json) Hash identifier: OzdaZvFlVgz/DQKoddfHvj91qBARDY9H0x10jO5j5DI= Subject key identifier: 5E:FD:DD:11:9B:2B:92:1F:C0:84:37:B6:8D:B1:AB:02:5D:E4:A7:B6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F52322845A59CAA463EB680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/972b46d2-94d8-3c27-94bd-eee15e154e15.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396544 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:32:28:45:a5:9c:aa:46:3e:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=8ffb5bda-8f94-4166-a1ee-fd2b81da2a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:46:6a:85:45:0b:1a:7f:8f:22:e3:da:11:13: 48:8c:70:3d:99:64:d1:09:8b:6f:7e:5f:19:d6:11: 45:ff:cc:b4:f9:61:b4:0c:5a:18:f6:a5:da:0e:e1: 7e:ed:a3:94:e7:ac:ee:a3:d0:3b:68:7e:3b:15:c7: 6f:c3:6a:cd:12:42:7b:d5:3a:72:56:5c:d1:9d:d8: 30:90:c0:9f:64:ae:72:81:d7:0b:b2:30:41:12:d3: 85:0a:6e:97:5e:bf:9c:74:09:a7:9c:99:a2:a4:95: 7e:c3:86:a7:ed:b7:2c:62:e5:c5:e9:bf:78:9a:d2: d7:6d:5b:df:3d:87:cb:2b:8e:50:61:ad:37:3c:37: dc:64:ad:ff:da:24:7b:dc:0a:e1:d6:fb:d3:59:db: 8d:cc:dc:69:b9:37:15:93:9d:9f:59:8b:11:45:d8: 71:f4:60:b1:18:11:22:67:4f:ee:c3:70:ee:7b:7e: 1f:20:33:90:1d:12:72:10:d1:0c:b6:3c:b6:e1:9c: e5:a1:b7:4c:3a:b9:19:03:54:6e:3c:d9:33:11:97: 31:98:83:a4:e7:47:60:5f:20:c4:d3:8a:da:40:e9: bd:89:42:13:82:54:ae:4b:00:bd:9d:bb:3a:d9:8e: 34:95:a2:d0:d2:1b:5d:e3:c8:de:0b:35:bc:69:40: cb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FD:DD:11:9B:2B:92:1F:C0:84:37:B6:8D:B1:AB:02:5D:E4:A7:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/972b46d2-94d8-3c27-94bd-eee15e154e15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:99:7d:98:6c:9c:15:48:d7:54:f0:ca:60:8b:e4:de:72:bd: 24:44:a8:87:3a:c1:8e:7b:36:c2:e2:0b:95:f2:4c:9a:91:90: 21:a1:87:ee:19:97:20:37:0a:96:ae:28:20:94:30:89:b4:05: a9:69:d4:29:d8:52:86:0c:c1:0a:25:c0:7a:ac:76:1b:5e:48: ba:cd:df:13:04:28:77:96:2b:2c:6b:8d:b1:8f:47:4b:59:bc: ab:4a:94:a8:97:f0:61:d4:37:1e:8f:92:84:eb:30:bd:3c:28: cf:da:34:a5:67:f5:49:4f:72:c3:77:d9:ff:d8:ac:3d:49:92: 5a:bf:e1:92:25:a4:95:55:4d:14:d0:63:48:f1:4a:75:64:dc: 83:fa:f5:84:e7:bc:53:ab:05:8e:d8:bb:a9:a3:82:16:9c:da: 99:69:ab:8b:24:90:28:18:97:0c:9f:76:ba:b7:75:d6:86:a3: cd:a1:06:95:e6:12:84:8c:0b:a9:e0:02:e1:a0:a9:40:3c:b8: f3:b8:dd:31:f7:97:30:15:fb:c1:c7:f0:ae:79:9c:20:1b:1b: b2:45:8c:89:98:f6:bb:ab:a5:a9:14:56:35:af:19:0f:99:13: b5:1b:18:c3:20:7f:ed:92:24:8c:f8:d2:d8:37:d4:76:48:12: 66:2e:a0:fd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjIoRaWcqkY+toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk OGZmYjViZGEtOGY5NC00MTY2LWExZWUtZmQyYjgxZGEyYTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUZqhUULGn+PIuPaERNIjHA9mWTRCYtvfl8Z 1hFF/8y0+WG0DFoY9qXaDuF+7aOU56zuo9A7aH47Fcdvw2rNEkJ71TpyVlzRndgw kMCfZK5ygdcLsjBBEtOFCm6XXr+cdAmnnJmipJV+w4an7bcsYuXF6b94mtLXbVvf PYfLK45QYa03PDfcZK3/2iR73Arh1vvTWduNzNxpuTcVk52fWYsRRdhx9GCxGBEi Z0/uw3Due34fIDOQHRJyENEMtjy24ZzlobdMOrkZA1RuPNkzEZcxmIOk50dgXyDE 04raQOm9iUITglSuSwC9nbs62Y40laLQ0htd48jeCzW8aUDLkQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF793RGbK5IfwIQ3to2xqwJd5Ke2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTcyYjQ2ZDItOTRkOC0z YzI3LTk0YmQtZWVlMTVlMTU0ZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCKmX2YbJwVSNdU8Mpgi+Tecr0kRKiHOsGOezbC4guV8kyakZAhoYfu GZcgNwqWrigglDCJtAWpadQp2FKGDMEKJcB6rHYbXki6zd8TBCh3lissa42xj0dL WbyrSpSol/Bh1Dcej5KE6zC9PCjP2jSlZ/VJT3LDd9n/2Kw9SZJav+GSJaSVVU0U 0GNI8Up1ZNyD+vWE57xTqwWO2Lupo4IWnNqZaauLJJAoGJcMn3a6t3XWhqPNoQaV 5hKEjAup4ALhoKlAPLjzuN0x95cwFfvBx/CueZwgGxuyRYyJmPa7q6WpFFY1rxkP mRO1GxjDIH/tkiSM+NLYN9R2SBJmLqD9 -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:26 2025 by rpki-client