$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a168bf01-0c8b-3b5a-b925-ac31a99e6dae.roa File: a168bf01-0c8b-3b5a-b925-ac31a99e6dae.roa (raw, json) Hash identifier: CstQ9ptXnM07KUznOaKrsDFOxfr/8uBNGKsJ0avQaRQ= Subject key identifier: B8:53:FB:2B:F5:28:33:FD:25:20:F9:78:64:A8:D2:7C:D4:51:E7:64 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F5230DFBCDFD212DFE45340 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a168bf01-0c8b-3b5a-b925-ac31a99e6dae.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 20362 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:30:df:bc:df:d2:12:df:e4:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=6622505f-a98f-419a-9fc3-f7910e62e23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:79:0d:2c:b6:42:30:b6:7b:c4:48:70:3f:50: 19:68:42:35:b6:88:b1:54:fd:30:e7:1f:7e:ce:fc: 2e:4b:a1:fa:59:a9:f5:eb:bd:c1:12:51:a2:13:65: ab:82:81:49:ce:19:dd:7a:18:d7:1a:34:d0:b6:e4: 22:a9:e0:75:1f:2f:33:7b:cd:c9:dc:b5:fe:8a:48: d3:53:27:46:7d:74:6d:a9:ec:e1:41:2c:6a:5a:9a: d9:9d:e5:34:f1:ac:f0:92:13:2e:10:37:9c:81:b9: 08:c7:42:e5:c1:42:4e:59:d3:e6:fa:52:87:61:cb: eb:34:54:89:d4:16:8d:72:fd:0b:31:0c:f0:0b:fa: ac:c3:ef:aa:6a:a2:40:2f:0f:fe:ea:8d:78:4b:9c: 4b:60:80:21:e2:42:7c:d5:bd:8f:a4:46:00:5a:8b: 20:32:ed:09:f3:66:eb:ba:e0:7e:2a:3c:f9:27:cf: ae:9a:45:3d:2c:03:e1:f3:7f:8b:d6:82:9f:00:cf: f5:bd:d1:58:a0:25:2f:98:dd:fd:97:fa:9c:47:2b: ac:07:a2:80:f2:50:94:eb:e9:6f:ec:a2:64:ef:91: 94:73:98:6a:80:5d:c0:4b:d6:95:1e:48:d1:ab:98: a8:f8:0a:15:04:1a:21:b1:26:a9:5f:4d:a3:04:72: f8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:53:FB:2B:F5:28:33:FD:25:20:F9:78:64:A8:D2:7C:D4:51:E7:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a168bf01-0c8b-3b5a-b925-ac31a99e6dae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:86:bc:8b:90:43:fe:08:20:0f:06:2f:4d:7e:d8:70:8d:25: 0f:bf:e6:d4:56:8a:b2:6a:ff:e2:ac:bc:df:e2:b7:35:f5:0b: 1a:6c:63:62:f6:0f:aa:82:75:a9:6c:a4:31:24:8f:56:38:e4: a3:90:9d:41:2b:dc:27:0d:b6:df:f6:55:87:13:dd:96:66:a4: 30:bf:13:f2:03:13:98:6a:77:18:8f:58:0f:fb:da:3e:05:b1: 0e:39:db:e7:25:13:97:70:5b:70:f2:30:67:64:b8:bf:72:7d: 21:89:3f:bd:2c:43:f9:28:33:5a:db:02:76:65:de:55:24:2d: 57:7c:12:59:de:89:ac:cf:be:4e:f9:d8:37:ca:f8:86:3b:e5: fa:ae:df:60:de:e1:45:a6:a9:9a:34:11:ea:72:a2:db:26:90: 92:95:f5:aa:3a:b5:77:8e:f4:77:7f:ea:2a:32:09:bf:c5:09: b3:13:3b:1f:76:fe:84:ef:87:aa:0f:e9:ba:24:54:ec:6d:dc: c1:d2:ca:3e:aa:45:51:36:4a:a2:0a:b7:b6:19:c9:8a:b2:c7: e6:f6:de:e7:ec:ce:c2:e9:f2:d8:ff:cb:9b:99:96:02:6e:8f: c3:46:c9:ce:4c:b8:7d:28:f6:e9:7d:38:bf:04:bc:88:6b:c8: d6:c8:74:e0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjDfvN/SEt/kU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NjYyMjUwNWYtYTk4Zi00MTlhLTlmYzMtZjc5MTBlNjJlMjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXkNLLZCMLZ7xEhwP1AZaEI1toixVP0w5x9+ zvwuS6H6Wan1673BElGiE2WrgoFJzhndehjXGjTQtuQiqeB1Hy8ze83J3LX+ikjT UydGfXRtqezhQSxqWprZneU08azwkhMuEDecgbkIx0LlwUJOWdPm+lKHYcvrNFSJ 1BaNcv0LMQzwC/qsw++qaqJALw/+6o14S5xLYIAh4kJ81b2PpEYAWosgMu0J82br uuB+Kjz5J8+umkU9LAPh83+L1oKfAM/1vdFYoCUvmN39l/qcRyusB6KA8lCU6+lv 7KJk75GUc5hqgF3AS9aVHkjRq5io+AoVBBohsSapX02jBHL43QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLhT+yv1KDP9JSD5eGSo0nzUUedkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTE2OGJmMDEtMGM4Yi0z YjVhLWI5MjUtYWMzMWE5OWU2ZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBKhryLkEP+CCAPBi9NfthwjSUPv+bUVoqyav/irLzf4rc19QsabGNi 9g+qgnWpbKQxJI9WOOSjkJ1BK9wnDbbf9lWHE92WZqQwvxPyAxOYancYj1gP+9o+ BbEOOdvnJROXcFtw8jBnZLi/cn0hiT+9LEP5KDNa2wJ2Zd5VJC1XfBJZ3omsz75O +dg3yviGO+X6rt9g3uFFpqmaNBHqcqLbJpCSlfWqOrV3jvR3f+oqMgm/xQmzEzsf dv6E74eqD+m6JFTsbdzB0so+qkVRNkqiCre2GcmKssfm9t7n7M7C6fLY/8ubmZYC bo/DRsnOTLh9KPbpfTi/BLyIa8jWyHTg -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:44 2025 by rpki-client