$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a82095ef-4e8d-3fc4-8ea7-95790abb5a93.roa File: a82095ef-4e8d-3fc4-8ea7-95790abb5a93.roa (raw, json) Hash identifier: 1HLN2WZw1Wu+nRJ2qZ/maYGAlB4nhYeQyBi8NbFdoxM= Subject key identifier: AF:6A:2D:D8:C2:AC:FA:51:9D:F2:4E:BB:43:36:E2:68:9F:7E:68:4D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523476122A8E6F3C671280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a82095ef-4e8d-3fc4-8ea7-95790abb5a93.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 36619 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:34:76:12:2a:8e:6f:3c:67:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=107a1321-fc28-44f5-9455-3cdd23bb57a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c4:e0:06:ec:62:f5:e7:49:c4:f2:0f:bb:5a: cf:9a:6e:2a:dd:6f:3e:7c:c5:fa:90:10:2f:6b:ba: b7:3c:f5:73:84:db:20:2e:e4:f9:e4:06:48:6e:fd: ec:2a:6c:7f:e5:8b:72:01:f6:fc:2f:b0:cd:da:89: 99:6f:3a:40:db:2a:0b:c1:e4:3d:73:72:25:d7:32: 06:76:1b:72:1e:b3:a7:f1:56:64:18:aa:f2:26:c1: 1c:76:c3:21:81:54:e8:84:eb:02:c6:01:26:f3:51: f0:9a:e2:cf:f1:49:ef:47:76:33:59:33:50:4e:f6: 5f:92:32:bd:25:38:1a:1a:17:20:29:93:4a:71:99: 2d:12:64:34:a9:70:32:d5:91:09:89:ec:9e:12:f9: 35:8a:54:ae:6d:15:ef:15:8b:bb:37:4c:f4:a4:b9: b3:16:67:d1:69:b8:05:69:a6:9b:98:89:46:19:0f: 7f:ca:3a:26:ef:89:75:81:d8:06:e7:f3:c2:17:3e: aa:5c:c7:22:5a:a0:eb:a4:b5:db:ae:84:27:2a:2f: 78:fe:b9:b6:86:30:c8:9f:9a:a8:22:6c:65:12:1e: 0b:2a:71:ae:56:a1:7f:1c:95:53:6f:ec:d0:3a:ef: d2:06:c8:38:4c:ed:77:c0:c0:c0:5a:97:80:5c:ea: fc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6A:2D:D8:C2:AC:FA:51:9D:F2:4E:BB:43:36:E2:68:9F:7E:68:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a82095ef-4e8d-3fc4-8ea7-95790abb5a93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b1:65:d5:80:25:52:5d:ed:79:99:ca:cf:45:f9:3e:70:11: fd:2b:05:7e:3c:a9:de:dd:15:ff:4f:06:86:8e:ca:5f:6f:b5: 67:07:62:87:d9:56:f0:01:03:81:4b:29:db:32:80:0b:0c:76: 65:97:12:40:10:2a:22:75:e6:a0:76:3e:45:4d:45:64:b1:27: 8c:f8:06:04:6b:40:87:e2:41:28:b7:f6:04:a2:bd:41:f7:4c: 13:2a:9d:3b:9a:db:0d:47:e9:c3:e0:29:ce:f6:1b:6f:8f:40: b4:e7:96:4f:89:3c:35:2e:c5:39:1e:7d:df:ad:82:9b:29:42: da:c9:3c:2e:83:10:a4:e0:18:81:96:bb:d1:53:83:61:0b:6f: d2:58:56:07:47:13:8e:d3:30:72:bd:9e:b3:b8:03:2f:d3:02: fc:ce:fd:40:c4:d7:14:11:1c:ae:99:98:11:43:05:c3:e6:97: b1:ef:e6:99:25:51:af:f1:29:c5:4a:54:e3:5f:39:a8:48:65: 41:ac:d8:e0:38:d8:92:5c:5d:a4:33:e3:0e:23:8a:19:2a:ed: fa:d2:ab:36:95:43:34:83:37:ab:cf:51:10:5c:7c:f1:4b:38: a5:23:d2:d7:44:b4:05:47:24:31:6d:da:25:5d:62:6e:06:ba: 6a:9c:89:c2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjR2EiqObzxnEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MTA3YTEzMjEtZmMyOC00NGY1LTk0NTUtM2NkZDIzYmI1N2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8TgBuxi9edJxPIPu1rPmm4q3W8+fMX6kBAv a7q3PPVzhNsgLuT55AZIbv3sKmx/5YtyAfb8L7DN2omZbzpA2yoLweQ9c3Il1zIG dhtyHrOn8VZkGKryJsEcdsMhgVTohOsCxgEm81HwmuLP8UnvR3YzWTNQTvZfkjK9 JTgaGhcgKZNKcZktEmQ0qXAy1ZEJieyeEvk1ilSubRXvFYu7N0z0pLmzFmfRabgF aaabmIlGGQ9/yjom74l1gdgG5/PCFz6qXMciWqDrpLXbroQnKi94/rm2hjDIn5qo ImxlEh4LKnGuVqF/HJVTb+zQOu/SBsg4TO13wMDAWpeAXOr80wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK9qLdjCrPpRnfJOu0M24miffmhNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTgyMDk1ZWYtNGU4ZC0z ZmM0LThlYTctOTU3OTBhYmI1YTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAOsWXVgCVSXe15mcrPRfk+cBH9KwV+PKne3RX/TwaGjspfb7VnB2KH 2VbwAQOBSynbMoALDHZllxJAECoideagdj5FTUVksSeM+AYEa0CH4kEot/YEor1B 90wTKp07mtsNR+nD4CnO9htvj0C055ZPiTw1LsU5Hn3frYKbKULayTwugxCk4BiB lrvRU4NhC2/SWFYHRxOO0zByvZ6zuAMv0wL8zv1AxNcUERyumZgRQwXD5pex7+aZ JVGv8SnFSlTjXzmoSGVBrNjgONiSXF2kM+MOI4oZKu360qs2lUM0gzerz1EQXHzx SzilI9LXRLQFRyQxbdolXWJuBrpqnInC -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:11 2025 by rpki-client