$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9fbb6c1-a6be-3366-abe7-c752cb2ec528.roa File: a9fbb6c1-a6be-3366-abe7-c752cb2ec528.roa (raw, json) Hash identifier: msm6ULCYks22XQVVqc5Q87hKyg836tlqY3WK5Gy71uo= Subject key identifier: 37:FD:1F:92:59:D2:5D:91:AF:20:7D:13:11:AA:CB:30:C2:B9:71:E1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523B058031D8AD1EB8F400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9fbb6c1-a6be-3366-abe7-c752cb2ec528.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396590 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3b:05:80:31:d8:ad:1e:b8:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=6baafe40-fdcd-43f1-b7af-200ff74821ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:27:d7:c0:79:d7:60:32:5e:fd:4e:65:b2:90: 96:2f:c4:a8:4f:60:0b:1b:01:2d:dc:1c:ff:4e:29: f3:47:f3:bb:58:7a:e5:6c:85:ea:52:9d:4d:0c:c8: 42:48:49:6e:d5:e8:87:42:e0:89:ac:bf:69:6f:d3: 42:1e:26:1e:3c:5d:cd:89:6c:59:77:c5:92:bc:40: da:0a:a0:d7:52:bc:43:67:4d:6d:54:b2:b6:d8:10: 57:38:cb:d8:31:df:8e:73:b2:5d:f1:53:ea:20:dc: 02:c6:6d:e9:1c:69:51:4e:c4:de:ca:30:71:ec:d7: f1:d8:22:3c:24:78:19:ea:ea:1b:21:a3:e0:7c:f7: be:b5:08:02:f9:ef:44:51:2c:64:8c:aa:8d:54:00: c1:e0:9a:fc:c3:18:ff:a7:48:dc:91:ae:01:ae:76: 96:37:42:9c:7d:94:32:69:c0:ec:5e:9c:9d:75:e7: 0f:45:fb:8c:f9:f7:04:54:6d:84:b5:0b:71:85:66: d6:aa:43:de:46:ed:f1:ca:7d:03:b6:96:f8:71:f5: 9c:68:4b:52:7c:95:96:14:41:c3:f3:e1:74:40:c3: c8:61:5f:7d:55:7f:48:51:b2:52:f5:e6:dc:9b:7a: df:14:27:22:dc:a9:c1:e3:77:58:f1:cb:34:fa:77: 0c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FD:1F:92:59:D2:5D:91:AF:20:7D:13:11:AA:CB:30:C2:B9:71:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9fbb6c1-a6be-3366-abe7-c752cb2ec528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:84:80:bb:a8:0c:f7:53:96:16:01:59:3a:85:78:be:5d:ff: 5d:91:34:72:89:45:7d:f6:bb:ab:62:57:9a:02:c3:48:d3:d8: d6:b3:a3:78:cb:8d:cc:b9:bf:38:db:ed:7e:ba:37:51:2d:c2: 6c:f2:29:7b:38:de:1f:ab:72:ae:1e:05:96:f2:55:20:fb:a8: be:4c:09:41:ee:01:aa:7f:cb:54:75:7b:54:fc:aa:8d:99:5e: 27:2b:1d:67:45:b5:ef:68:11:4b:8f:25:da:6e:8d:fc:f2:fd: 35:1b:26:6d:02:6a:76:ef:41:17:98:70:86:18:6a:0f:76:c7: de:a9:49:e7:17:83:fd:cf:9a:4b:02:34:c2:51:6d:50:c6:48: cc:21:68:16:ed:7e:ef:0e:19:19:9e:23:72:a2:98:d5:40:fb: 86:b1:a4:4a:43:39:79:53:f1:78:7d:e2:1d:cd:2a:ff:2b:40: 78:63:0a:17:b2:60:91:fd:20:a0:cd:47:f0:3e:e8:9d:d4:e5: 89:2e:0a:80:64:61:3b:60:97:5c:6e:17:e7:42:51:19:57:f7: b9:71:d5:96:73:cf:64:0e:56:b2:04:48:22:80:4a:43:88:34: 1d:89:df:73:7b:e7:1e:5e:80:e5:61:ed:84:f2:82:a8:8c:eb: e3:a6:19:e9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjsFgDHYrR649AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NmJhYWZlNDAtZmRjZC00M2YxLWI3YWYtMjAwZmY3NDgyMWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiifXwHnXYDJe/U5lspCWL8SoT2ALGwEt3Bz/ TinzR/O7WHrlbIXqUp1NDMhCSElu1eiHQuCJrL9pb9NCHiYePF3NiWxZd8WSvEDa CqDXUrxDZ01tVLK22BBXOMvYMd+Oc7Jd8VPqINwCxm3pHGlRTsTeyjBx7Nfx2CI8 JHgZ6uobIaPgfPe+tQgC+e9EUSxkjKqNVADB4Jr8wxj/p0jcka4BrnaWN0KcfZQy acDsXpyddecPRfuM+fcEVG2EtQtxhWbWqkPeRu3xyn0Dtpb4cfWcaEtSfJWWFEHD 8+F0QMPIYV99VX9IUbJS9ebcm3rfFCci3KnB43dY8cs0+ncMlQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDf9H5JZ0l2RryB9ExGqyzDCuXHhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTlmYmI2YzEtYTZiZS0z MzY2LWFiZTctYzc1MmNiMmVjNTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+hIC7qAz3U5YWAVk6hXi+Xf9dkTRyiUV99rurYleaAsNI09jWs6N4 y43Mub842+1+ujdRLcJs8il7ON4fq3KuHgWW8lUg+6i+TAlB7gGqf8tUdXtU/KqN mV4nKx1nRbXvaBFLjyXabo388v01GyZtAmp270EXmHCGGGoPdsfeqUnnF4P9z5pL AjTCUW1QxkjMIWgW7X7vDhkZniNyopjVQPuGsaRKQzl5U/F4feIdzSr/K0B4YwoX smCR/SCgzUfwPuid1OWJLgqAZGE7YJdcbhfnQlEZV/e5cdWWc89kDlayBEgigEpD iDQdid9ze+ceXoDlYe2E8oKojOvjphnp -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:28 2025 by rpki-client