$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa5da138-9d26-3e7e-94b6-ab99c4387134.roa File: aa5da138-9d26-3e7e-94b6-ab99c4387134.roa (raw, json) Hash identifier: 8fsHq+FwGk7JFbK4sZ6E1nSjaCsySw1iiHeq+XCGN3M= Subject key identifier: F1:19:94:AB:24:FF:B0:70:1C:12:4B:7F:D2:0C:F5:C9:62:4E:2F:37 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F52374930F0F0BEE1EBCCD0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa5da138-9d26-3e7e-94b6-ab99c4387134.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396542 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:37:49:30:f0:f0:be:e1:eb:cc:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=ae845188-d7b5-4982-916e-0ef26809cce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c7:ef:9b:34:a6:cf:b4:9f:7f:ff:a6:51:80: d9:fd:b5:46:ec:1e:59:87:0f:bb:04:e0:74:4e:61: 55:fb:8e:7a:af:df:f9:e0:90:58:c6:01:fb:9f:d7: 19:56:dc:59:ec:9c:e2:ec:0c:71:9a:df:ba:a5:0d: 1d:8f:65:a4:c2:da:9f:df:bd:e9:65:17:9e:25:8b: 8c:1f:30:00:52:c4:08:97:3c:fd:d1:3e:45:ac:1b: bd:f9:57:c2:98:29:b3:d9:d7:6f:60:b9:3f:6a:29: 0e:a4:46:80:c3:ad:c0:b2:18:2f:a3:80:2f:b1:97: 2e:6c:f8:32:b8:24:88:77:05:ef:72:b8:7f:83:ff: 56:81:17:17:98:59:c9:d9:14:4c:aa:02:96:eb:dd: e8:8b:00:d2:f3:69:49:fe:d1:11:aa:29:42:c4:b3: 6c:b8:c8:5b:2c:65:ba:cf:6a:dd:5b:66:67:de:40: 8f:8d:19:1c:b4:7b:8f:92:a7:d1:e7:0b:6a:d5:d9: 7d:c1:bd:1d:9b:49:f0:71:10:1a:17:bb:89:22:de: 29:11:a0:29:91:22:b3:0c:0a:ed:ae:9e:9b:4c:53: fd:19:2d:14:56:bc:62:2a:48:b0:38:d6:9c:13:c8: ba:d0:c4:aa:93:e1:92:7b:21:9e:12:e6:64:49:4d: 91:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:19:94:AB:24:FF:B0:70:1C:12:4B:7F:D2:0C:F5:C9:62:4E:2F:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa5da138-9d26-3e7e-94b6-ab99c4387134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:64:fb:b9:c9:36:b7:e7:27:f8:46:38:de:25:7a:16:c6:c2: 27:30:04:78:32:c7:f4:6f:16:90:af:1e:19:5b:fc:3d:b4:41: 89:11:7d:44:ec:ca:45:de:5f:a5:42:63:08:1b:a8:7f:db:7f: c1:a0:77:e0:6f:61:89:7b:05:48:89:12:f7:9b:6a:80:f8:28: 8a:12:ae:35:7d:4b:06:0e:e5:5f:aa:9d:a2:6a:69:fd:82:fb: 24:9d:10:d5:00:59:ea:a7:80:c2:6d:65:72:57:f9:8f:b7:9d: c9:d2:c3:03:0b:ef:1e:96:81:2d:ca:46:f9:7e:d0:d4:bb:0a: 98:d1:c8:c1:2a:b2:33:87:1e:9f:19:39:6f:a8:21:3c:47:55: 1b:bb:ea:a4:b8:e6:60:c0:4c:f6:d8:2d:71:7d:48:30:8d:0d: a4:d2:50:8f:3f:b3:ec:ef:21:72:6c:01:ff:dc:0d:ed:09:f9: b8:1f:be:38:32:20:18:2f:93:b5:3e:ea:51:fd:53:50:00:a2: 4f:d6:81:4c:6d:bf:e4:f7:75:99:cb:68:10:f4:74:b4:9d:b2: 8e:86:d8:da:7b:77:be:8a:f8:34:04:20:f2:a3:51:25:4b:5f: 35:ce:4d:ba:24:73:b1:21:ee:76:10:eb:0f:b9:63:18:57:66: 2a:a5:eb:9d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjdJMPDwvuHrzNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YWU4NDUxODgtZDdiNS00OTgyLTkxNmUtMGVmMjY4MDljY2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sfvmzSmz7Sff/+mUYDZ/bVG7B5Zhw+7BOB0 TmFV+456r9/54JBYxgH7n9cZVtxZ7Jzi7Axxmt+6pQ0dj2Wkwtqf373pZReeJYuM HzAAUsQIlzz90T5FrBu9+VfCmCmz2ddvYLk/aikOpEaAw63Ashgvo4AvsZcubPgy uCSIdwXvcrh/g/9WgRcXmFnJ2RRMqgKW693oiwDS82lJ/tERqilCxLNsuMhbLGW6 z2rdW2Zn3kCPjRkctHuPkqfR5wtq1dl9wb0dm0nwcRAaF7uJIt4pEaApkSKzDArt rp6bTFP9GS0UVrxiKkiwONacE8i60MSqk+GSeyGeEuZkSU2RGQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPEZlKsk/7BwHBJLf9IM9cliTi83MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWE1ZGExMzgtOWQyNi0z ZTdlLTk0YjYtYWI5OWM0Mzg3MTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBEZPu5yTa35yf4RjjeJXoWxsInMAR4Msf0bxaQrx4ZW/w9tEGJEX1E 7MpF3l+lQmMIG6h/23/BoHfgb2GJewVIiRL3m2qA+CiKEq41fUsGDuVfqp2iamn9 gvsknRDVAFnqp4DCbWVyV/mPt53J0sMDC+8eloEtykb5ftDUuwqY0cjBKrIzhx6f GTlvqCE8R1Ubu+qkuOZgwEz22C1xfUgwjQ2k0lCPP7Ps7yFybAH/3A3tCfm4H744 MiAYL5O1PupR/VNQAKJP1oFMbb/k93WZy2gQ9HS0nbKOhtjae3e+ivg0BCDyo1El S181zk26JHOxIe52EOsPuWMYV2Yqpeud -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:04 2025 by rpki-client