$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab9c7259-d732-356a-8cc2-b5eadfc878cd.roa File: ab9c7259-d732-356a-8cc2-b5eadfc878cd.roa (raw, json) Hash identifier: CEZZIEhgoYDOhFa8fXtVXamJxQlzZchZiHs8sKo8BU8= Subject key identifier: 66:24:82:6D:03:5B:B4:AA:65:42:2D:11:85:96:65:EC:43:1F:11:67 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F52378562378585097FE780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab9c7259-d732-356a-8cc2-b5eadfc878cd.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396581 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:37:85:62:37:85:85:09:7f:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=339728f3-553b-4bb8-a873-35ed59fec4e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:57:ec:f3:e4:da:0e:41:7b:31:8f:32:e6:88: 3c:22:0d:a7:7c:74:76:ad:37:38:f5:bb:4c:bc:dc: ed:37:5c:56:c6:57:ce:fa:5b:48:6b:ae:fc:1f:89: 77:39:f9:84:3d:96:3b:d5:a3:5f:95:54:9c:3f:7f: 5a:77:0b:46:18:3f:e6:75:07:29:2b:8b:ca:0e:9d: 1f:0e:a2:6e:2a:3e:53:d1:42:4b:7e:0b:5f:e3:b8: f4:dc:c2:3b:31:ec:1f:88:76:22:05:ea:c1:7c:cf: 5e:48:7e:4c:49:63:b9:08:e1:fd:1a:b5:52:28:3c: 14:d5:4d:48:65:45:75:c6:b1:83:ed:c8:32:d3:14: 35:19:39:8c:ab:19:bb:25:73:e9:22:da:0d:06:c3: 4c:66:cf:86:4d:95:f5:26:ff:84:71:02:62:5f:9b: 73:6a:8c:e5:5c:65:f1:ba:d6:38:58:a2:e9:01:a9: 1b:da:b3:9d:79:6f:c4:93:c8:80:dc:3c:68:18:aa: 15:a7:47:8d:5f:12:e6:70:95:22:a8:57:46:31:54: 3e:4e:28:da:df:50:57:fd:fb:08:85:3a:61:85:5c: 96:09:1c:4d:ce:1e:9c:e6:69:87:13:08:7f:31:84: 8c:df:50:bc:c3:43:f5:b5:f9:aa:17:d3:e1:29:20: 28:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:24:82:6D:03:5B:B4:AA:65:42:2D:11:85:96:65:EC:43:1F:11:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab9c7259-d732-356a-8cc2-b5eadfc878cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:0e:47:ac:e1:38:3c:b0:01:74:24:78:56:2d:8a:4d:af:e1: a9:d9:78:2f:f7:45:ea:58:59:be:4a:e7:9a:a9:af:c4:3a:5e: b1:f1:22:15:61:1e:ab:4b:43:94:85:fc:a3:ef:b7:f1:b2:5e: eb:da:bd:6c:2c:b1:cb:ab:71:61:5b:46:9f:93:0c:93:99:92: 67:72:1f:ff:0c:32:30:f9:ed:a2:3b:94:41:e8:23:db:3a:e3: eb:26:2b:90:19:99:b7:79:e0:7b:56:4c:44:55:d3:bc:85:15: 42:18:22:c5:48:26:55:34:cd:ce:fd:b9:d2:17:7e:21:47:1a: ec:91:d2:58:e7:5a:ad:e0:5d:6b:30:d5:c5:83:ce:a7:4a:4c: 16:ff:88:c6:db:b1:87:98:06:e0:01:2f:b2:b0:5a:32:60:77: 05:3a:cd:2a:25:91:4d:c0:e4:10:5c:20:39:ff:1a:2c:76:5c: 78:63:e7:57:58:69:c3:f2:20:49:d1:fb:59:85:41:f7:67:2f: 07:df:06:53:18:37:85:6a:bb:06:1e:39:0b:33:e3:74:79:14: f7:f8:0d:be:4d:29:00:1c:cf:46:14:aa:07:f6:ba:9f:8b:ec: d9:f2:94:5b:09:29:d5:67:86:b0:b8:f8:d7:65:2e:59:bd:3b: 77:da:31:35 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjeFYjeFhQl/54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MzM5NzI4ZjMtNTUzYi00YmI4LWE4NzMtMzVlZDU5ZmVjNGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1fs8+TaDkF7MY8y5og8Ig2nfHR2rTc49btM vNztN1xWxlfO+ltIa678H4l3OfmEPZY71aNflVScP39adwtGGD/mdQcpK4vKDp0f DqJuKj5T0UJLfgtf47j03MI7MewfiHYiBerBfM9eSH5MSWO5COH9GrVSKDwU1U1I ZUV1xrGD7cgy0xQ1GTmMqxm7JXPpItoNBsNMZs+GTZX1Jv+EcQJiX5tzaozlXGXx utY4WKLpAakb2rOdeW/Ek8iA3DxoGKoVp0eNXxLmcJUiqFdGMVQ+Tija31BX/fsI hTphhVyWCRxNzh6c5mmHEwh/MYSM31C8w0P1tfmqF9PhKSAoIQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGYkgm0DW7SqZUItEYWWZexDHxFnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWI5YzcyNTktZDczMi0z NTZhLThjYzItYjVlYWRmYzg3OGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAIDkes4Tg8sAF0JHhWLYpNr+Gp2Xgv90XqWFm+Sueaqa/EOl6x8SIV YR6rS0OUhfyj77fxsl7r2r1sLLHLq3FhW0afkwyTmZJnch//DDIw+e2iO5RB6CPb OuPrJiuQGZm3eeB7VkxEVdO8hRVCGCLFSCZVNM3O/bnSF34hRxrskdJY51qt4F1r MNXFg86nSkwW/4jG27GHmAbgAS+ysFoyYHcFOs0qJZFNwOQQXCA5/xosdlx4Y+dX WGnD8iBJ0ftZhUH3Zy8H3wZTGDeFarsGHjkLM+N0eRT3+A2+TSkAHM9GFKoH9rqf i+zZ8pRbCSnVZ4awuPjXZS5ZvTt32jE1 -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:26 2025 by rpki-client