$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b16f5521-1f55-335b-bb07-173d9ed920f6.roa File: b16f5521-1f55-335b-bb07-173d9ed920f6.roa (raw, json) Hash identifier: ItUa8zyo0OcyF/G4hkgkhBsFoaIUtn5TkUgsI2qraGc= Subject key identifier: DE:00:73:FC:7F:FF:1D:31:0D:2C:B8:9A:04:4C:41:0A:9D:D3:4E:30 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523EE50028CDF9CB5A7100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b16f5521-1f55-335b-bb07-173d9ed920f6.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396611 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3e:e5:00:28:cd:f9:cb:5a:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=1eb00a20-22a9-44de-b1a7-7326ce6797b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7c:91:60:23:cd:a5:e9:d5:f1:26:99:e4:00: 39:cc:66:a3:d9:0f:6e:e7:16:e9:1c:2a:85:bb:57: e6:98:23:1b:cb:35:b3:f7:ad:47:96:95:54:51:d5: a9:2f:2a:c0:cd:5e:51:ae:7a:6e:31:14:78:3b:d3: 35:e8:35:f5:fd:b4:70:b7:45:7f:4e:df:41:11:a1: a9:06:37:0d:51:2a:84:03:c2:f4:0a:41:83:d1:47: f3:58:e6:08:1e:d7:97:7e:f6:5f:fd:e6:a3:1f:6a: ff:a9:56:53:bf:30:a5:02:29:c0:cf:b0:aa:7d:2d: 09:1d:01:9d:07:40:82:21:b9:9b:a4:92:0f:62:6c: b5:ac:bd:25:08:e7:df:94:46:a2:1b:5c:74:08:31: 7e:e6:33:f2:df:b4:b8:ea:fb:d1:02:d9:79:07:9a: 1e:b2:ae:04:c7:b1:4b:8e:f6:3f:4a:7c:1d:5b:0f: f5:f7:45:43:cd:0a:7b:f9:dd:15:88:21:7d:66:45: f4:83:dd:a3:03:03:1d:87:b6:3f:cc:6e:f1:05:f9: 12:44:80:e8:bb:67:3f:63:2b:8d:49:18:5c:a2:3d: 07:e4:58:9c:16:cf:61:40:da:d9:24:49:d7:ac:d4: dd:75:6b:9e:91:e6:c4:17:07:0c:c4:04:9c:d5:ac: 98:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:00:73:FC:7F:FF:1D:31:0D:2C:B8:9A:04:4C:41:0A:9D:D3:4E:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b16f5521-1f55-335b-bb07-173d9ed920f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:3b:ce:2d:ca:d7:8b:dd:6c:c2:cd:db:b2:fd:d5:52:5f:70: 09:73:fa:a8:6d:51:6b:10:19:22:4b:ff:8e:14:4c:b9:8a:b0: ce:9a:13:84:bd:97:d0:a9:95:fd:1d:cf:f2:2e:cc:aa:d7:b5: 5d:e3:2a:6a:24:87:c3:32:65:a2:7f:74:41:c3:e1:37:a3:ac: 9c:1e:a0:90:ea:ee:7e:da:2b:5f:29:3b:83:2e:09:f6:ab:09: 71:70:d1:a7:6a:77:21:02:e0:d5:90:44:a9:04:07:a4:7e:39: 7d:84:ca:43:97:24:10:b5:66:04:73:89:8e:1f:ad:72:9d:72: fb:29:ed:31:c0:50:a2:19:20:55:8c:80:07:21:2d:9d:84:d0: 5e:22:04:b5:46:ae:52:d4:d9:de:ba:aa:d4:d6:1d:dc:72:48: 43:f5:c4:8f:55:d6:75:c3:aa:c0:42:f7:c3:c1:2b:7c:95:3c: 40:63:92:91:f5:3f:fc:33:14:91:a5:35:45:4e:78:35:ad:68: 46:eb:32:38:9d:6c:4a:00:06:cc:74:b7:af:a3:f2:bc:f6:6c: ca:dd:66:3e:d0:8e:45:0e:a4:9f:fb:65:bd:10:31:b6:75:bb: 59:d9:ec:ae:16:16:01:e7:0f:88:ea:f2:94:bd:e4:91:a7:b6: 8e:af:bc:15 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/Uj7lACjN+ctacQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MWViMDBhMjAtMjJhOS00NGRlLWIxYTctNzMyNmNlNjc5N2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHyRYCPNpenV8SaZ5AA5zGaj2Q9u5xbpHCqF u1fmmCMbyzWz961HlpVUUdWpLyrAzV5RrnpuMRR4O9M16DX1/bRwt0V/Tt9BEaGp BjcNUSqEA8L0CkGD0UfzWOYIHteXfvZf/eajH2r/qVZTvzClAinAz7CqfS0JHQGd B0CCIbmbpJIPYmy1rL0lCOfflEaiG1x0CDF+5jPy37S46vvRAtl5B5oesq4Ex7FL jvY/SnwdWw/190VDzQp7+d0ViCF9ZkX0g92jAwMdh7Y/zG7xBfkSRIDou2c/YyuN SRhcoj0H5FicFs9hQNrZJEnXrNTddWuekebEFwcMxASc1ayYUQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN4Ac/x//x0xDSy4mgRMQQqd004wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjE2ZjU1MjEtMWY1NS0z MzViLWJiMDctMTczZDllZDkyMGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBCO84tyteL3WzCzduy/dVSX3AJc/qobVFrEBkiS/+OFEy5irDOmhOE vZfQqZX9Hc/yLsyq17Vd4ypqJIfDMmWif3RBw+E3o6ycHqCQ6u5+2itfKTuDLgn2 qwlxcNGnanchAuDVkESpBAekfjl9hMpDlyQQtWYEc4mOH61ynXL7Ke0xwFCiGSBV jIAHIS2dhNBeIgS1Rq5S1NneuqrU1h3cckhD9cSPVdZ1w6rAQvfDwSt8lTxAY5KR 9T/8MxSRpTVFTng1rWhG6zI4nWxKAAbMdLevo/K89mzK3WY+0I5FDqSf+2W9EDG2 dbtZ2eyuFhYB5w+I6vKUveSRp7aOr7wV -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:58 2025 by rpki-client