$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b56f7d81-9051-36a6-8a45-aa2311e3df96.roa File: b56f7d81-9051-36a6-8a45-aa2311e3df96.roa (raw, json) Hash identifier: bCNq2YYfT1NvaB4gb2uCcwcdrigmqJw51+Oj0Pq1bXA= Subject key identifier: D6:84:7A:10:DD:12:C2:50:A8:B0:D9:26:2C:72:3B:CE:0E:BE:90:79 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F5232CAE44D526DECC5D900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b56f7d81-9051-36a6-8a45-aa2311e3df96.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396582 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:32:ca:e4:4d:52:6d:ec:c5:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=5d8f4830-0e4b-4f31-990e-21740afc005d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2d:53:d3:0f:e6:1c:c7:e8:80:4b:fc:de:fc: 3b:d8:3a:50:b8:da:5d:ab:4f:59:15:10:df:43:49: 0d:7d:0b:f6:b7:7d:01:49:c7:e0:19:91:49:12:7d: b2:90:bb:75:b7:97:55:f1:02:23:0b:36:52:cc:51: 19:47:ad:c3:a2:a6:69:c2:f1:29:fb:1f:ce:fb:51: 96:51:11:56:7e:b6:b2:98:c2:6f:29:2f:70:b2:ed: e7:fc:d3:03:d8:63:5a:7b:51:11:50:71:a1:ad:5a: 9c:70:52:c1:89:f6:f7:94:fe:ae:15:04:cd:52:21: 46:c0:d0:81:3c:39:88:a1:d3:cc:72:22:1b:7d:0d: 10:6f:96:91:d1:0a:83:90:c0:54:36:2e:e0:43:10: 0a:7b:84:6f:b1:b2:31:63:23:2b:c3:7f:1e:ca:21: 8f:6a:1c:64:4d:13:f9:d8:4e:d4:71:56:6b:c6:9a: a5:b6:77:fd:14:26:59:73:fa:ff:dc:38:b3:8f:a2: df:e4:34:b6:da:24:47:37:dd:5b:29:5e:5c:05:fb: 82:5a:a0:bf:4e:06:86:4b:8e:f3:90:5a:3e:25:81: 0c:f4:25:a5:9d:10:6e:62:0e:52:b3:47:c0:d1:f0: 74:41:ca:66:b3:5c:d1:bb:b8:0c:5b:ca:13:35:26: 99:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:84:7A:10:DD:12:C2:50:A8:B0:D9:26:2C:72:3B:CE:0E:BE:90:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b56f7d81-9051-36a6-8a45-aa2311e3df96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:5e:a8:52:80:64:82:dc:c9:8c:0f:49:df:7c:42:e3:c3:65: 9e:1b:6b:69:ed:d1:68:20:d0:80:38:07:6a:dd:b6:3d:d8:ef: 8a:9c:9a:2f:ff:74:47:4f:95:e1:15:d8:7d:99:89:76:a5:38: d4:59:9d:9a:76:85:7a:6b:4e:04:a0:be:ca:18:ab:04:52:ad: 76:a5:2d:25:ab:8d:f9:76:db:19:6c:39:eb:6d:f8:c9:c5:98: 59:9e:25:e5:04:62:25:a6:ec:6a:8c:e1:36:fe:df:95:ab:ce: 22:72:fe:aa:fd:2d:82:c8:41:05:ca:e2:95:74:f0:17:ad:5f: 58:32:f4:bc:c1:52:01:36:75:bd:cf:99:cf:e6:20:14:3f:87: f6:d2:07:63:89:9f:61:0e:3e:53:57:51:2b:81:fa:5b:ea:d0: d8:df:c7:db:dc:49:bb:f5:18:d6:8b:62:5f:91:9e:28:cc:e8: 79:b7:0d:4d:95:7b:54:87:6e:a1:c4:68:ff:d1:a8:83:3a:1a: 78:68:f0:0e:86:db:af:66:7d:6f:01:29:0c:2c:5e:7d:4d:a1: 7f:25:17:50:d0:21:f7:63:46:01:90:71:de:ff:4c:28:32:47: 27:a2:e4:c0:84:ad:e6:6d:ef:94:6e:c7:80:61:10:e5:5e:51: e0:b5:b1:d6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjLK5E1SbezF2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NWQ4ZjQ4MzAtMGU0Yi00ZjMxLTk5MGUtMjE3NDBhZmMwMDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi1T0w/mHMfogEv83vw72DpQuNpdq09ZFRDf Q0kNfQv2t30BScfgGZFJEn2ykLt1t5dV8QIjCzZSzFEZR63DoqZpwvEp+x/O+1GW URFWfraymMJvKS9wsu3n/NMD2GNae1ERUHGhrVqccFLBifb3lP6uFQTNUiFGwNCB PDmIodPMciIbfQ0Qb5aR0QqDkMBUNi7gQxAKe4RvsbIxYyMrw38eyiGPahxkTRP5 2E7UcVZrxpqltnf9FCZZc/r/3Dizj6Lf5DS22iRHN91bKV5cBfuCWqC/TgaGS47z kFo+JYEM9CWlnRBuYg5Ss0fA0fB0Qcpms1zRu7gMW8oTNSaZewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNaEehDdEsJQqLDZJixyO84OvpB5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjU2ZjdkODEtOTA1MS0z NmE2LThhNDUtYWEyMzExZTNkZjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCIXqhSgGSC3MmMD0nffELjw2WeG2tp7dFoINCAOAdq3bY92O+KnJov /3RHT5XhFdh9mYl2pTjUWZ2adoV6a04EoL7KGKsEUq12pS0lq435dtsZbDnrbfjJ xZhZniXlBGIlpuxqjOE2/t+Vq84icv6q/S2CyEEFyuKVdPAXrV9YMvS8wVIBNnW9 z5nP5iAUP4f20gdjiZ9hDj5TV1Ergfpb6tDY38fb3Em79RjWi2JfkZ4ozOh5tw1N lXtUh26hxGj/0aiDOhp4aPAOhtuvZn1vASkMLF59TaF/JRdQ0CH3Y0YBkHHe/0wo MkcnouTAhK3mbe+UbseAYRDlXlHgtbHW -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:28 2025 by rpki-client