$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c80bd5ea-200a-3d8e-a29c-4b8c5934f19c.roa File: c80bd5ea-200a-3d8e-a29c-4b8c5934f19c.roa (raw, json) Hash identifier: 2uxVNvBvu6gliD8nBxY40rJa8AlSsEhImPi/u4vMt6I= Subject key identifier: 91:ED:CD:30:18:D2:38:F3:19:AB:A9:AC:D6:68:C2:00:BE:79:35:3C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523F341C0C7C3B21591960 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c80bd5ea-200a-3d8e-a29c-4b8c5934f19c.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396575 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3f:34:1c:0c:7c:3b:21:59:19:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=75965eb7-675f-481d-8aa9-b8e3d7bf3b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:60:3a:f7:ef:ad:08:17:bd:c9:e6:b3:71:99: 7a:3a:3a:48:aa:99:14:fe:49:5c:58:5b:4b:86:69: 40:ba:c0:1c:52:55:b0:f7:b2:52:d1:5a:89:60:ab: e3:db:0d:e8:f9:11:2d:28:0f:e5:6f:ca:c0:41:36: 1b:f4:02:cb:e6:e7:5e:2f:73:c9:ac:33:2c:9f:6e: 2a:4d:00:86:e4:d9:52:42:44:0d:06:77:c1:ae:d0: 28:59:09:ba:f2:24:56:1b:ab:42:4b:38:84:2d:cf: b9:cb:fb:a2:87:47:e7:37:bc:65:c5:1d:16:3b:65: 52:9a:2e:92:ca:97:46:0c:ef:34:a7:73:e5:00:89: 1c:1c:01:63:f1:82:76:d3:f1:c5:99:5c:20:59:6b: c3:1b:81:dd:7c:24:63:6f:3c:20:87:8f:3b:ae:26: 7d:c6:b8:41:4c:88:78:df:3b:45:de:1c:f9:68:23: 11:fb:6a:a2:d3:6a:67:52:a7:bf:63:b9:a3:53:7c: b7:0c:9a:72:65:14:c8:89:6b:2f:54:7b:78:68:e2: 1e:d5:a5:4f:9c:95:a2:f5:66:11:77:a5:e4:d4:08: 44:4d:8c:6b:94:a8:da:4e:26:5a:bc:4f:e7:b2:74: 70:3a:1e:1e:68:62:0d:56:bf:68:e1:25:48:8e:81: cc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:ED:CD:30:18:D2:38:F3:19:AB:A9:AC:D6:68:C2:00:BE:79:35:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c80bd5ea-200a-3d8e-a29c-4b8c5934f19c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e5:36:02:ec:e0:2f:f3:49:23:fd:89:2c:75:ed:4d:71:e1: 44:8f:88:9a:02:b2:fe:b7:84:a4:b1:07:2e:16:44:a5:41:27: 43:ed:36:be:78:14:db:8b:d6:3b:08:32:c3:91:50:e5:cd:4f: 4c:ef:bd:75:67:74:05:02:92:5a:eb:2c:a9:6c:87:78:94:89: 1f:bc:b3:7c:fa:9a:d3:aa:01:8c:e1:38:0d:b7:88:e2:42:72: 57:10:09:af:d6:c5:d3:7d:f8:b2:3e:3e:40:07:33:6d:6e:79: 8b:4c:5a:e0:31:dd:db:31:7f:c6:4a:01:1b:cd:48:ec:4d:82: c9:33:84:23:94:a2:08:59:75:a8:00:2f:5d:68:25:2f:33:9e: 0b:eb:32:5d:f8:45:97:80:63:3a:8a:06:28:66:80:d5:2c:31: 14:a5:77:e9:30:81:e1:8a:28:79:07:92:5d:fe:a6:23:f5:69: d0:92:04:7c:03:fb:b1:e5:ad:6a:82:e0:85:ff:4c:c3:48:96: d3:02:fa:a0:71:94:5a:27:c6:99:f5:9c:f8:fa:25:0f:5b:58: fd:e3:1c:ed:7d:9e:1f:39:2c:a7:16:66:f4:65:5f:52:4c:c2: fb:50:41:d0:14:d4:06:a3:cf:d0:6b:96:67:1b:5b:a0:b8:e9: d7:bd:f8:e3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/Uj80HAx8OyFZGWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NzU5NjVlYjctNjc1Zi00ODFkLThhYTktYjhlM2Q3YmYzYjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2A69++tCBe9yeazcZl6OjpIqpkU/klcWFtL hmlAusAcUlWw97JS0VqJYKvj2w3o+REtKA/lb8rAQTYb9ALL5udeL3PJrDMsn24q TQCG5NlSQkQNBnfBrtAoWQm68iRWG6tCSziELc+5y/uih0fnN7xlxR0WO2VSmi6S ypdGDO80p3PlAIkcHAFj8YJ20/HFmVwgWWvDG4HdfCRjbzwgh487riZ9xrhBTIh4 3ztF3hz5aCMR+2qi02pnUqe/Y7mjU3y3DJpyZRTIiWsvVHt4aOIe1aVPnJWi9WYR d6Xk1AhETYxrlKjaTiZavE/nsnRwOh4eaGINVr9o4SVIjoHM/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJHtzTAY0jjzGauprNZowgC+eTU8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzgwYmQ1ZWEtMjAwYS0z ZDhlLWEyOWMtNGI4YzU5MzRmMTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBl5TYC7OAv80kj/Yksde1NceFEj4iaArL+t4SksQcuFkSlQSdD7Ta+ eBTbi9Y7CDLDkVDlzU9M7711Z3QFApJa6yypbId4lIkfvLN8+prTqgGM4TgNt4ji QnJXEAmv1sXTffiyPj5ABzNtbnmLTFrgMd3bMX/GSgEbzUjsTYLJM4QjlKIIWXWo AC9daCUvM54L6zJd+EWXgGM6igYoZoDVLDEUpXfpMIHhiih5B5Jd/qYj9WnQkgR8 A/ux5a1qguCF/0zDSJbTAvqgcZRaJ8aZ9Zz4+iUPW1j94xztfZ4fOSynFmb0ZV9S TML7UEHQFNQGo8/Qa5ZnG1uguOnXvfjj -----END CERTIFICATE-----Generated at Mon Oct 20 08:06:53 2025 by rpki-client