$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d020b984-10d1-399a-87b5-943c430128fe.roa File: d020b984-10d1-399a-87b5-943c430128fe.roa (raw, json) Hash identifier: Bw0c2+DTHTlZy82FDF/skxqkAZDMI7O18Qdp8Ug9C4Q= Subject key identifier: 66:4D:8F:79:AD:F3:5B:D9:D0:35:E5:98:E3:38:47:4C:AA:A0:8E:E6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F5234CBAF60483D2E9110B0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d020b984-10d1-399a-87b5-943c430128fe.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396552 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:34:cb:af:60:48:3d:2e:91:10:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=8914c0b3-dad5-42e5-9de4-88f5a4d02d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7a:2d:b1:18:fd:0b:08:32:05:87:71:72:06: db:5c:f4:1c:d4:a8:6d:4f:9c:4e:93:2f:e4:55:9e: 26:99:ed:bd:86:14:0d:c2:d0:24:4b:c5:73:40:37: 37:eb:52:ff:ad:d7:e6:3a:1f:da:a2:a8:b3:c2:60: 10:b6:b0:f9:56:fe:38:d2:18:16:67:bf:0f:4e:7e: ea:a9:88:1e:70:8f:13:ae:7a:91:58:d6:6c:80:fc: 44:83:7f:a9:a7:77:d6:21:d4:73:74:d5:1c:28:e7: 91:82:1b:d7:f0:b8:50:6b:09:db:64:da:85:3b:a9: bc:4c:91:1f:0f:6f:a6:b3:88:18:e7:45:a9:47:15: 64:72:dc:31:75:52:4c:ec:3a:2a:1e:be:10:15:1b: d6:d6:ac:35:2f:eb:40:cd:d8:3b:31:7d:3c:c0:0f: fa:fd:1c:75:bf:74:e7:d9:15:3c:2a:18:34:00:fa: 87:eb:f2:0b:8b:7f:5e:f6:bb:57:0e:cb:0b:52:1c: 5f:f2:fa:4c:a2:41:66:5c:2e:df:af:0b:c5:c2:7a: 66:81:24:27:f9:79:03:d7:81:e0:a6:bc:91:92:12: 34:a0:31:27:62:9a:de:a4:5d:d1:ca:2b:7a:12:61: fe:ea:79:b8:ac:1f:a6:9f:9d:9e:52:55:af:49:0f: f2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4D:8F:79:AD:F3:5B:D9:D0:35:E5:98:E3:38:47:4C:AA:A0:8E:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d020b984-10d1-399a-87b5-943c430128fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:03:3d:f0:91:76:37:5c:eb:fb:1b:8f:f7:38:11:8d:bb:46: 04:12:c2:b0:e6:ee:39:1e:10:32:fc:91:34:d8:2f:3e:68:1e: 92:13:15:a6:32:46:b6:1a:6b:aa:b6:96:ba:00:01:f5:3c:2a: 4d:9b:1e:c3:95:48:af:e5:09:fc:4d:fa:41:c1:db:fc:07:2b: af:57:f2:3b:1a:ec:62:e4:98:cf:00:36:d4:1c:24:75:3a:36: 95:04:d2:ee:74:3c:0d:57:1a:b1:94:9c:07:78:87:d2:a5:49: 69:4d:2a:a3:a2:71:d1:62:dd:a0:6f:73:de:cf:16:6f:c2:cc: df:48:b6:b0:97:06:2f:36:f2:de:db:4d:75:1b:72:67:17:45: 58:90:ad:6d:63:e2:9d:15:2a:5b:44:fd:01:3f:50:1e:c7:5b: 7e:42:8f:5b:b1:ac:54:55:8b:74:27:7b:9e:c1:50:61:d8:86: f3:46:d2:33:41:4c:20:5b:15:de:be:d2:c8:2c:88:a6:45:76: 2f:a2:dc:f2:08:37:72:d4:38:af:b6:38:8e:b1:2b:2d:93:2c: ea:14:2e:ed:32:d4:f0:f1:15:85:84:c5:16:ac:b6:2c:3c:2d: be:a7:1e:2f:89:c1:04:28:a0:1c:f1:62:c0:c6:97:8c:51:71: 07:8b:1c:b1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjTLr2BIPS6RELAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ODkxNGMwYjMtZGFkNS00MmU1LTlkZTQtODhmNWE0ZDAyZDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHotsRj9CwgyBYdxcgbbXPQc1KhtT5xOky/k VZ4mme29hhQNwtAkS8VzQDc361L/rdfmOh/aoqizwmAQtrD5Vv440hgWZ78PTn7q qYgecI8TrnqRWNZsgPxEg3+pp3fWIdRzdNUcKOeRghvX8LhQawnbZNqFO6m8TJEf D2+ms4gY50WpRxVkctwxdVJM7DoqHr4QFRvW1qw1L+tAzdg7MX08wA/6/Rx1v3Tn 2RU8Khg0APqH6/ILi39e9rtXDssLUhxf8vpMokFmXC7frwvFwnpmgSQn+XkD14Hg pryRkhI0oDEnYprepF3Ryit6EmH+6nm4rB+mn52eUlWvSQ/ytQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGZNj3mt81vZ0DXlmOM4R0yqoI7mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDAyMGI5ODQtMTBkMS0z OTlhLTg3YjUtOTQzYzQzMDEyOGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAYAz3wkXY3XOv7G4/3OBGNu0YEEsKw5u45HhAy/JE02C8+aB6SExWm Mka2Gmuqtpa6AAH1PCpNmx7DlUiv5Qn8TfpBwdv8ByuvV/I7Guxi5JjPADbUHCR1 OjaVBNLudDwNVxqxlJwHeIfSpUlpTSqjonHRYt2gb3PezxZvwszfSLawlwYvNvLe 2011G3JnF0VYkK1tY+KdFSpbRP0BP1Aex1t+Qo9bsaxUVYt0J3uewVBh2IbzRtIz QUwgWxXevtLILIimRXYvotzyCDdy1DivtjiOsSstkyzqFC7tMtTw8RWFhMUWrLYs PC2+px4vicEEKKAc8WLAxpeMUXEHixyx -----END CERTIFICATE-----Generated at Mon Oct 20 15:54:00 2025 by rpki-client