$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2d74e3c-55be-36b0-8ce3-b8900416e694.roa File: d2d74e3c-55be-36b0-8ce3-b8900416e694.roa (raw, json) Hash identifier: ed2OaywcirLqbwmJDwmngXhCifm4AuuYFRsFEabMBmo= Subject key identifier: DD:4A:43:E8:2B:A2:CF:5B:49:D5:22:21:C5:6E:E1:0D:99:39:23:B6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523C4807458811F872BF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2d74e3c-55be-36b0-8ce3-b8900416e694.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396600 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3c:48:07:45:88:11:f8:72:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=2e7bf6bc-8f51-4872-8a29-61ff293a0409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:28:08:e0:13:02:5e:58:c8:4b:4f:9b:d2:1a: 0d:9e:bc:99:fb:01:12:7e:e1:28:c4:06:3d:8c:6d: c1:24:d1:75:7f:fa:61:24:1a:f5:8a:c1:60:7d:dd: 4d:dc:49:db:e4:ad:76:f6:db:e3:17:ac:ed:de:96: cb:b8:6b:b4:df:c3:f6:0d:f0:a1:50:39:8a:84:38: b6:14:ce:9c:28:93:b4:48:a7:81:99:59:22:f6:d2: 64:8a:29:e6:2f:bd:7f:b7:2d:33:27:18:30:55:91: 32:55:24:f5:4d:f2:dd:46:3f:b1:9c:b5:7a:98:3f: dd:6c:1a:06:fd:e3:e8:26:e3:0b:42:29:1b:bd:d7: b5:0d:04:99:72:05:d9:88:58:fc:98:ec:37:33:6b: db:50:74:9e:68:e0:0b:f8:1a:d1:26:91:5a:2c:e9: 55:78:16:d7:38:07:9e:30:f5:f6:ea:27:6c:06:cc: fd:fc:cd:73:e6:1e:db:41:90:f8:2b:6a:74:b2:72: bb:cb:49:cd:6e:69:1b:4b:90:48:ac:9e:8b:2a:8d: 3f:40:70:cc:07:3c:ff:ff:04:a1:82:2b:86:1f:ec: 99:23:e4:68:9e:46:3c:e7:c0:48:a1:59:34:60:a4: f2:dd:93:ab:29:cc:2d:02:9c:41:9d:7e:04:d0:34: 0b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4A:43:E8:2B:A2:CF:5B:49:D5:22:21:C5:6E:E1:0D:99:39:23:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2d74e3c-55be-36b0-8ce3-b8900416e694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ef:16:ff:d6:a2:bf:a2:ff:b1:97:19:c5:ab:8c:f3:bd:ad: 56:cf:23:ee:3c:84:a7:71:d3:0a:2a:18:c8:2a:c8:18:a1:ea: d1:47:d3:e3:ff:46:1f:de:07:fb:f3:09:d1:95:79:82:2e:80: fc:d9:27:dc:62:ed:74:35:ec:90:cb:f4:fe:8e:59:19:04:7f: 69:46:10:95:39:27:bc:c4:c8:64:10:6c:36:7f:9c:31:f8:52: d3:56:f3:93:9a:38:3f:c5:e8:22:53:b1:0c:94:d3:ed:1a:99: 9e:12:d2:50:b5:88:00:99:0e:00:3f:73:d5:02:4f:6f:10:06: 5c:a3:cf:ac:8b:2e:a4:d8:44:9c:3a:e5:03:75:55:df:47:e6: 9d:86:28:e3:43:91:c7:13:52:7f:b3:47:99:df:2e:7e:ce:93: 4b:7f:59:54:89:73:e9:ab:12:01:48:4f:45:93:94:17:e0:68: 4e:68:e1:27:26:7d:d5:09:16:53:2e:69:72:f9:05:13:7c:27: 33:db:27:a7:00:a1:04:a5:60:d5:57:2f:85:55:0b:50:f7:a6: 58:4b:6b:d9:06:b9:bc:ad:25:71:54:3c:f5:bb:0c:f7:ee:be: 7d:b5:76:9c:2f:38:06:88:d0:f5:1c:57:d1:9e:aa:c7:4e:57: 90:2b:51:45 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjxIB0WIEfhyv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MmU3YmY2YmMtOGY1MS00ODcyLThhMjktNjFmZjI5M2EwNDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiigI4BMCXljIS0+b0hoNnryZ+wESfuEoxAY9 jG3BJNF1f/phJBr1isFgfd1N3Enb5K129tvjF6zt3pbLuGu038P2DfChUDmKhDi2 FM6cKJO0SKeBmVki9tJkiinmL71/ty0zJxgwVZEyVST1TfLdRj+xnLV6mD/dbBoG /ePoJuMLQikbvde1DQSZcgXZiFj8mOw3M2vbUHSeaOAL+BrRJpFaLOlVeBbXOAee MPX26idsBsz9/M1z5h7bQZD4K2p0snK7y0nNbmkbS5BIrJ6LKo0/QHDMBzz//wSh giuGH+yZI+RonkY858BIoVk0YKTy3ZOrKcwtApxBnX4E0DQLAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN1KQ+gros9bSdUiIcVu4Q2ZOSO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDJkNzRlM2MtNTViZS0z NmIwLThjZTMtYjg5MDA0MTZlNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBq7xb/1qK/ov+xlxnFq4zzva1WzyPuPISncdMKKhjIKsgYoerRR9Pj /0Yf3gf78wnRlXmCLoD82SfcYu10NeyQy/T+jlkZBH9pRhCVOSe8xMhkEGw2f5wx +FLTVvOTmjg/xegiU7EMlNPtGpmeEtJQtYgAmQ4AP3PVAk9vEAZco8+siy6k2ESc OuUDdVXfR+adhijjQ5HHE1J/s0eZ3y5+zpNLf1lUiXPpqxIBSE9Fk5QX4GhOaOEn Jn3VCRZTLmly+QUTfCcz2yenAKEEpWDVVy+FVQtQ96ZYS2vZBrm8rSVxVDz1uwz3 7r59tXacLzgGiND1HFfRnqrHTleQK1FF -----END CERTIFICATE-----Generated at Mon Oct 20 15:58:01 2025 by rpki-client