$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfc98d87-51b3-3316-896f-e0a483a854c6.roa File: dfc98d87-51b3-3316-896f-e0a483a854c6.roa (raw, json) Hash identifier: IeBDSclfddV6uARtmK5eORESm9v4KbVg9boH3i/IaG0= Subject key identifier: B1:1C:DE:75:C5:97:5F:5F:61:17:85:34:D7:68:37:12:68:08:1D:A3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523A388D5687B1F7AA68E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfc98d87-51b3-3316-896f-e0a483a854c6.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397198 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3a:38:8d:56:87:b1:f7:aa:68:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=84a77ab0-a095-4f4e-9240-f4c6ac2bc287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c0:80:3b:d2:4b:22:e1:62:91:9c:ef:7e:e5: 53:2a:c1:2d:6d:b8:35:19:96:be:11:66:7a:ee:41: ce:77:09:1f:af:f4:80:bf:d1:ec:51:08:30:4a:06: 52:ab:ac:81:09:fb:a1:9f:49:15:82:3c:a9:90:ee: 8c:9a:c6:ff:3f:cb:fa:cb:c4:9e:f5:de:81:b5:d8: bc:9c:a7:9f:8a:c4:56:f9:ba:dd:67:4a:b1:63:d7: df:1d:bf:60:3e:49:48:ee:9d:4b:30:15:d0:fd:2f: 3d:1a:7a:77:4a:e6:f4:2e:04:15:ca:b9:ab:ee:d6: 86:55:8c:09:f5:5d:ff:27:cf:de:d2:49:9b:45:c9: c8:a5:5f:bc:1e:8e:15:4b:7c:d2:6e:22:36:cd:63: e1:07:36:a7:7c:15:08:96:9c:06:83:9c:f0:f0:16: d2:b0:96:87:dd:7a:f5:6b:36:b1:8c:8c:b6:ea:9c: 3e:3a:c2:0b:db:77:45:f9:a5:43:7e:a2:37:20:24: a3:42:25:b7:79:43:a4:33:5f:a7:69:b7:5f:52:28: 20:cf:e0:35:0a:0c:6b:9b:78:9c:5f:fb:50:15:f6: e9:4f:4c:e9:1e:63:cc:43:b2:27:2a:5b:fa:28:5a: 58:91:de:f9:bd:48:56:a2:8d:62:9d:48:cc:bf:c9: d3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1C:DE:75:C5:97:5F:5F:61:17:85:34:D7:68:37:12:68:08:1D:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfc98d87-51b3-3316-896f-e0a483a854c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:95:56:38:05:6c:dc:2a:29:b7:08:c7:aa:3c:75:84:ca:48: 42:4e:ca:06:66:27:19:64:a2:88:b4:ab:f4:63:41:b9:2a:56: 63:37:57:0a:03:af:3f:09:20:3c:b7:5d:11:93:cd:75:d2:c6: 9f:c4:b6:96:c9:50:a2:97:62:21:f2:b1:be:32:02:92:b8:3e: 69:1e:af:ed:01:c7:26:24:b6:30:16:47:b8:09:b4:45:a6:6a: 43:07:ee:c7:12:21:71:f9:85:30:df:b9:37:2c:8b:d5:9b:ad: 58:a0:7a:0b:eb:ca:99:79:43:79:a2:be:e7:e3:0b:76:e5:77: 2b:ad:c8:0d:9a:c1:2b:1e:92:e0:0e:33:6a:2d:82:56:81:4f: d1:da:d8:82:4c:5f:d0:88:dc:00:9f:70:9e:ad:4b:92:f8:5b: 51:bb:2c:c7:96:fc:46:c2:ee:6a:cb:32:07:c0:93:79:d7:f8: 79:3c:5e:12:56:99:64:28:ec:c8:39:14:33:ae:ae:6a:da:29: b4:63:b2:bb:df:59:0a:d7:e4:25:86:26:d5:e1:d6:86:6c:3c: 63:32:b5:8c:ac:43:76:ad:b0:d3:f6:e1:bc:65:2c:5f:3a:e7: 32:fe:f0:4f:9c:35:70:6d:48:2f:7f:b2:45:8c:8f:48:ec:6f: 05:8a:eb:63 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/Ujo4jVaHsfeqaOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ODRhNzdhYjAtYTA5NS00ZjRlLTkyNDAtZjRjNmFjMmJjMjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMCAO9JLIuFikZzvfuVTKsEtbbg1GZa+EWZ6 7kHOdwkfr/SAv9HsUQgwSgZSq6yBCfuhn0kVgjypkO6Mmsb/P8v6y8Se9d6Btdi8 nKefisRW+brdZ0qxY9ffHb9gPklI7p1LMBXQ/S89Gnp3Sub0LgQVyrmr7taGVYwJ 9V3/J8/e0kmbRcnIpV+8Ho4VS3zSbiI2zWPhBzanfBUIlpwGg5zw8BbSsJaH3Xr1 azaxjIy26pw+OsIL23dF+aVDfqI3ICSjQiW3eUOkM1+nabdfUiggz+A1Cgxrm3ic X/tQFfbpT0zpHmPMQ7InKlv6KFpYkd75vUhWoo1inUjMv8nTAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLEc3nXFl19fYReFNNdoNxJoCB2jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGZjOThkODctNTFiMy0z MzE2LTg5NmYtZTBhNDgzYTg1NGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAFlVY4BWzcKim3CMeqPHWEykhCTsoGZicZZKKItKv0Y0G5KlZjN1cK A68/CSA8t10Rk8110safxLaWyVCil2Ih8rG+MgKSuD5pHq/tAccmJLYwFke4CbRF pmpDB+7HEiFx+YUw37k3LIvVm61YoHoL68qZeUN5or7n4wt25XcrrcgNmsErHpLg DjNqLYJWgU/R2tiCTF/QiNwAn3CerUuS+FtRuyzHlvxGwu5qyzIHwJN51/h5PF4S VplkKOzIORQzrq5q2im0Y7K731kK1+QlhibV4daGbDxjMrWMrEN2rbDT9uG8ZSxf Oucy/vBPnDVwbUgvf7JFjI9I7G8Fiutj -----END CERTIFICATE-----Generated at Mon Oct 20 10:28:00 2025 by rpki-client