$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e3659689-7db4-3b56-b886-8c7b5eba6f9e.roa File: e3659689-7db4-3b56-b886-8c7b5eba6f9e.roa (raw, json) Hash identifier: 9z7Eg3oAKQ31aYKMx8qKTArn4vOz2pg7HnrKbAVw1m8= Subject key identifier: 7F:BF:E0:0C:4E:D9:D0:AA:A8:46:79:F9:E5:87:4E:80:B5:B1:7C:91 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523F41ADC14263DCD41840 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e3659689-7db4-3b56-b886-8c7b5eba6f9e.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396587 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3f:41:ad:c1:42:63:dc:d4:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=fb46d192-65dd-4709-b300-d075f0b8c77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:23:66:d0:21:d0:fe:3e:32:f3:f2:3b:e9:82: 3b:b6:60:91:e1:85:46:99:f4:21:b1:96:07:d1:c8: c0:44:5e:85:9d:76:f3:ce:72:8c:fc:61:e7:5c:15: ce:9f:ce:c5:8d:18:cc:88:4b:97:15:d1:de:f7:5f: af:92:42:84:e7:56:94:29:2c:2e:d8:18:c4:a2:66: da:34:d6:23:50:a2:3c:a0:f1:ff:46:3a:54:03:46: 27:06:b5:7a:56:cd:68:20:48:c1:13:a1:f3:fd:7d: 19:6f:3a:40:51:40:0d:cd:72:aa:4d:a3:c7:30:ae: d9:4d:6f:70:1d:7a:92:8d:f5:d5:20:13:b3:5f:a6: 80:d3:93:0e:25:4d:0c:5c:6c:53:95:87:97:5d:66: 0b:bd:78:3d:f4:57:ff:ae:e4:af:87:c4:a5:09:e5: 67:6e:02:d7:72:a3:60:6a:0e:9c:a5:bb:ef:6e:99: 67:78:87:28:f0:17:2e:da:45:11:cd:42:ae:4f:18: 42:ca:c9:7e:4f:2b:07:60:c1:16:55:26:b7:0b:16: 3c:fe:38:a6:a2:3b:db:3a:a7:50:f1:9c:93:43:43: eb:76:40:18:36:b6:12:cf:f4:6e:8e:28:ec:5a:9b: 24:81:a5:6e:2e:bf:e5:e0:31:58:ac:8d:d6:8e:d7: 08:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BF:E0:0C:4E:D9:D0:AA:A8:46:79:F9:E5:87:4E:80:B5:B1:7C:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e3659689-7db4-3b56-b886-8c7b5eba6f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:16:70:96:f8:31:4d:55:c5:34:01:1e:46:8c:7e:b6:cc:71: f3:c8:0d:80:3e:39:58:d0:0a:74:1d:23:3d:04:ba:1e:60:7b: 66:66:24:f3:06:ba:ae:10:48:47:09:e4:e1:d6:de:67:ca:60: 33:f4:ce:98:93:01:1f:a0:0d:ea:8f:c8:64:ff:e1:86:f5:fc: 3e:d8:f4:0a:6a:d5:3b:a8:57:f4:78:76:4f:3e:37:ac:fd:96: e0:83:03:cd:87:12:e9:08:37:90:a3:77:b3:14:d2:c9:a1:e7: ae:34:b3:a1:29:08:e6:05:c8:05:1c:68:07:ba:cf:ff:89:f1: 58:f8:4e:1a:b0:46:dc:6a:ca:50:a7:4c:cc:ea:84:4a:3f:2b: 3b:0f:61:50:a3:c6:c1:b3:05:b1:b9:d7:11:cf:28:16:17:ae: e6:13:c5:9f:fa:54:a4:55:57:25:ea:61:0f:69:ef:8e:b4:20: f2:a1:37:d7:20:c2:7c:89:48:b6:31:16:d9:2f:19:0b:6e:42: 17:ef:31:17:db:5f:ac:ca:c1:6f:2d:f2:2c:2b:e2:2c:3d:a1: b7:3b:71:c4:41:d7:f1:d0:5e:28:03:85:d0:cc:b4:92:07:05: 75:9d:cf:42:a0:c7:69:3c:87:08:fa:70:77:b0:b3:2b:86:03: fb:fe:90:40 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/Uj9BrcFCY9zUGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZmI0NmQxOTItNjVkZC00NzA5LWIzMDAtZDA3NWYwYjhjNzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSNm0CHQ/j4y8/I76YI7tmCR4YVGmfQhsZYH 0cjARF6FnXbzznKM/GHnXBXOn87FjRjMiEuXFdHe91+vkkKE51aUKSwu2BjEomba NNYjUKI8oPH/RjpUA0YnBrV6Vs1oIEjBE6Hz/X0ZbzpAUUANzXKqTaPHMK7ZTW9w HXqSjfXVIBOzX6aA05MOJU0MXGxTlYeXXWYLvXg99Ff/ruSvh8SlCeVnbgLXcqNg ag6cpbvvbplneIco8Bcu2kURzUKuTxhCysl+TysHYMEWVSa3CxY8/jimojvbOqdQ 8ZyTQ0PrdkAYNrYSz/RujijsWpskgaVuLr/l4DFYrI3WjtcI+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH+/4AxO2dCqqEZ5+eWHToC1sXyRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTM2NTk2ODktN2RiNC0z YjU2LWI4ODYtOGM3YjVlYmE2ZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA4FnCW+DFNVcU0AR5GjH62zHHzyA2APjlY0Ap0HSM9BLoeYHtmZiTz BrquEEhHCeTh1t5nymAz9M6YkwEfoA3qj8hk/+GG9fw+2PQKatU7qFf0eHZPPjes /ZbggwPNhxLpCDeQo3ezFNLJoeeuNLOhKQjmBcgFHGgHus//ifFY+E4asEbcaspQ p0zM6oRKPys7D2FQo8bBswWxudcRzygWF67mE8Wf+lSkVVcl6mEPae+OtCDyoTfX IMJ8iUi2MRbZLxkLbkIX7zEX21+sysFvLfIsK+IsPaG3O3HEQdfx0F4oA4XQzLSS BwV1nc9CoMdpPIcI+nB3sLMrhgP7/pBA -----END CERTIFICATE-----Generated at Mon Oct 20 15:53:03 2025 by rpki-client