$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef632643-5db0-3d19-ac3e-997b5ff39367.roa File: ef632643-5db0-3d19-ac3e-997b5ff39367.roa (raw, json) Hash identifier: tyc3MxOQfyrliwc5sjnOgxW43ja6Wm2Iinh+HQ/St3A= Subject key identifier: A0:09:E2:59:65:CD:DF:B6:65:C5:FD:4B:B6:64:15:37:20:E5:52:C3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523CE53C509839FBAC9C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef632643-5db0-3d19-ac3e-997b5ff39367.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396606 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3c:e5:3c:50:98:39:fb:ac:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=419b9af1-63c1-433f-8316-e315aa94782e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:73:00:75:e4:bd:05:73:ec:d7:a6:10:c3:f7: 4f:68:e9:82:e1:b4:bb:e6:8b:f4:9b:80:e3:e1:57: 2c:08:e7:75:54:49:64:4e:2f:d4:a4:7f:aa:57:6a: d5:37:e0:78:2f:d1:42:24:30:f7:b0:1a:12:fa:0c: 3b:02:5d:72:0a:a9:b8:b0:fb:e3:29:15:19:9b:24: 80:16:d9:bc:32:cc:26:be:02:e9:87:65:10:0b:ac: f5:14:45:7c:71:75:d2:d8:3c:58:d4:cf:d1:16:4e: 8b:28:27:e9:d3:6a:c8:cf:92:ff:3b:52:3f:97:5e: c2:79:fb:da:69:62:52:f4:0e:a4:f1:1e:f3:26:35: 84:17:23:2e:b0:ff:1c:ec:f2:f6:fd:f8:4e:2c:3b: 09:dc:eb:e1:25:05:2f:3c:db:d3:bc:06:df:7e:98: bd:a1:17:01:ac:c9:70:c3:22:ce:f5:c6:c3:00:ee: dd:ca:48:4c:8a:01:06:6c:ce:eb:e2:c7:c6:7a:a3: 17:f5:68:0e:80:b2:55:85:bb:64:ce:0d:66:19:9e: 50:6c:54:99:96:73:e3:43:33:33:a1:47:a2:81:15: 69:b2:1e:38:15:bb:c9:4a:b3:54:e3:c1:99:0f:54: 7b:da:b6:25:34:96:3c:dd:61:b1:aa:22:85:fe:6e: ca:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:09:E2:59:65:CD:DF:B6:65:C5:FD:4B:B6:64:15:37:20:E5:52:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef632643-5db0-3d19-ac3e-997b5ff39367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:c0:16:f7:05:d4:77:10:d6:b0:1e:f2:5c:43:d8:62:c6:ef: e0:3f:0d:cc:61:c9:0c:6f:ac:6b:fa:a6:36:da:40:f6:d3:fd: 2a:b3:62:57:01:6d:07:36:65:3a:a1:17:74:c7:69:2b:6f:0a: ef:16:f1:9e:ed:46:16:1a:1b:50:ac:d8:c4:74:9e:62:dc:51: 4e:77:58:a6:f0:4f:f1:b9:df:6b:95:9d:80:44:ff:34:83:12: 02:a2:c3:7f:9f:c4:1a:29:83:c2:44:c0:fb:77:01:d1:98:65: 04:01:da:ce:84:47:cd:f1:9a:43:45:a2:24:94:bd:47:ef:fe: 3b:2b:26:dc:61:57:de:4e:52:f7:4f:81:d0:05:f0:3b:26:2a: 02:70:c3:88:ca:e2:d3:73:0d:28:70:fa:c1:d5:44:f0:d9:a2: 08:7e:f4:4d:cd:82:22:e1:0d:84:32:42:6f:d3:0b:cf:06:71: 58:d0:aa:1b:83:d5:e5:01:f7:ee:ff:7b:5b:54:f7:d6:c8:41: c2:76:6f:6d:0c:b6:75:b2:a0:e4:1f:1f:02:a3:95:00:08:78: 78:9e:59:98:f8:a8:5a:53:cd:63:15:87:12:54:04:b0:a7:09: f7:5d:eb:30:09:a3:d7:06:d6:6e:fc:8a:e3:04:25:38:c9:10: 73:47:fb:9d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjzlPFCYOfusnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NDE5YjlhZjEtNjNjMS00MzNmLTgzMTYtZTMxNWFhOTQ3ODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXMAdeS9BXPs16YQw/dPaOmC4bS75ov0m4Dj 4VcsCOd1VElkTi/UpH+qV2rVN+B4L9FCJDD3sBoS+gw7Al1yCqm4sPvjKRUZmySA Ftm8MswmvgLph2UQC6z1FEV8cXXS2DxY1M/RFk6LKCfp02rIz5L/O1I/l17Cefva aWJS9A6k8R7zJjWEFyMusP8c7PL2/fhOLDsJ3OvhJQUvPNvTvAbffpi9oRcBrMlw wyLO9cbDAO7dykhMigEGbM7r4sfGeqMX9WgOgLJVhbtkzg1mGZ5QbFSZlnPjQzMz oUeigRVpsh44FbvJSrNU48GZD1R72rYlNJY83WGxqiKF/m7KCwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKAJ4lllzd+2ZcX9S7ZkFTcg5VLDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY2MzI2NDMtNWRiMC0z ZDE5LWFjM2UtOTk3YjVmZjM5MzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB/wBb3BdR3ENawHvJcQ9hixu/gPw3MYckMb6xr+qY22kD20/0qs2JX AW0HNmU6oRd0x2krbwrvFvGe7UYWGhtQrNjEdJ5i3FFOd1im8E/xud9rlZ2ARP80 gxICosN/n8QaKYPCRMD7dwHRmGUEAdrOhEfN8ZpDRaIklL1H7/47KybcYVfeTlL3 T4HQBfA7JioCcMOIyuLTcw0ocPrB1UTw2aIIfvRNzYIi4Q2EMkJv0wvPBnFY0Kob g9XlAffu/3tbVPfWyEHCdm9tDLZ1sqDkHx8Co5UACHh4nlmY+KhaU81jFYcSVASw pwn3XeswCaPXBtZu/IrjBCU4yRBzR/ud -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:26 2025 by rpki-client