$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef653022-c567-35f5-b846-8c4d43059dd0.roa File: ef653022-c567-35f5-b846-8c4d43059dd0.roa (raw, json) Hash identifier: rHMeCWxM0eq1+Hk5fCtgCDIHld9ROGVLoWk8B8q6IUo= Subject key identifier: A6:F9:A8:2A:81:61:B3:23:60:ED:0C:D4:E3:06:F9:C2:A4:6D:31:9D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F52328A5F2C100A7E2C1700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef653022-c567-35f5-b846-8c4d43059dd0.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396562 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:32:8a:5f:2c:10:0a:7e:2c:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=0eab384f-d5ff-4fd5-94ce-f76194594cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a8:9c:cd:02:fa:69:e9:fd:6e:49:da:56:6b: fe:56:7a:fb:f3:e7:18:1b:17:96:41:cf:b0:9e:47: 3b:6d:63:69:1d:00:0e:56:bb:49:2d:42:30:46:75: 8d:33:1a:58:c3:8b:35:78:9b:b4:a1:34:cb:c7:b4: 86:4d:fc:40:f2:45:74:c5:df:b6:7d:15:ed:68:c0: 84:2f:fa:b2:21:90:55:f0:40:88:a0:15:39:98:fc: d2:21:0a:ef:e5:74:61:3d:11:30:f0:c3:0a:05:ca: 8b:8b:73:83:95:86:f6:7d:59:f8:56:92:ec:e5:0a: d9:bf:91:17:9f:a7:12:22:ec:36:78:15:7d:9f:a2: bf:5d:eb:59:23:5b:10:e2:3c:e3:06:c3:cf:d3:b5: 05:81:d2:fa:fb:32:40:98:11:0f:bf:12:ca:36:1d: 9d:b4:fe:a1:4d:c0:c7:61:1e:53:aa:ac:a4:9b:16: d3:8e:66:05:62:57:0b:b0:4c:be:c9:c1:19:f2:d3: 3a:b7:30:55:39:44:29:7c:13:1b:d5:19:f7:bd:57: 0b:52:f5:9b:cc:cb:be:21:30:e9:9e:b8:45:bf:1c: a4:6b:04:23:27:dc:1d:e6:a1:f8:31:f2:32:2b:e9: b8:3b:90:f3:b7:4e:19:5c:e5:19:b3:b1:76:f2:34: 03:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F9:A8:2A:81:61:B3:23:60:ED:0C:D4:E3:06:F9:C2:A4:6D:31:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef653022-c567-35f5-b846-8c4d43059dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:96:8d:a7:d1:f1:36:36:10:17:48:99:7e:7c:89:ad:4b:09: 05:bb:9e:21:22:28:bb:f6:20:81:60:57:a4:60:95:b3:84:4a: 1c:30:6f:f1:63:10:a1:39:f5:a0:05:91:dc:ec:d9:d7:ab:86: 1c:25:ab:d3:9a:16:00:eb:4d:53:63:76:4f:3e:58:ce:3b:af: 99:f7:0d:41:5a:9e:c0:90:41:95:50:ef:74:52:74:db:08:39: 34:95:93:66:10:4c:c4:1d:33:44:b1:5b:78:df:82:a4:a1:2e: 24:80:84:a0:aa:58:75:32:4f:ad:58:3c:96:d7:95:59:e2:31: 34:57:51:e9:45:26:14:4b:1c:ae:5b:43:4a:eb:7e:0b:00:aa: 7c:3a:83:51:55:26:02:b5:13:04:db:f7:24:7b:47:8c:30:e3: ef:c6:7a:26:0a:22:2d:78:73:9e:7d:cd:dd:23:dd:5f:49:36: 62:86:24:38:41:34:de:83:d8:3a:c3:da:e2:a4:70:49:ec:2b: c3:22:c8:fd:fe:b7:1c:bb:d1:83:f6:fe:8c:d7:2c:e2:80:6e: 74:9f:16:94:71:a2:22:d7:63:65:dc:e3:4c:ab:e8:47:96:e0: 11:14:d7:44:5c:92:ae:f1:49:0b:5b:c0:90:38:ca:1a:be:7b: 7b:ab:d7:95 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjKKXywQCn4sFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MGVhYjM4NGYtZDVmZi00ZmQ1LTk0Y2UtZjc2MTk0NTk0Y2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKiczQL6aen9bknaVmv+Vnr78+cYGxeWQc+w nkc7bWNpHQAOVrtJLUIwRnWNMxpYw4s1eJu0oTTLx7SGTfxA8kV0xd+2fRXtaMCE L/qyIZBV8ECIoBU5mPzSIQrv5XRhPREw8MMKBcqLi3ODlYb2fVn4VpLs5QrZv5EX n6cSIuw2eBV9n6K/XetZI1sQ4jzjBsPP07UFgdL6+zJAmBEPvxLKNh2dtP6hTcDH YR5TqqykmxbTjmYFYlcLsEy+ycEZ8tM6tzBVOUQpfBMb1Rn3vVcLUvWbzMu+ITDp nrhFvxykawQjJ9wd5qH4MfIyK+m4O5Dzt04ZXOUZs7F28jQD8wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKb5qCqBYbMjYO0M1OMG+cKkbTGdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY2NTMwMjItYzU2Ny0z NWY1LWI4NDYtOGM0ZDQzMDU5ZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAOlo2n0fE2NhAXSJl+fImtSwkFu54hIii79iCBYFekYJWzhEocMG/x YxChOfWgBZHc7NnXq4YcJavTmhYA601TY3ZPPljOO6+Z9w1BWp7AkEGVUO90UnTb CDk0lZNmEEzEHTNEsVt434KkoS4kgISgqlh1Mk+tWDyW15VZ4jE0V1HpRSYUSxyu W0NK634LAKp8OoNRVSYCtRME2/cke0eMMOPvxnomCiIteHOefc3dI91fSTZihiQ4 QTTeg9g6w9ripHBJ7CvDIsj9/rccu9GD9v6M1yzigG50nxaUcaIi12Nl3ONMq+hH luARFNdEXJKu8UkLW8CQOMoavnt7q9eV -----END CERTIFICATE-----Generated at Mon Oct 20 08:11:54 2025 by rpki-client