$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb1eec45-973c-3753-886a-eb35a4c92628.roa File: fb1eec45-973c-3753-886a-eb35a4c92628.roa (raw, json) Hash identifier: J2t9KH3B6nBM0O76qS6KqJLCmPqNVkL8wwRtZXwQYoU= Subject key identifier: ED:20:2D:DA:53:8B:4B:D2:A1:9A:AB:28:DE:9E:EA:D7:62:02:97:24 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523216586199CA05DFE3E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb1eec45-973c-3753-886a-eb35a4c92628.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 36618 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:32:16:58:61:99:ca:05:df:e3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=5434fae0-e495-418f-8bf1-ef4f6dff7177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b9:fe:3c:00:ac:9a:08:6e:12:ee:d6:0b:f6: 5d:4a:2e:92:79:5e:f9:72:97:b2:7a:91:34:4b:a4: 3c:ea:03:f3:a2:7a:94:48:93:47:59:fb:30:8d:45: 74:77:93:9f:e9:0b:28:31:da:6f:34:0b:08:dc:94: de:b9:0f:63:05:b8:0f:f3:34:63:d6:ab:c5:5d:e5: 1a:7a:e6:3b:4c:ec:1d:66:a3:81:18:b8:2e:3b:dd: 0a:1a:d1:68:2d:8e:8d:48:92:ee:2a:5a:86:c3:c9: 01:90:5a:01:c9:24:bb:5b:c2:69:18:30:38:f9:a5: 61:77:6c:de:dd:76:15:e7:b6:b3:63:88:7d:4b:1b: 4c:94:dc:68:d5:75:d6:6c:0c:b2:dc:a7:2e:68:b9: e4:a9:57:7b:ca:2c:55:10:a2:d5:25:cf:e0:39:18: 69:ca:1b:75:7e:f1:0f:9e:5c:b0:49:5b:96:65:8a: cb:dc:3e:a7:e3:6a:49:03:02:86:c4:e1:6c:75:8f: b5:da:03:03:ac:69:19:b7:d6:84:40:39:3a:f7:5d: 91:38:af:f7:35:4d:26:db:79:fd:71:c5:0c:de:19: d2:8a:2a:1c:8e:ab:4b:af:74:ee:69:d8:3f:4b:43: 3a:58:84:05:83:13:aa:dc:e1:40:a9:3d:ce:9b:37: 13:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:20:2D:DA:53:8B:4B:D2:A1:9A:AB:28:DE:9E:EA:D7:62:02:97:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb1eec45-973c-3753-886a-eb35a4c92628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:71:33:55:6a:d5:c3:20:93:ec:80:08:21:35:54:7f:e8:df: 4d:22:7a:1d:62:ed:8e:c9:f9:09:ae:b4:65:45:c8:6e:a3:b0: 3e:37:7b:a0:22:57:98:3f:c0:63:65:5f:80:7f:bd:33:18:f6: 0c:d4:b9:2d:ad:77:0b:60:2f:98:62:64:cc:e9:bb:c6:93:37: 1f:d0:24:cb:79:87:6c:5e:1e:bc:c6:81:51:c3:15:c0:2f:45: bd:f7:21:d4:dc:e5:62:80:d0:b6:26:06:cb:7f:28:47:f9:6e: 94:f7:9a:ec:fb:47:6c:14:96:0e:f1:28:da:7b:97:f0:e3:76: 18:f4:47:0b:1c:ba:fa:5f:3c:24:56:29:62:c4:99:61:68:01: 22:f8:9b:f4:97:78:e9:a6:fb:5f:11:bf:6a:a8:df:cf:ba:a6: 46:02:e7:63:89:0a:ed:72:7d:a6:f3:ce:7f:c0:5f:65:09:8e: 1a:cb:15:87:97:5b:51:cb:53:65:9a:4e:3e:a8:20:82:f0:a1: bd:f7:25:0b:33:f9:93:b3:60:9d:a9:0b:a6:9d:39:ac:07:82: 3f:dc:99:62:73:a4:cd:ca:81:a8:42:e7:57:7b:81:ff:c9:38: c2:18:d2:5d:85:fb:9e:35:c4:97:ce:ac:37:bd:b6:5d:d2:6a: 9f:df:3b:71 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjIWWGGZygXf4+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NTQzNGZhZTAtZTQ5NS00MThmLThiZjEtZWY0ZjZkZmY3MTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbn+PACsmghuEu7WC/ZdSi6SeV75cpeyepE0 S6Q86gPzonqUSJNHWfswjUV0d5Of6QsoMdpvNAsI3JTeuQ9jBbgP8zRj1qvFXeUa euY7TOwdZqOBGLguO90KGtFoLY6NSJLuKlqGw8kBkFoBySS7W8JpGDA4+aVhd2ze 3XYV57azY4h9SxtMlNxo1XXWbAyy3KcuaLnkqVd7yixVEKLVJc/gORhpyht1fvEP nlywSVuWZYrL3D6n42pJAwKGxOFsdY+12gMDrGkZt9aEQDk6912ROK/3NU0m23n9 ccUM3hnSiiocjqtLr3Tuadg/S0M6WIQFgxOq3OFAqT3OmzcTjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO0gLdpTi0vSoZqrKN6e6tdiApckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmIxZWVjNDUtOTczYy0z NzUzLTg4NmEtZWIzNWE0YzkyNjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAucTNVatXDIJPsgAghNVR/6N9NInodYu2OyfkJrrRlRchuo7A+N3ug IleYP8BjZV+Af70zGPYM1LktrXcLYC+YYmTM6bvGkzcf0CTLeYdsXh68xoFRwxXA L0W99yHU3OVigNC2JgbLfyhH+W6U95rs+0dsFJYO8Sjae5fw43YY9EcLHLr6Xzwk VilixJlhaAEi+Jv0l3jppvtfEb9qqN/PuqZGAudjiQrtcn2m885/wF9lCY4ayxWH l1tRy1Nlmk4+qCCC8KG99yULM/mTs2CdqQumnTmsB4I/3Jlic6TNyoGoQudXe4H/ yTjCGNJdhfueNcSXzqw3vbZd0mqf3ztx -----END CERTIFICATE-----Generated at Mon Oct 20 10:31:56 2025 by rpki-client