$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/02200ae9-3a06-31a9-a90d-6c381efab5ce.roa File: 02200ae9-3a06-31a9-a90d-6c381efab5ce.roa (raw, json) Hash identifier: vCngNSCeIxmWJM7oaEPPj0k4VQZPT6gqhGrcDyhRsi0= Subject key identifier: 81:F1:2B:39:DB:6B:E0:3D:ED:AC:AA:05:08:A3:DF:D0:5E:F6:99:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F52390649EBE0BBBEFEE900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/02200ae9-3a06-31a9-a90d-6c381efab5ce.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 211369 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:39:06:49:eb:e0:bb:be:fe:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=82d8e6d2-9c5d-490e-a5f7-9f81d71946f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:16:e2:8f:4c:4f:49:ec:aa:8b:79:09:a4:5a: cd:17:b1:ac:88:67:c9:31:d7:08:3c:39:f4:f7:b6: 39:d6:cf:a4:93:a7:29:c1:22:fd:82:bd:a4:6c:db: 0d:a4:ea:be:c2:1f:e3:20:28:ac:b9:04:2f:14:4f: 27:f5:82:5e:af:59:99:18:b7:2b:be:f3:47:38:5e: e4:f7:6b:b2:49:d9:9a:03:00:6d:b7:3f:83:a4:68: fe:bc:a4:90:6b:df:c5:c2:da:d4:0b:95:00:66:72: a9:cf:8a:9f:79:00:a0:a5:a6:7f:29:10:48:b2:14: 68:c6:01:af:82:c4:44:dd:8e:3a:21:c3:8a:b5:db: 97:4b:ad:c8:b7:cc:44:7b:5f:ca:49:dc:fb:1a:5d: 84:40:ad:e7:a3:44:4b:15:15:00:4e:25:fa:58:f0: 00:78:7a:5f:ca:ba:f8:20:76:03:cd:e8:ad:74:a7: f7:f6:9e:25:4f:63:c8:f8:e9:62:ff:26:b7:0e:2d: 13:82:0f:e0:84:c3:99:07:ac:79:81:55:60:c0:65: ff:ad:cd:43:f9:d3:9c:5c:bb:85:1a:53:a0:91:e3: a5:86:43:51:76:b4:4f:11:21:52:29:7d:48:1e:cf: 85:0e:d3:20:5c:b1:b0:f5:c1:f7:42:da:d6:e7:c1: 56:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F1:2B:39:DB:6B:E0:3D:ED:AC:AA:05:08:A3:DF:D0:5E:F6:99:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/02200ae9-3a06-31a9-a90d-6c381efab5ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:3c:e2:01:11:2f:fc:17:fb:84:ca:c1:7e:7b:e8:2a:d0:e4: 5b:ed:05:c5:c9:6f:d3:4e:5c:8b:b0:6a:fb:85:af:1a:9b:72: c3:a2:b4:7e:3f:4d:d7:2f:b1:69:f4:e2:b7:e7:de:6a:c4:49: 1e:6c:9b:02:b5:9c:d9:cc:57:b2:19:e6:2b:e3:d0:cf:a1:4d: 99:29:c7:3d:e0:c5:ac:e5:3f:e8:82:e2:ca:66:95:20:97:68: 67:d0:98:05:aa:0d:55:4b:b4:36:a0:28:7c:02:66:45:d4:97: a0:ca:fa:53:7a:55:fe:93:63:fd:e5:8b:72:ab:42:38:64:5d: 0c:c6:db:ec:6d:93:b2:e2:18:b8:52:b9:3d:57:b6:56:ec:b7: 0c:b3:19:5e:f7:49:08:c3:ca:6f:ca:90:dc:a0:e7:f3:28:52: 0f:4a:a2:e0:e1:fb:2a:8e:8d:fb:d6:dd:52:52:d2:3c:4b:dd: ee:4b:dd:1f:60:a7:9f:13:2a:27:46:d9:19:3b:bc:af:11:36: a4:d1:cc:cf:db:6d:d3:04:23:75:03:af:ed:29:e7:ee:b5:cf: ff:6c:4d:30:ec:6a:a9:7d:39:ac:8a:e3:d2:96:a6:e2:08:4a: 09:60:eb:c6:70:86:4e:02:40:4a:e8:8a:d4:9d:70:cf:03:55: 37:dd:ee:ab -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjkGSevgu77+6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ODJkOGU2ZDItOWM1ZC00OTBlLWE1ZjctOWY4MWQ3MTk0NmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhbij0xPSeyqi3kJpFrNF7GsiGfJMdcIPDn0 97Y51s+kk6cpwSL9gr2kbNsNpOq+wh/jICisuQQvFE8n9YJer1mZGLcrvvNHOF7k 92uySdmaAwBttz+DpGj+vKSQa9/FwtrUC5UAZnKpz4qfeQCgpaZ/KRBIshRoxgGv gsRE3Y46IcOKtduXS63It8xEe1/KSdz7Gl2EQK3no0RLFRUATiX6WPAAeHpfyrr4 IHYDzeitdKf39p4lT2PI+Oli/ya3Di0Tgg/ghMOZB6x5gVVgwGX/rc1D+dOcXLuF GlOgkeOlhkNRdrRPESFSKX1IHs+FDtMgXLGw9cH3QtrW58FWvwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIHxKznba+A97ayqBQij39Be9plxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDIyMDBhZTktM2EwNi0z MWE5LWE5MGQtNmMzODFlZmFiNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBBPOIBES/8F/uEysF+e+gq0ORb7QXFyW/TTlyLsGr7ha8am3LDorR+ P03XL7Fp9OK3595qxEkebJsCtZzZzFeyGeYr49DPoU2ZKcc94MWs5T/oguLKZpUg l2hn0JgFqg1VS7Q2oCh8AmZF1JegyvpTelX+k2P95Ytyq0I4ZF0MxtvsbZOy4hi4 Urk9V7ZW7LcMsxle90kIw8pvypDcoOfzKFIPSqLg4fsqjo371t1SUtI8S93uS90f YKefEyonRtkZO7yvETak0czP223TBCN1A6/tKefutc//bE0w7GqpfTmsiuPSlqbi CEoJYOvGcIZOAkBK6IrUnXDPA1U33e6r -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:22 2025 by rpki-client