$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b631392-a580-3432-98c8-2b6576544515.roa File: 0b631392-a580-3432-98c8-2b6576544515.roa (raw, json) Hash identifier: OcTm5h8kIwxZ1aQ2PgIr9/4LwSs2Dw4aVw2gchNHH3I= Subject key identifier: 42:31:87:69:CD:91:9F:C9:DB:DF:DB:68:C1:F4:1B:17:DA:D0:40:37 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523464297C98DDE2F0AC40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b631392-a580-3432-98c8-2b6576544515.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396592 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:34:64:29:7c:98:dd:e2:f0:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=62631b2b-d19e-46a7-a62f-51d52706d4f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:19:25:ef:64:36:75:7f:d4:9b:e5:4f:94:78: b4:89:b7:8f:f9:4a:b0:14:75:1d:2d:70:58:f4:b8: 5f:23:65:c6:df:a3:59:19:c9:81:80:c8:70:15:48: 2a:90:02:02:b9:49:8e:a6:63:0b:5f:04:eb:14:b2: 89:32:f0:a9:ee:ab:b2:51:ec:11:70:b6:fa:76:b6: 6a:ef:23:c6:4f:c0:ec:7f:35:38:11:ae:81:ad:53: 72:f4:a0:6b:5a:a4:f1:1c:b7:40:2c:dc:71:8f:e0: 31:4e:24:1a:9f:1b:9d:ca:3a:3d:13:73:b0:8f:02: e4:51:6f:fe:4d:b7:ba:95:d1:e0:85:d6:0b:be:3d: 50:ad:57:7a:20:12:3e:57:36:2b:8f:19:40:8d:0a: 2b:da:3b:4c:40:e9:c2:40:d9:96:a2:ca:25:33:47: bd:a8:c5:00:20:05:70:e6:14:a7:ee:46:20:14:29: 15:b5:21:18:3a:01:c2:a0:90:78:6e:e7:bd:94:92: 7b:18:65:d7:1f:23:a3:14:99:11:57:41:04:02:7c: 63:e6:77:d8:57:53:a9:84:61:4e:0e:f9:c7:af:7e: 0a:1a:ed:ab:a7:69:bb:91:7f:64:a9:b9:c0:59:39: 25:15:88:60:e8:80:a3:59:44:eb:83:26:28:ba:bb: 61:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:31:87:69:CD:91:9F:C9:DB:DF:DB:68:C1:F4:1B:17:DA:D0:40:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b631392-a580-3432-98c8-2b6576544515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:36:f2:a6:05:5f:55:d8:1b:9f:55:47:b3:9c:7d:39:ce:59: 50:91:c6:7a:1b:4c:4d:0d:c0:ca:cc:b4:f2:93:b1:82:f1:26: ed:a1:bb:3e:3b:72:cf:b0:69:57:d3:95:52:94:a7:2f:ed:25: 00:6f:b2:a9:fc:8b:5e:c4:64:d7:07:c2:58:8e:65:42:3a:f8: d6:9d:44:15:54:4b:e1:c6:06:cc:8e:7c:01:3f:ab:3e:62:84: 07:45:ca:8b:60:5a:8d:b4:86:3f:26:2f:6c:cd:15:88:da:3a: 8d:dd:5c:4c:f7:91:cb:7c:9d:6b:80:65:f3:17:93:54:37:88: 12:b3:89:bc:43:7b:2d:4c:32:49:cc:f3:29:0e:d2:9d:87:12: f5:5d:63:03:31:fa:15:20:20:e3:f7:6b:f9:21:4f:ab:8a:be: 4f:df:7e:79:fb:f2:9d:a6:53:8f:92:e0:07:67:af:20:a4:dc: 7d:a0:2f:4f:de:f5:ad:8b:fe:9b:51:5f:da:7b:13:0d:dd:bd: 1e:37:23:83:f4:5d:d8:fc:54:9b:2b:ca:2e:6f:a6:65:63:d6: dd:fe:d2:c4:dc:33:6d:2d:b1:c5:fd:a8:54:3f:0d:81:92:20: d0:64:20:73:74:1b:af:88:8d:24:93:a2:03:31:29:6b:21:93: e1:b9:e4:f8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjRkKXyY3eLwrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NjI2MzFiMmItZDE5ZS00NmE3LWE2MmYtNTFkNTI3MDZkNGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRkl72Q2dX/Um+VPlHi0ibeP+UqwFHUdLXBY 9LhfI2XG36NZGcmBgMhwFUgqkAICuUmOpmMLXwTrFLKJMvCp7quyUewRcLb6drZq 7yPGT8DsfzU4Ea6BrVNy9KBrWqTxHLdALNxxj+AxTiQanxudyjo9E3OwjwLkUW/+ Tbe6ldHghdYLvj1QrVd6IBI+VzYrjxlAjQor2jtMQOnCQNmWosolM0e9qMUAIAVw 5hSn7kYgFCkVtSEYOgHCoJB4bue9lJJ7GGXXHyOjFJkRV0EEAnxj5nfYV1OphGFO DvnHr34KGu2rp2m7kX9kqbnAWTklFYhg6ICjWUTrgyYourth3QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEIxh2nNkZ/J29/baMH0Gxfa0EA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGI2MzEzOTItYTU4MC0z NDMyLTk4YzgtMmI2NTc2NTQ0NTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBPNvKmBV9V2BufVUeznH05zllQkcZ6G0xNDcDKzLTyk7GC8Sbtobs+ O3LPsGlX05VSlKcv7SUAb7Kp/ItexGTXB8JYjmVCOvjWnUQVVEvhxgbMjnwBP6s+ YoQHRcqLYFqNtIY/Ji9szRWI2jqN3VxM95HLfJ1rgGXzF5NUN4gSs4m8Q3stTDJJ zPMpDtKdhxL1XWMDMfoVICDj92v5IU+rir5P3355+/KdplOPkuAHZ68gpNx9oC9P 3vWti/6bUV/aexMN3b0eNyOD9F3Y/FSbK8oub6ZlY9bd/tLE3DNtLbHF/ahUPw2B kiDQZCBzdBuviI0kk6IDMSlrIZPhueT4 -----END CERTIFICATE-----Generated at Wed Oct 29 20:31:33 2025 by rpki-client