$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4df9ddee-2cbd-3619-9d57-04b286b42dac.roa File: 4df9ddee-2cbd-3619-9d57-04b286b42dac.roa (raw, json) Hash identifier: MEgl1lLtW3RyFD72YJYyEpYXtXqFcrR5Jx/y2xRgCkk= Subject key identifier: 31:56:C6:F4:65:EA:8F:4C:67:84:6D:6F:01:13:DB:32:81:79:BB:1D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F52338784DE7525BB248C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4df9ddee-2cbd-3619-9d57-04b286b42dac.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396596 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:33:87:84:de:75:25:bb:24:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=d34a01a3-d86d-4d6d-851d-7d16790a1de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:86:4b:92:95:bc:fb:97:7b:b6:21:8c:ad:61: 11:8d:41:77:3b:e9:0e:b2:2d:62:0a:68:08:bf:9b: 80:a0:09:11:04:f4:97:25:ad:c0:88:36:92:35:2e: bd:a0:ad:94:c3:d7:ba:c7:2a:0d:db:55:90:af:08: 95:f3:a3:c2:48:9f:b8:3b:95:99:1f:f6:d7:37:10: eb:2a:a7:98:ef:10:de:84:a8:97:a6:de:2b:e3:f5: a4:58:c2:4b:8f:9f:25:a5:9c:3b:77:7e:a7:2e:96: 1f:37:f6:fa:c3:b9:f0:85:f8:dc:2a:6e:7c:26:a4: 5a:2b:16:8b:2f:12:ca:cb:47:13:b5:80:b1:39:53: 50:35:d3:7c:86:89:3d:fa:64:a7:3d:bc:e5:b4:6c: e6:57:3e:99:90:32:d8:5b:86:82:bd:e3:f6:73:4b: 66:bb:85:e2:c0:14:b9:cd:2c:f3:f5:1e:7d:c7:4a: 7e:9d:eb:07:82:2d:8b:f1:b5:a3:35:d9:76:cd:76: 6e:99:90:90:0a:69:fd:9d:19:4e:33:da:c1:f4:cb: 7a:7c:69:18:6a:42:8f:c1:74:66:cf:f1:89:ae:df: 4a:bb:1d:db:b7:ac:ba:6f:86:70:e7:82:60:ca:dd: 82:4a:5c:4c:0f:01:39:bb:df:a8:4a:9f:c0:fe:2a: 0e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:56:C6:F4:65:EA:8F:4C:67:84:6D:6F:01:13:DB:32:81:79:BB:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4df9ddee-2cbd-3619-9d57-04b286b42dac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:67:10:df:6a:cf:8a:2c:80:7c:e9:1e:6e:43:52:e1:36:96: 72:3b:2b:26:ba:45:fe:19:3d:2d:24:c6:f1:b3:87:dc:0b:b2: 0c:fc:59:b0:b7:a2:f1:cb:84:9e:2f:cd:ce:b2:f8:ea:12:2d: cc:fe:fd:26:8a:f6:1f:df:74:30:65:e5:27:a2:8a:26:2f:62: 6d:79:65:df:ad:dc:c0:f0:79:fb:24:e2:fd:12:3c:82:dd:a0: aa:dc:e8:7f:58:e1:ad:6a:43:9c:9c:d2:ad:82:82:5e:92:26: 89:f4:6d:d9:6a:28:80:fe:49:b4:96:6c:e2:0e:d1:91:ab:56: 4a:2c:95:f6:78:77:fa:a5:4d:17:e2:df:3b:81:99:f1:67:9b: 7c:54:f5:71:cd:72:cb:be:ea:a6:65:d2:64:b1:91:f6:94:47: 9f:64:23:67:46:cf:cc:d1:2a:e5:b3:ca:4d:2c:61:57:b2:88: cb:1f:b4:ea:f5:9c:8a:fe:3c:c8:be:97:55:06:e0:05:46:74: 12:38:ab:4c:cf:68:3e:7e:85:93:fa:e7:c2:77:61:56:76:1a: 85:48:e0:26:44:9e:b6:1b:7c:99:e0:76:61:dc:ba:ef:84:ca: dd:13:dd:61:42:15:74:b6:ce:6d:de:af:a2:07:71:bf:77:b0: b1:a5:3a:82 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjOHhN51JbskjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZDM0YTAxYTMtZDg2ZC00ZDZkLTg1MWQtN2QxNjc5MGExZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4ZLkpW8+5d7tiGMrWERjUF3O+kOsi1iCmgI v5uAoAkRBPSXJa3AiDaSNS69oK2Uw9e6xyoN21WQrwiV86PCSJ+4O5WZH/bXNxDr KqeY7xDehKiXpt4r4/WkWMJLj58lpZw7d36nLpYfN/b6w7nwhfjcKm58JqRaKxaL LxLKy0cTtYCxOVNQNdN8hok9+mSnPbzltGzmVz6ZkDLYW4aCveP2c0tmu4XiwBS5 zSzz9R59x0p+nesHgi2L8bWjNdl2zXZumZCQCmn9nRlOM9rB9Mt6fGkYakKPwXRm z/GJrt9Kux3bt6y6b4Zw54Jgyt2CSlxMDwE5u9+oSp/A/ioOLwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDFWxvRl6o9MZ4RtbwET2zKBebsdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGRmOWRkZWUtMmNiZC0z NjE5LTlkNTctMDRiMjg2YjQyZGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCGZxDfas+KLIB86R5uQ1LhNpZyOysmukX+GT0tJMbxs4fcC7IM/Fmw t6Lxy4SeL83OsvjqEi3M/v0mivYf33QwZeUnooomL2JteWXfrdzA8Hn7JOL9EjyC 3aCq3Oh/WOGtakOcnNKtgoJekiaJ9G3ZaiiA/km0lmziDtGRq1ZKLJX2eHf6pU0X 4t87gZnxZ5t8VPVxzXLLvuqmZdJksZH2lEefZCNnRs/M0Srls8pNLGFXsojLH7Tq 9ZyK/jzIvpdVBuAFRnQSOKtMz2g+foWT+ufCd2FWdhqFSOAmRJ62G3yZ4HZh3Lrv hMrdE91hQhV0ts5t3q+iB3G/d7CxpTqC -----END CERTIFICATE-----Generated at Wed Oct 29 20:12:47 2025 by rpki-client