$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/54581521-97d3-340d-a297-9eb2f6d1ae8b.roa File: 54581521-97d3-340d-a297-9eb2f6d1ae8b.roa (raw, json) Hash identifier: NCaRhtyv48T1hW2fbD5odNTEesNv8vcyO1wAZYW6Bw4= Subject key identifier: 9C:89:9B:F5:C9:B8:AA:17:AF:8B:93:BC:E3:64:8B:5E:4B:54:03:5D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523627BEE8B55976B39C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/54581521-97d3-340d-a297-9eb2f6d1ae8b.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396615 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:36:27:be:e8:b5:59:76:b3:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=0f5e3b0a-c90b-4340-a9fb-16a18afc4ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dd:16:b6:cc:35:35:45:5c:5d:66:b5:28:9b: e8:c0:d2:96:cc:3c:cf:9e:36:36:d1:18:f6:51:00: d5:eb:62:93:3a:16:5d:5f:5b:d2:a3:2f:38:56:89: 48:0d:95:fc:e4:aa:4b:92:05:b5:f4:dd:19:d2:0e: de:43:d7:13:7e:62:c7:b8:7c:80:84:b6:19:f3:7b: ef:d1:04:e0:13:34:c4:7b:e8:8c:9e:11:cb:ac:4f: da:84:b5:51:f8:2f:ae:a9:bb:a2:a9:77:e0:bc:bd: 52:2b:93:6b:3a:eb:44:a8:19:2e:80:55:35:33:81: 53:e8:77:b8:76:53:84:e2:94:86:ba:c2:a1:8d:5f: 6f:a6:b8:97:3c:48:9f:54:4e:7a:59:32:42:9e:5c: 61:eb:27:35:94:30:11:1b:98:7b:d7:22:54:e1:ea: f7:9f:67:85:7a:6e:13:45:28:09:35:61:2e:a1:f5: 2d:07:18:f3:68:ad:38:29:8a:ba:b5:17:8f:42:74: 0f:3a:b9:95:fc:a7:e3:51:3e:ca:94:cf:1f:5b:83: bc:b6:ab:44:5e:bd:e9:fe:b6:6e:85:96:20:cb:02: 4c:6c:40:1c:5e:8d:ec:46:f9:7f:c9:1f:09:54:0c: c7:ec:59:30:27:ab:41:f7:cb:49:e7:73:21:58:db: fe:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:89:9B:F5:C9:B8:AA:17:AF:8B:93:BC:E3:64:8B:5E:4B:54:03:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/54581521-97d3-340d-a297-9eb2f6d1ae8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f5:de:67:07:9f:e2:7a:10:8a:ba:d8:86:66:fb:a7:e2:d7: e8:e0:cc:d0:76:8d:01:a7:54:d9:23:b6:ba:54:15:0b:17:47: 38:bf:d4:a7:0d:1b:a0:6e:80:07:eb:80:44:12:c9:57:43:69: 33:33:2b:8d:ac:f0:7c:ac:5d:c5:ca:be:5a:74:ac:6a:d1:00: 07:e9:94:69:85:58:89:55:e6:01:b1:f0:28:a5:50:53:e4:6c: 94:a3:8f:c2:02:4c:2f:7e:bb:1c:56:7a:12:86:93:c5:27:5c: 17:55:61:92:0e:a5:49:47:59:1b:55:56:96:0b:37:46:a1:7b: 82:8c:55:d6:ba:46:5b:ca:24:27:13:00:5d:dd:ae:f0:36:96: 35:83:56:1d:0a:92:d3:51:54:a5:91:4f:44:f2:09:51:11:76: 6c:dd:3c:13:23:ab:fa:6b:43:db:26:69:19:c7:bc:b1:31:5a: 7a:1d:a1:b7:a8:73:3a:2e:1e:67:69:71:2c:6e:86:78:a8:ce: 61:c3:39:dc:88:38:80:39:f1:13:0d:12:3d:54:cb:24:bb:5c: 12:ed:5a:e3:b8:d4:b0:3e:d8:25:70:44:57:86:c9:6c:31:c4: 85:d1:82:4a:20:7c:ed:e3:73:1c:ac:72:68:0a:74:65:e8:02: d4:b0:f3:f3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjYnvui1WXaznIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MGY1ZTNiMGEtYzkwYi00MzQwLWE5ZmItMTZhMThhZmM0YWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt0Wtsw1NUVcXWa1KJvowNKWzDzPnjY20Rj2 UQDV62KTOhZdX1vSoy84VolIDZX85KpLkgW19N0Z0g7eQ9cTfmLHuHyAhLYZ83vv 0QTgEzTEe+iMnhHLrE/ahLVR+C+uqbuiqXfgvL1SK5NrOutEqBkugFU1M4FT6He4 dlOE4pSGusKhjV9vpriXPEifVE56WTJCnlxh6yc1lDARG5h71yJU4er3n2eFem4T RSgJNWEuofUtBxjzaK04KYq6tRePQnQPOrmV/KfjUT7KlM8fW4O8tqtEXr3p/rZu hZYgywJMbEAcXo3sRvl/yR8JVAzH7FkwJ6tB98tJ53MhWNv+EQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJyJm/XJuKoXr4uTvONki15LVANdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTQ1ODE1MjEtOTdkMy0z NDBkLWEyOTctOWViMmY2ZDFhZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAc9d5nB5/iehCKutiGZvun4tfo4MzQdo0Bp1TZI7a6VBULF0c4v9Sn DRugboAH64BEEslXQ2kzMyuNrPB8rF3Fyr5adKxq0QAH6ZRphViJVeYBsfAopVBT 5GyUo4/CAkwvfrscVnoShpPFJ1wXVWGSDqVJR1kbVVaWCzdGoXuCjFXWukZbyiQn EwBd3a7wNpY1g1YdCpLTUVSlkU9E8glREXZs3TwTI6v6a0PbJmkZx7yxMVp6HaG3 qHM6Lh5naXEsboZ4qM5hwznciDiAOfETDRI9VMsku1wS7VrjuNSwPtglcERXhsls McSF0YJKIHzt43McrHJoCnRl6ALUsPPz -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:52 2025 by rpki-client