$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c6268e2-5157-3f34-af90-a5e9a9da11e3.roa File: 6c6268e2-5157-3f34-af90-a5e9a9da11e3.roa (raw, json) Hash identifier: DmY02hk0yxZjEdExyn/XjmIQGwN0gkj0aSxejTSjpMc= Subject key identifier: 49:62:2A:88:FA:8E:D8:24:4B:55:EF:78:06:56:A7:58:65:80:16:99 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F52367CD8FB81BCBAEA86C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c6268e2-5157-3f34-af90-a5e9a9da11e3.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397203 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:36:7c:d8:fb:81:bc:ba:ea:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=578f6315-5881-4406-b40f-7ca6e9959eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ae:f8:70:49:75:e2:7f:de:ee:4b:25:4a:c7: fc:13:8c:81:80:c4:25:a9:a1:d4:cb:a0:98:7a:e7: fa:c1:68:b8:51:44:ae:0b:78:38:ee:05:26:62:44: 44:85:fa:f3:07:78:f2:5d:42:f8:2a:bb:c1:57:e9: 81:b3:02:53:e8:e6:6a:2d:88:ae:cf:87:60:f6:97: b4:df:63:13:c0:18:03:5d:08:93:e4:9a:69:d5:18: 78:1a:72:5c:3e:75:1b:1c:0d:7c:7e:89:39:4f:49: c5:ae:78:dc:6b:0d:96:3d:a1:95:8e:0b:a2:07:44: 54:35:ff:bd:6c:2b:8c:42:72:f0:ad:b6:b7:6f:f0: c5:f9:2c:27:8f:51:4a:0b:6e:ad:1d:e9:16:b9:c7: b7:bb:78:eb:e0:cb:c4:09:61:79:8e:a9:82:80:b0: 94:67:54:2a:0c:de:68:0c:27:98:61:d7:81:2f:8f: 94:80:2e:7f:1e:9a:ad:bb:db:3c:c3:55:cc:58:24: 78:4e:73:13:20:ab:70:bd:df:c6:d3:38:e7:0b:59: f2:51:6a:91:fd:b1:d5:d9:aa:a6:4f:16:d0:44:19: 05:e0:ce:ca:f2:49:ca:d4:dd:c4:a1:7f:5c:1e:13: be:01:e4:83:60:e8:a6:07:f3:2c:7a:f3:97:2d:c3: c8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:62:2A:88:FA:8E:D8:24:4B:55:EF:78:06:56:A7:58:65:80:16:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c6268e2-5157-3f34-af90-a5e9a9da11e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:c7:60:90:db:fb:49:f6:23:93:cc:db:fd:cc:b2:ee:c9:e1: 42:9c:a5:3a:10:f7:4d:a5:8c:65:44:46:81:27:2f:1b:ce:62: d9:ad:e3:db:fb:fa:a0:62:9e:76:4b:90:15:2d:77:5e:ce:42: ae:4f:78:1c:f0:8e:0f:6a:77:cb:b4:de:95:90:9b:8f:4a:be: b0:4d:87:eb:2c:fb:36:99:f8:d1:52:8f:6f:f6:f1:06:05:f3: c7:77:1d:87:f5:77:cf:c3:c5:78:24:b3:f1:b5:91:53:c7:77: 58:f8:fa:02:87:61:ed:c7:44:e7:22:32:ac:17:b7:44:31:80: 07:6b:ec:8d:57:27:b7:11:20:cb:3f:43:db:ea:45:a0:20:bf: 49:9c:3e:30:e3:2b:57:6a:98:71:8f:9d:7d:a0:70:3a:97:3d: 5b:da:39:6a:70:f0:41:21:ea:ae:b9:57:d6:69:68:03:1b:ed: 77:5e:c2:d9:ec:88:e3:e0:20:a2:ba:00:f1:d8:f0:5c:84:a9: 7f:26:41:65:24:05:1f:69:2a:e1:d1:fb:7d:40:0a:74:00:67: ca:4b:8f:c6:09:92:c7:43:63:a7:3a:14:86:c3:70:a2:19:29: f9:74:a9:2e:ca:fa:16:cc:6f:38:38:95:fd:5d:1f:d7:0e:0f: 25:f8:49:10 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjZ82PuBvLrqhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NTc4ZjYzMTUtNTg4MS00NDA2LWI0MGYtN2NhNmU5OTU5ZWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK74cEl14n/e7kslSsf8E4yBgMQlqaHUy6CY euf6wWi4UUSuC3g47gUmYkREhfrzB3jyXUL4KrvBV+mBswJT6OZqLYiuz4dg9pe0 32MTwBgDXQiT5Jpp1Rh4GnJcPnUbHA18fok5T0nFrnjcaw2WPaGVjguiB0RUNf+9 bCuMQnLwrba3b/DF+Swnj1FKC26tHekWuce3u3jr4MvECWF5jqmCgLCUZ1QqDN5o DCeYYdeBL4+UgC5/Hpqtu9s8w1XMWCR4TnMTIKtwvd/G0zjnC1nyUWqR/bHV2aqm TxbQRBkF4M7K8knK1N3EoX9cHhO+AeSDYOimB/MsevOXLcPItwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEliKoj6jtgkS1XveAZWp1hlgBaZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmM2MjY4ZTItNTE1Ny0z ZjM0LWFmOTAtYTVlOWE5ZGExMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA1x2CQ2/tJ9iOTzNv9zLLuyeFCnKU6EPdNpYxlREaBJy8bzmLZrePb +/qgYp52S5AVLXdezkKuT3gc8I4PanfLtN6VkJuPSr6wTYfrLPs2mfjRUo9v9vEG BfPHdx2H9XfPw8V4JLPxtZFTx3dY+PoCh2Htx0TnIjKsF7dEMYAHa+yNVye3ESDL P0Pb6kWgIL9JnD4w4ytXaphxj519oHA6lz1b2jlqcPBBIequuVfWaWgDG+13XsLZ 7Ijj4CCiugDx2PBchKl/JkFlJAUfaSrh0ft9QAp0AGfKS4/GCZLHQ2OnOhSGw3Ci GSn5dKkuyvoWzG84OJX9XR/XDg8l+EkQ -----END CERTIFICATE-----Generated at Wed Oct 29 20:36:31 2025 by rpki-client