$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/94f73056-f9fd-3a72-9ff8-8e8bcc6426da.roa File: 94f73056-f9fd-3a72-9ff8-8e8bcc6426da.roa (raw, json) Hash identifier: JXOXYgux+qOzmjHJEckBYb/SIVTLHOyc7y7VK6k75OY= Subject key identifier: 2C:42:48:A2:54:AE:75:35:F5:72:F4:80:0C:F6:F5:E9:37:3C:F0:2F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F5230782B01CEC334A78DB8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/94f73056-f9fd-3a72-9ff8-8e8bcc6426da.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 20362 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:30:78:2b:01:ce:c3:34:a7:8d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=27e8a3f8-4f31-4532-825e-fb6e431107ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:41:f7:70:93:cb:79:57:a6:b4:dc:54:df: 9d:99:6a:93:08:1b:a2:1d:58:f6:e9:01:18:b2:f4: eb:eb:a5:4f:85:a8:95:93:15:e8:cb:e8:d3:b1:bb: c6:a6:a0:d6:99:96:ed:a1:b2:f5:84:d2:5f:55:32: 50:fc:7c:88:2c:0e:cc:08:e0:43:3d:d7:0b:37:f0: f8:5f:56:f7:cf:4e:33:7e:8b:fa:34:ec:68:d9:1d: cc:52:86:04:0a:2a:e1:77:08:36:71:a5:1b:ba:df: a8:d6:00:e0:e4:d3:70:5f:0d:31:bb:63:54:5a:5b: c0:6b:84:eb:62:30:72:8e:86:95:c9:f0:60:6b:7e: 5e:d5:3f:05:9b:02:41:c0:10:38:16:d1:c1:88:da: 0e:47:e6:66:6d:c3:f3:b1:15:0d:1b:a5:df:ce:0b: 21:b0:58:f2:29:c0:96:86:54:89:0f:96:f8:b9:2c: 4f:44:df:69:81:99:69:ea:54:2d:34:87:e0:a7:22: e2:d0:97:b6:b0:36:fa:45:24:f1:88:c6:54:6b:ed: 04:db:aa:44:42:28:aa:60:a6:b2:6f:cc:86:a6:17: dd:f8:df:f5:70:3c:a8:99:40:47:37:a6:31:b7:d1: 39:b5:0d:c9:3a:40:8b:5e:a1:c7:d5:9d:d6:14:41: 4f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:42:48:A2:54:AE:75:35:F5:72:F4:80:0C:F6:F5:E9:37:3C:F0:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/94f73056-f9fd-3a72-9ff8-8e8bcc6426da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:da:2b:56:01:d4:a9:b3:d4:b6:dc:da:90:af:c4:34:f8:19: 63:8e:aa:60:e5:f2:20:28:d1:c4:f6:6b:6f:c4:9d:59:2d:c0: 89:bb:08:4c:7f:81:5d:22:4e:62:f2:86:f7:e3:28:9b:92:d8: d2:e1:ed:71:a6:af:70:ea:6e:63:b1:c7:ca:80:29:be:1b:74: df:3d:d2:6c:40:14:a3:83:a5:b0:f2:f3:fd:2a:2a:0d:b7:cf: 7b:8f:cc:75:bc:05:09:39:38:cf:1e:71:e9:47:5e:7e:9f:07: bb:f9:84:77:b4:02:eb:cd:0d:19:ec:37:d8:ee:cd:2e:1c:5d: 28:29:23:9d:54:24:b7:ce:19:06:c3:9f:7d:81:be:d8:93:ce: bf:e1:2e:74:36:f8:ef:da:44:51:a3:d9:11:28:66:45:50:a2: f9:14:69:6b:5d:2c:00:c4:14:d4:55:ad:96:9b:77:09:45:59: d8:7a:54:c6:ed:0b:2b:a3:b3:d8:34:d3:6d:16:33:49:26:73: 14:0c:8c:d8:be:ce:7b:c9:5b:9b:9f:64:50:53:e5:3d:71:10: 6f:13:4c:e1:da:f4:fa:5e:27:51:0a:2d:17:f9:6a:bb:c3:84: 53:5b:39:2b:5f:ab:80:81:93:d8:f7:56:23:e6:14:ef:8d:43: c1:24:f8:12 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjB4KwHOwzSnjbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MjdlOGEzZjgtNGYzMS00NTMyLTgyNWUtZmI2ZTQzMTEwN2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOdB93CTy3lXprTcVN+dmWqTCBuiHVj26QEY svTr66VPhaiVkxXoy+jTsbvGpqDWmZbtobL1hNJfVTJQ/HyILA7MCOBDPdcLN/D4 X1b3z04zfov6NOxo2R3MUoYECirhdwg2caUbut+o1gDg5NNwXw0xu2NUWlvAa4Tr YjByjoaVyfBga35e1T8FmwJBwBA4FtHBiNoOR+ZmbcPzsRUNG6XfzgshsFjyKcCW hlSJD5b4uSxPRN9pgZlp6lQtNIfgpyLi0Je2sDb6RSTxiMZUa+0E26pEQiiqYKay b8yGphfd+N/1cDyomUBHN6Yxt9E5tQ3JOkCLXqHH1Z3WFEFPjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCxCSKJUrnU19XL0gAz29ek3PPAvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTRmNzMwNTYtZjlmZC0z YTcyLTlmZjgtOGU4YmNjNjQyNmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAw2itWAdSps9S23NqQr8Q0+Bljjqpg5fIgKNHE9mtvxJ1ZLcCJuwhM f4FdIk5i8ob34yibktjS4e1xpq9w6m5jscfKgCm+G3TfPdJsQBSjg6Ww8vP9KioN t897j8x1vAUJOTjPHnHpR15+nwe7+YR3tALrzQ0Z7DfY7s0uHF0oKSOdVCS3zhkG w599gb7Yk86/4S50Nvjv2kRRo9kRKGZFUKL5FGlrXSwAxBTUVa2Wm3cJRVnYelTG 7Qsro7PYNNNtFjNJJnMUDIzYvs57yVubn2RQU+U9cRBvE0zh2vT6XidRCi0X+Wq7 w4RTWzkrX6uAgZPY91Yj5hTvjUPBJPgS -----END CERTIFICATE-----Generated at Wed Oct 29 20:36:40 2025 by rpki-client