$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531e496-8f60-365a-9f71-97f429bea4f3.roa File: a531e496-8f60-365a-9f71-97f429bea4f3.roa (raw, json) Hash identifier: qZojdTw2dUbhTfaXhSB4y6ofqYfTyzYBrEbNpqk9Rvo= Subject key identifier: D4:5F:8B:21:CE:02:85:C7:5E:2C:63:1C:95:D2:13:8A:C4:CD:F4:83 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F5234AA9F35E9054D3C9D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531e496-8f60-365a-9f71-97f429bea4f3.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 40717 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:34:aa:9f:35:e9:05:4d:3c:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=8a3620cd-6b5d-43d1-81d6-3c8ffdb7840c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d4:1c:dc:f9:3e:b4:c2:8f:ba:57:1d:5b:60: 1b:5a:a1:83:4f:83:8b:6b:cf:3e:a7:6c:a4:2e:0f: 78:8c:92:6c:af:99:63:b3:60:a6:05:aa:1f:3f:c4: 54:ac:71:f0:5a:29:bb:15:4f:e5:12:f6:61:2c:9e: 54:da:5d:e8:38:3f:30:81:75:61:00:35:00:b6:37: b5:2e:b1:c1:32:cd:ac:84:39:21:13:6d:b5:08:44: b0:d7:f2:56:b8:98:8f:28:a8:aa:82:24:f8:da:2a: 7c:89:f9:3b:77:14:b5:8a:de:02:e1:9d:c0:f8:0d: 31:10:6c:0d:32:11:9d:9d:fb:84:62:5b:98:2d:a1: f5:01:94:f2:7b:1b:f7:af:c4:a6:c6:ae:06:3c:c6: 45:61:60:49:9c:d1:ed:a7:13:8d:77:68:0e:63:ac: a6:7e:57:ba:0f:f6:8c:81:89:92:ef:e5:00:38:4e: 17:a4:78:00:5b:c8:dc:6d:e9:06:4f:4a:68:21:77: 71:85:b8:8d:28:89:8c:95:bf:71:c0:ca:f3:a2:8a: 14:3e:09:f5:f4:7b:2d:66:70:7b:3d:ea:4e:86:a4: ef:18:ad:f2:b6:5c:fb:34:a5:b9:19:93:c4:4e:6e: e2:65:25:2b:11:e7:cf:2d:df:2f:ae:58:91:1c:79: 46:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5F:8B:21:CE:02:85:C7:5E:2C:63:1C:95:D2:13:8A:C4:CD:F4:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531e496-8f60-365a-9f71-97f429bea4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:bf:d6:6d:b0:9e:bc:68:46:88:9e:b2:b6:3f:2a:0f:89:a2: 6a:01:a2:d0:17:ee:f2:91:60:9b:a3:80:d1:dd:fe:e0:73:d0: 59:18:10:02:5a:ad:86:f0:2b:07:1a:1d:aa:83:f7:f8:24:42: b7:1f:7e:6a:4d:bc:a1:af:a7:6d:fd:93:3c:57:34:27:7e:f0: 98:ed:11:d7:1f:2a:fe:3f:e9:14:73:1d:18:fa:55:d5:9b:83: 43:6c:35:f2:2d:5c:3b:18:4a:f3:33:62:25:c5:4a:a1:f0:45: 31:b7:db:31:c1:ae:14:7d:41:a5:59:39:70:94:f5:3c:eb:38: df:b8:fb:f6:75:f6:ba:bc:8d:50:7c:ce:35:e7:87:27:dd:7b: bc:f7:83:9d:98:4e:ec:16:81:28:9a:7d:2b:06:e9:ec:2f:14: 3d:de:bf:38:b8:dd:07:28:3e:4c:d5:f1:40:69:e5:29:39:46: 4d:92:80:3b:6c:fa:cc:3d:b2:3d:e9:92:6b:24:91:53:22:0c: 9e:39:bb:e9:a3:71:ce:12:8f:cb:d7:aa:14:5b:97:d1:cb:4f: 6e:c4:e4:68:42:4d:da:7a:0b:50:7c:e3:9f:52:1b:b5:0d:78: 20:c6:37:2d:24:44:ee:81:1e:83:b3:94:ad:b8:65:11:8f:61: 83:cb:dd:e7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjSqnzXpBU08nYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk OGEzNjIwY2QtNmI1ZC00M2QxLTgxZDYtM2M4ZmZkYjc4NDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdQc3Pk+tMKPulcdW2AbWqGDT4OLa88+p2yk Lg94jJJsr5ljs2CmBaofP8RUrHHwWim7FU/lEvZhLJ5U2l3oOD8wgXVhADUAtje1 LrHBMs2shDkhE221CESw1/JWuJiPKKiqgiT42ip8ifk7dxS1it4C4Z3A+A0xEGwN MhGdnfuEYluYLaH1AZTyexv3r8Smxq4GPMZFYWBJnNHtpxONd2gOY6ymfle6D/aM gYmS7+UAOE4XpHgAW8jcbekGT0poIXdxhbiNKImMlb9xwMrzoooUPgn19HstZnB7 PepOhqTvGK3ytlz7NKW5GZPETm7iZSUrEefPLd8vrliRHHlGrwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNRfiyHOAoXHXixjHJXSE4rEzfSDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTUzMWU0OTYtOGY2MC0z NjVhLTlmNzEtOTdmNDI5YmVhNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBEv9ZtsJ68aEaInrK2PyoPiaJqAaLQF+7ykWCbo4DR3f7gc9BZGBAC Wq2G8CsHGh2qg/f4JEK3H35qTbyhr6dt/ZM8VzQnfvCY7RHXHyr+P+kUcx0Y+lXV m4NDbDXyLVw7GErzM2IlxUqh8EUxt9sxwa4UfUGlWTlwlPU86zjfuPv2dfa6vI1Q fM4154cn3Xu894OdmE7sFoEomn0rBunsLxQ93r84uN0HKD5M1fFAaeUpOUZNkoA7 bPrMPbI96ZJrJJFTIgyeObvpo3HOEo/L16oUW5fRy09uxORoQk3aegtQfOOfUhu1 DXggxjctJETugR6Ds5StuGURj2GDy93n -----END CERTIFICATE-----Generated at Wed Oct 29 20:38:45 2025 by rpki-client