$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7e5fd6b-e83c-30c9-8248-a6921d33938d.roa File: a7e5fd6b-e83c-30c9-8248-a6921d33938d.roa (raw, json) Hash identifier: clkJn6CkfwInax0Kta+BpaXR85xsa8WjDw67d0ezyMM= Subject key identifier: 40:70:57:A0:84:3F:6A:F7:CF:DA:ED:6E:25:44:42:7D:69:93:C7:55 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F52308A1A69AC7A1E0AE480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7e5fd6b-e83c-30c9-8248-a6921d33938d.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397202 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:30:8a:1a:69:ac:7a:1e:0a:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=5617967d-22df-4819-83f8-5659b46564b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3f:a2:d3:98:52:2e:17:8f:e6:32:b0:5a:62: 09:39:d8:2b:91:60:b2:04:0e:68:74:b3:78:0d:6a: 51:e9:2e:d8:66:4c:09:94:d5:85:bd:66:cf:c3:5d: 8d:ce:6c:01:67:05:63:e8:0a:28:54:86:f5:dc:ef: b6:64:94:17:f5:9c:5d:b6:18:1d:98:ca:91:ad:c4: 2b:98:29:46:a8:37:6d:af:04:7a:dc:09:ca:87:ff: 27:29:ef:bf:6c:5d:50:d2:07:93:ec:4d:b2:83:97: 12:ab:25:c4:2d:9f:ef:dc:85:75:c8:4e:e8:b7:ad: 48:bd:f0:41:12:52:b1:b3:08:3d:fe:81:53:71:43: c7:6a:4c:fb:e8:1f:0b:26:cb:8d:07:a5:a0:79:73: e3:07:48:80:ff:45:c7:5a:d7:00:f4:90:e6:69:ef: 38:1f:93:07:9b:cf:ae:39:02:d9:cf:c0:9f:23:c8: ca:4f:ad:f3:f2:2b:e4:4e:3d:a9:1e:f7:fd:49:12: 16:70:68:4f:ae:33:b8:e3:b2:a5:de:9f:c7:07:92: cb:23:7b:36:65:ad:52:84:a4:9a:d2:b5:e7:b8:59: 06:86:2a:ba:8b:f7:9d:8a:4d:f3:6a:20:14:ae:f6: 56:fa:99:eb:d2:20:cb:f9:de:d1:77:eb:09:75:67: a0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:70:57:A0:84:3F:6A:F7:CF:DA:ED:6E:25:44:42:7D:69:93:C7:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7e5fd6b-e83c-30c9-8248-a6921d33938d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a9:53:8f:cc:03:18:f7:dc:2d:85:b6:25:8f:c4:e1:6b:15: f6:27:e7:e4:57:cc:bd:95:80:f3:b5:d3:94:93:60:5f:82:fc: c5:31:f5:42:f9:ef:25:72:97:cc:1c:79:72:bb:72:1e:3a:54: 7d:f0:d0:1c:a3:69:f8:2f:31:1a:b8:17:99:2a:4e:e5:79:fc: 68:6a:8c:94:fd:3b:eb:33:a4:13:a8:43:17:f9:c0:4a:fc:a8: a2:41:ee:a9:54:dd:f1:6d:9a:48:f9:f3:56:1f:b5:b7:23:ca: e4:e7:bc:5f:90:9a:6b:cf:f1:6b:ab:7b:ec:77:59:37:6e:ce: f5:57:3d:19:c2:4b:1f:0f:af:a6:61:c4:3e:ba:52:15:b9:6b: e5:ed:cf:17:b1:78:49:28:26:2e:66:c8:d8:ef:df:da:b9:aa: e4:fb:45:1a:7a:fd:5b:a9:b7:a4:4a:70:20:f4:7d:43:61:2c: 62:9f:ee:e3:07:2a:33:c5:a3:a0:4d:ed:e7:c7:55:38:f4:0a: 4e:78:db:ae:5d:9c:48:da:cd:5f:6f:c7:12:4f:a5:a1:20:a3: 9f:ed:ad:83:bd:2e:36:64:0b:e5:08:44:6d:44:39:d1:20:65: f3:48:13:a7:86:88:ca:13:e3:6d:12:69:88:c2:b4:83:2c:d5: f4:0c:a4:fa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjCKGmmseh4K5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NTYxNzk2N2QtMjJkZi00ODE5LTgzZjgtNTY1OWI0NjU2NGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT+i05hSLheP5jKwWmIJOdgrkWCyBA5odLN4 DWpR6S7YZkwJlNWFvWbPw12NzmwBZwVj6AooVIb13O+2ZJQX9ZxdthgdmMqRrcQr mClGqDdtrwR63AnKh/8nKe+/bF1Q0geT7E2yg5cSqyXELZ/v3IV1yE7ot61IvfBB ElKxswg9/oFTcUPHakz76B8LJsuNB6WgeXPjB0iA/0XHWtcA9JDmae84H5MHm8+u OQLZz8CfI8jKT63z8ivkTj2pHvf9SRIWcGhPrjO447Kl3p/HB5LLI3s2Za1ShKSa 0rXnuFkGhiq6i/edik3zaiAUrvZW+pnr0iDL+d7Rd+sJdWegoQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEBwV6CEP2r3z9rtbiVEQn1pk8dVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTdlNWZkNmItZTgzYy0z MGM5LTgyNDgtYTY5MjFkMzM5MzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAVqVOPzAMY99wthbYlj8ThaxX2J+fkV8y9lYDztdOUk2BfgvzFMfVC +e8lcpfMHHlyu3IeOlR98NAco2n4LzEauBeZKk7lefxoaoyU/TvrM6QTqEMX+cBK /KiiQe6pVN3xbZpI+fNWH7W3I8rk57xfkJprz/Frq3vsd1k3bs71Vz0ZwksfD6+m YcQ+ulIVuWvl7c8XsXhJKCYuZsjY79/auark+0Uaev1bqbekSnAg9H1DYSxin+7j ByozxaOgTe3nx1U49ApOeNuuXZxI2s1fb8cST6WhIKOf7a2DvS42ZAvlCERtRDnR IGXzSBOnhojKE+NtEmmIwrSDLNX0DKT6 -----END CERTIFICATE-----Generated at Wed Oct 29 20:35:48 2025 by rpki-client