$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b215dec3-2cce-3bba-95b9-96c2dee5c30b.roa File: b215dec3-2cce-3bba-95b9-96c2dee5c30b.roa (raw, json) Hash identifier: 8tS6GeG4pJx5y3bkWNMAW6m3KVxTPQKqaIvOU0SbMWs= Subject key identifier: 00:F8:20:D2:00:0F:3F:5F:4F:3F:AD:0E:91:9C:9B:B8:34:2D:AD:7C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523ED8821BB934D02D7C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b215dec3-2cce-3bba-95b9-96c2dee5c30b.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397202 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3e:d8:82:1b:b9:34:d0:2d:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=2fc9276c-d3df-40fd-a3e9-710d5050bd78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cb:76:7d:26:e2:48:5e:69:85:e8:0b:7e:c0: 39:bd:cb:73:13:6e:86:b2:d2:98:b9:8b:f0:67:43: c2:30:86:3f:fd:b1:3a:af:a8:d6:93:fe:82:c7:8c: 6f:9a:f4:89:81:ea:0f:71:01:a9:22:e7:51:d2:f9: 38:74:35:98:3d:8f:d2:5f:38:f3:b5:82:94:5f:b6: 5f:8d:d1:d0:0a:00:c2:c1:13:db:8d:30:94:cb:00: 90:36:82:30:15:1d:fb:fd:b9:73:cf:30:40:1c:43: 37:46:fa:67:f0:99:31:f8:9a:66:f0:46:94:f1:2e: 4d:ae:f0:ac:33:b4:cd:b5:44:e8:9f:72:da:13:24: 27:55:46:97:af:74:dc:1b:3c:32:5d:bd:00:05:d3: 82:83:e6:36:cc:a9:1c:5a:f9:b4:35:b9:72:cf:18: 38:44:28:d8:cd:c4:ef:52:dd:f1:0f:1b:c4:3a:c0: f1:74:6f:dc:6c:8f:39:58:f1:7e:4c:9a:4b:28:07: b1:9e:d5:c3:93:53:6a:f3:27:7e:2c:34:12:d8:09: 5f:f4:2d:f6:29:41:76:09:df:7c:e9:5a:e7:87:c8: 03:ab:b9:2e:a0:f7:1f:f9:64:72:99:b0:d3:39:c3: fb:7a:32:b6:28:76:4c:6e:b8:60:10:bc:f2:40:bb: 10:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F8:20:D2:00:0F:3F:5F:4F:3F:AD:0E:91:9C:9B:B8:34:2D:AD:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b215dec3-2cce-3bba-95b9-96c2dee5c30b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:47:f6:2c:94:71:d3:a7:8b:6b:39:27:e9:0e:1f:7d:bf:8f: f6:92:36:af:45:4e:b4:56:7d:d4:33:4e:e4:e1:5b:22:e3:70: 0a:14:aa:72:a3:76:22:5f:0e:be:9d:6c:5e:76:36:6c:b3:43: 47:26:e8:0d:ac:a6:ff:70:27:a5:d2:d0:03:cc:a2:1a:28:cc: cb:a7:91:05:7c:bb:22:9b:10:85:b6:f4:f7:c7:4c:f2:84:0e: c5:e9:67:87:e8:19:a8:d6:06:6d:87:84:87:f0:fc:25:01:fd: 4c:f9:de:47:41:62:1f:f7:c6:ce:e4:4c:04:da:ab:10:58:94: 16:3b:0d:61:64:ec:ef:30:83:8a:71:53:6b:41:35:cc:1a:51: f6:6f:db:8c:38:b9:54:02:7b:1e:a0:f9:14:58:28:0f:dc:ac: 3d:57:3b:f5:0e:ff:09:21:53:b6:91:ba:10:69:d1:75:6d:98: 18:c7:4b:90:59:d8:61:cb:94:e7:ab:d9:94:35:fe:0c:fc:63: 88:ea:73:1d:4e:d1:74:ef:e9:9a:e7:72:e5:24:b7:18:69:67: 18:c0:6c:b4:0b:46:2f:10:92:12:a9:5b:84:6d:ce:3d:08:e9: b3:0f:27:a4:7d:50:bd:aa:26:74:bc:e8:fb:55:9a:d9:cf:a3: 91:35:5f:7f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/Uj7Yghu5NNAtfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MmZjOTI3NmMtZDNkZi00MGZkLWEzZTktNzEwZDUwNTBiZDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8t2fSbiSF5phegLfsA5vctzE26GstKYuYvw Z0PCMIY//bE6r6jWk/6Cx4xvmvSJgeoPcQGpIudR0vk4dDWYPY/SXzjztYKUX7Zf jdHQCgDCwRPbjTCUywCQNoIwFR37/blzzzBAHEM3Rvpn8Jkx+Jpm8EaU8S5NrvCs M7TNtUTon3LaEyQnVUaXr3TcGzwyXb0ABdOCg+Y2zKkcWvm0Nblyzxg4RCjYzcTv Ut3xDxvEOsDxdG/cbI85WPF+TJpLKAexntXDk1Nq8yd+LDQS2Alf9C32KUF2Cd98 6Vrnh8gDq7kuoPcf+WRymbDTOcP7ejK2KHZMbrhgELzyQLsQ9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAD4INIADz9fTz+tDpGcm7g0La18MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjIxNWRlYzMtMmNjZS0z YmJhLTk1YjktOTZjMmRlZTVjMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjR/YslHHTp4trOSfpDh99v4/2kjavRU60Vn3UM07k4Vsi43AKFKpy o3YiXw6+nWxedjZss0NHJugNrKb/cCel0tADzKIaKMzLp5EFfLsimxCFtvT3x0zy hA7F6WeH6Bmo1gZth4SH8PwlAf1M+d5HQWIf98bO5EwE2qsQWJQWOw1hZOzvMIOK cVNrQTXMGlH2b9uMOLlUAnseoPkUWCgP3Kw9Vzv1Dv8JIVO2kboQadF1bZgYx0uQ Wdhhy5Tnq9mUNf4M/GOI6nMdTtF07+ma53LlJLcYaWcYwGy0C0YvEJISqVuEbc49 COmzDyekfVC9qiZ0vOj7VZrZz6ORNV9/ -----END CERTIFICATE-----Generated at Wed Oct 29 20:38:22 2025 by rpki-client