$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5a4ca7a-42c3-37c0-a62e-c45c68db6703.roa File: b5a4ca7a-42c3-37c0-a62e-c45c68db6703.roa (raw, json) Hash identifier: MirxlAk0eNguZ+x7TR3TzgW0vKGal6Pj5X3+v20bPKE= Subject key identifier: 70:D8:2D:A1:79:20:BF:2F:CD:0B:2D:0B:65:C3:7D:13:DA:B9:2F:F4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F5237F9626247983C64B120 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5a4ca7a-42c3-37c0-a62e-c45c68db6703.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396613 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:37:f9:62:62:47:98:3c:64:b1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=0cca5ff3-8220-4d5f-8c19-8f35f03c6720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4e:9d:9d:ea:48:5a:12:df:86:8e:35:3d:c8: cc:8d:2a:0f:d5:90:e4:f0:e3:fa:d6:72:3d:16:6b: f6:b1:9d:35:46:d2:18:4f:ec:ab:f0:53:37:5b:2a: fd:2f:59:02:dc:46:fc:25:74:2a:77:07:1d:fd:b6: 04:64:1c:73:11:46:85:17:30:d7:d3:eb:f2:6f:1f: 3b:97:52:1c:06:a4:2c:58:ff:74:b3:24:3e:1b:96: 71:4f:d5:2a:21:95:d7:1c:53:aa:52:a1:bc:0a:66: 8e:a5:a9:38:93:52:73:c7:f5:17:1f:0d:35:e1:9a: 2c:82:d8:43:ba:5e:f8:dd:29:8d:69:4a:02:c8:12: 13:d2:b8:8b:b5:ac:8a:e8:af:e0:72:57:55:06:0b: ed:b4:3c:ae:c3:57:03:c7:90:c6:07:62:17:2b:57: 70:62:43:62:b8:88:78:7d:7a:15:bd:d3:35:bd:cc: d1:0a:e3:95:a6:63:af:01:2c:49:b0:72:eb:4a:90: 76:71:1c:8e:a9:ce:99:fa:c9:0d:21:1f:26:c4:3f: b3:fb:8f:5a:00:30:52:d4:02:cc:f7:38:d5:16:fc: 9b:02:b1:91:8e:41:1f:03:6a:1f:0d:70:4e:ec:3e: 72:b3:81:bc:c6:15:25:37:68:c0:9c:e2:cb:98:72: c9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D8:2D:A1:79:20:BF:2F:CD:0B:2D:0B:65:C3:7D:13:DA:B9:2F:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5a4ca7a-42c3-37c0-a62e-c45c68db6703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:a1:bd:02:50:38:ff:89:16:46:52:28:b1:41:07:e1:68:84: a5:64:07:95:87:d6:d7:a0:ab:90:cb:a1:af:4c:79:42:4c:25: a3:68:4b:7b:9a:f1:8c:c6:41:00:22:25:49:46:39:4d:0a:04: 91:68:82:24:f7:c7:c4:67:c9:78:c3:2a:50:9d:f5:96:c7:fa: 25:7a:46:dd:cc:28:a3:61:e2:6a:ac:8f:57:2d:b4:57:77:cc: 37:2f:30:52:12:da:7b:9c:74:4f:7f:43:1f:b0:51:92:78:8f: 61:5a:33:b1:35:92:38:de:f7:47:07:8b:66:d8:87:de:d2:37: 7f:88:4f:93:fb:18:bb:c1:63:7b:f3:94:bb:43:fe:79:94:ff: da:b0:25:26:aa:a4:10:6e:a4:66:ab:58:00:2f:96:90:40:11: a6:1c:b0:ec:be:7c:ed:8b:c5:4e:85:b5:d1:7b:a0:ef:77:26: cf:8a:30:ed:1c:3a:ce:24:81:21:26:e2:81:38:f1:8f:e1:81: b7:5a:8a:5b:a1:7d:84:fb:46:88:67:40:a2:59:6d:4a:85:82: ce:3f:50:58:c8:7c:c7:80:0f:ea:66:f6:91:83:96:e3:7a:c7: 09:3e:af:30:0a:a9:2e:46:fd:7b:2b:10:e4:c5:5d:df:73:56: 2c:14:30:d3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/Ujf5YmJHmDxksSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MGNjYTVmZjMtODIyMC00ZDVmLThjMTktOGYzNWYwM2M2NzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk6dnepIWhLfho41PcjMjSoP1ZDk8OP61nI9 Fmv2sZ01RtIYT+yr8FM3Wyr9L1kC3Eb8JXQqdwcd/bYEZBxzEUaFFzDX0+vybx87 l1IcBqQsWP90syQ+G5ZxT9UqIZXXHFOqUqG8CmaOpak4k1Jzx/UXHw014ZosgthD ul743SmNaUoCyBIT0riLtayK6K/gcldVBgvttDyuw1cDx5DGB2IXK1dwYkNiuIh4 fXoVvdM1vczRCuOVpmOvASxJsHLrSpB2cRyOqc6Z+skNIR8mxD+z+49aADBS1ALM 9zjVFvybArGRjkEfA2ofDXBO7D5ys4G8xhUlN2jAnOLLmHLJPQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHDYLaF5IL8vzQstC2XDfRPauS/0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjVhNGNhN2EtNDJjMy0z N2MwLWE2MmUtYzQ1YzY4ZGI2NzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBuob0CUDj/iRZGUiixQQfhaISlZAeVh9bXoKuQy6GvTHlCTCWjaEt7 mvGMxkEAIiVJRjlNCgSRaIIk98fEZ8l4wypQnfWWx/olekbdzCijYeJqrI9XLbRX d8w3LzBSEtp7nHRPf0MfsFGSeI9hWjOxNZI43vdHB4tm2Ife0jd/iE+T+xi7wWN7 85S7Q/55lP/asCUmqqQQbqRmq1gAL5aQQBGmHLDsvnzti8VOhbXRe6DvdybPijDt HDrOJIEhJuKBOPGP4YG3WopboX2E+0aIZ0CiWW1KhYLOP1BYyHzHgA/qZvaRg5bj escJPq8wCqkuRv17KxDkxV3fc1YsFDDT -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:25 2025 by rpki-client