$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bdd59c0a-40f9-33b1-ab40-59821cf79c54.roa File: bdd59c0a-40f9-33b1-ab40-59821cf79c54.roa (raw, json) Hash identifier: FVvPYiPpEyrXU6A3ADQwdOGEsEwJSvB8FZhH4IdS2So= Subject key identifier: 4A:11:2D:4B:38:7E:F2:73:5D:D4:61:A8:30:8B:C7:F3:4D:E6:CA:11 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523B774F6E1520C1A15FE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bdd59c0a-40f9-33b1-ab40-59821cf79c54.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 22547 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3b:77:4f:6e:15:20:c1:a1:5f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=0f30e34e-d400-46a9-a2c7-bcedbcf7e80d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:04:9a:99:ca:bc:ff:b1:bf:a4:ab:54:9b:1c: 68:30:c6:a9:3e:f6:25:30:aa:0d:db:73:bf:02:e7: 18:a3:78:e4:bd:e1:0f:53:f6:b5:8f:b3:2a:a3:ba: 89:ce:63:37:ee:47:72:03:5f:a2:6f:98:0a:42:ec: 41:eb:5d:4f:5a:de:c9:16:67:e3:e8:bf:d7:4a:20: eb:a4:a4:23:b3:a7:95:62:e1:82:3c:97:3d:a1:33: 18:b8:48:fc:07:fb:07:40:0c:2e:7e:9a:ec:63:31: f8:9e:42:ab:79:7a:bc:64:ea:81:b9:e2:ea:97:52: 40:7b:45:78:82:70:23:44:11:3c:3d:89:65:97:4b: e0:c4:65:ab:19:05:10:ef:6c:a3:f8:e5:57:59:b9: a7:20:8b:fd:ee:2c:d2:ac:fe:06:53:d8:b7:a5:dd: 52:c6:62:82:34:9a:13:56:ce:33:2c:9d:47:48:ac: 6d:31:70:2a:59:da:31:64:4e:41:98:9f:10:30:1c: d0:f3:67:dc:b8:48:08:da:76:3c:f1:ad:a2:cf:f3: a5:4d:89:de:92:98:02:16:1e:d8:bc:80:c6:bc:60: 49:d2:01:37:2f:04:70:d0:20:40:b2:f6:ea:5b:ae: 05:49:28:d3:b2:d5:8e:ca:57:fd:7d:08:02:3f:5b: fd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:11:2D:4B:38:7E:F2:73:5D:D4:61:A8:30:8B:C7:F3:4D:E6:CA:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bdd59c0a-40f9-33b1-ab40-59821cf79c54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ba:0b:11:5c:3b:a7:9f:99:a4:61:ed:f9:4b:aa:16:f7:6b: ea:15:df:4b:67:84:45:31:d7:84:2d:db:f8:d7:ea:2c:7e:f3: 29:54:5b:4e:1d:35:09:17:c3:c0:18:e7:ba:50:c5:e6:84:db: 25:0e:19:17:28:80:4b:3f:9b:65:0e:fd:d7:7f:69:e2:3a:55: 5f:1c:31:a3:91:38:a1:34:32:2d:88:35:f1:77:01:6c:35:91: 97:44:1a:44:45:01:08:a3:37:76:f0:0a:d7:6c:c1:5d:f1:43: 23:2c:72:7f:d0:92:00:d9:8e:03:3b:b6:9d:24:0f:4d:99:dc: 59:7b:c9:f3:51:d3:03:00:ea:bd:b2:24:3d:ca:6c:c6:07:91: 0e:71:ab:a9:64:74:32:cd:8d:5c:d5:3d:8b:30:22:a8:72:e7: a2:f9:55:18:4e:9b:fd:75:f3:01:8a:6c:0b:96:5b:e5:b9:c7: dc:fe:4d:3c:3d:c5:1a:ab:fa:b3:21:6a:b9:7a:02:e1:bb:e2: 8f:8f:fa:08:59:d1:a3:ee:f7:39:d2:f6:6a:b6:34:e9:eb:e0: 37:e3:e6:af:de:a8:16:e0:af:c4:58:f5:b5:d3:58:ad:b8:b7: e3:5c:d1:61:3f:91:aa:b6:1e:3b:bd:da:34:b9:a2:eb:c4:82: c5:2d:5f:9b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/Ujt3T24VIMGhX+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MGYzMGUzNGUtZDQwMC00NmE5LWEyYzctYmNlZGJjZjdlODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ASamcq8/7G/pKtUmxxoMMapPvYlMKoN23O/ AucYo3jkveEPU/a1j7Mqo7qJzmM37kdyA1+ib5gKQuxB611PWt7JFmfj6L/XSiDr pKQjs6eVYuGCPJc9oTMYuEj8B/sHQAwufprsYzH4nkKreXq8ZOqBueLql1JAe0V4 gnAjRBE8PYlll0vgxGWrGQUQ72yj+OVXWbmnIIv97izSrP4GU9i3pd1SxmKCNJoT Vs4zLJ1HSKxtMXAqWdoxZE5BmJ8QMBzQ82fcuEgI2nY88a2iz/OlTYnekpgCFh7Y vIDGvGBJ0gE3LwRw0CBAsvbqW64FSSjTstWOylf9fQgCP1v9NwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEoRLUs4fvJzXdRhqDCLx/NN5soRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmRkNTljMGEtNDBmOS0z M2IxLWFiNDAtNTk4MjFjZjc5YzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBYugsRXDunn5mkYe35S6oW92vqFd9LZ4RFMdeELdv41+osfvMpVFtO HTUJF8PAGOe6UMXmhNslDhkXKIBLP5tlDv3Xf2niOlVfHDGjkTihNDItiDXxdwFs NZGXRBpERQEIozd28ArXbMFd8UMjLHJ/0JIA2Y4DO7adJA9NmdxZe8nzUdMDAOq9 siQ9ymzGB5EOcaupZHQyzY1c1T2LMCKocuei+VUYTpv9dfMBimwLllvlucfc/k08 PcUaq/qzIWq5egLhu+KPj/oIWdGj7vc50vZqtjTp6+A34+av3qgW4K/EWPW101it uLfjXNFhP5Gqth47vdo0uaLrxILFLV+b -----END CERTIFICATE-----Generated at Wed Oct 29 20:38:44 2025 by rpki-client