$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1f5c6e0-e080-3525-9b04-a30603f376ef.roa File: d1f5c6e0-e080-3525-9b04-a30603f376ef.roa (raw, json) Hash identifier: 1dOotvsP2zVx6mV+uXoDbgeK0t4jx6mTaOqp0SUK0qc= Subject key identifier: 23:C3:1D:1B:8A:45:7F:6F:54:F6:C2:16:08:AD:63:24:FA:08:17:D7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523D030A1085FFDF574900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1f5c6e0-e080-3525-9b04-a30603f376ef.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396586 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3d:03:0a:10:85:ff:df:57:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=da3c99a3-80f9-4b28-a81a-f32e7b8dd063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6c:3a:95:f8:25:2b:da:0d:9e:81:e6:d6:94: 0c:fc:2f:d3:d3:07:86:94:8d:b6:d2:53:2a:1c:c7: e3:6d:c6:22:59:bd:47:ce:0c:06:b5:ad:21:75:c6: e1:46:8f:1e:a1:6f:4f:08:7a:d1:dd:ad:65:df:e8: cd:ca:78:58:14:09:2d:e1:90:4b:0e:f8:81:07:02: 9d:29:f4:7b:38:36:dc:81:d5:4f:57:27:8b:9a:59: ac:c4:ba:f1:5e:7b:a7:f6:1a:ee:36:a5:d7:c8:3a: 2f:0f:41:6a:e1:a3:d0:d0:a3:7a:a7:4d:db:d8:96: 92:31:aa:69:39:c7:56:00:57:97:a9:d7:25:0e:55: a2:2a:6e:5c:8a:4b:d0:0e:50:9a:64:d7:33:80:96: 07:ae:09:25:33:6b:ff:9b:e1:d6:59:96:18:d2:3c: 24:5c:d5:dc:75:43:58:a3:c3:08:87:85:e0:50:18: 19:e9:1c:d3:bb:c5:d0:36:96:57:b7:e2:f8:fc:af: 65:80:a8:15:4e:43:38:0b:d3:d6:ba:84:6c:4f:d8: d7:68:ea:56:ff:ec:06:2f:52:b7:b2:f9:0d:b9:f3: 5d:16:e9:cf:96:01:10:c6:66:5f:16:7b:fc:06:7d: fe:95:9c:9d:73:a8:0f:68:31:df:b9:aa:8d:76:ef: fb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C3:1D:1B:8A:45:7F:6F:54:F6:C2:16:08:AD:63:24:FA:08:17:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1f5c6e0-e080-3525-9b04-a30603f376ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:90:33:1e:96:c6:93:06:07:d3:11:41:11:73:07:c8:a3:b7: bf:be:1c:7b:1c:ba:bb:2f:e3:c2:3f:93:73:f0:47:3e:34:df: 13:80:2c:73:cd:42:e6:81:c2:c6:1a:61:3c:79:64:6e:fe:b1: 16:8f:7a:e5:8d:d4:65:d2:ca:0c:2c:d5:f6:b1:95:b5:46:65: 77:da:d5:b2:5b:ac:33:70:e6:74:66:bc:41:15:f3:a8:6c:f4: 10:ea:c5:31:c4:ce:7c:27:3a:64:ca:4b:e2:c5:47:7b:3b:ae: a0:3d:f0:f7:32:b3:32:31:17:9d:ef:43:a8:a5:28:55:09:39: bb:93:78:50:9d:ea:0c:71:c4:0d:bb:97:20:91:af:1b:7f:7e: 79:c3:16:9e:43:d0:c8:48:b0:f2:5f:68:fc:ea:75:64:81:99: c6:2b:62:dc:36:a7:0d:56:48:c3:c2:fb:6e:ee:2e:11:98:2b: 59:1c:9d:8f:60:67:35:b5:df:cd:8d:49:3c:a7:30:7c:79:e8: 63:e3:ac:93:e6:4a:d1:c5:df:b6:19:5a:3f:26:05:32:24:f0: bb:32:b4:e5:fb:39:32:da:80:23:3f:9f:bd:2c:74:71:98:15: 80:79:5d:37:a1:12:56:4b:b8:8e:4d:67:47:da:f6:d7:bc:9a: 76:6c:0e:37 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/Uj0DChCF/99XSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZGEzYzk5YTMtODBmOS00YjI4LWE4MWEtZjMyZTdiOGRkMDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGw6lfglK9oNnoHm1pQM/C/T0weGlI220lMq HMfjbcYiWb1HzgwGta0hdcbhRo8eoW9PCHrR3a1l3+jNynhYFAkt4ZBLDviBBwKd KfR7ODbcgdVPVyeLmlmsxLrxXnun9hruNqXXyDovD0Fq4aPQ0KN6p03b2JaSMapp OcdWAFeXqdclDlWiKm5cikvQDlCaZNczgJYHrgklM2v/m+HWWZYY0jwkXNXcdUNY o8MIh4XgUBgZ6RzTu8XQNpZXt+L4/K9lgKgVTkM4C9PWuoRsT9jXaOpW/+wGL1K3 svkNufNdFunPlgEQxmZfFnv8Bn3+lZydc6gPaDHfuaqNdu/7zwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCPDHRuKRX9vVPbCFgitYyT6CBfXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDFmNWM2ZTAtZTA4MC0z NTI1LTliMDQtYTMwNjAzZjM3NmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA4kDMelsaTBgfTEUERcwfIo7e/vhx7HLq7L+PCP5Nz8Ec+NN8TgCxz zULmgcLGGmE8eWRu/rEWj3rljdRl0soMLNX2sZW1RmV32tWyW6wzcOZ0ZrxBFfOo bPQQ6sUxxM58JzpkykvixUd7O66gPfD3MrMyMRed70OopShVCTm7k3hQneoMccQN u5cgka8bf355wxaeQ9DISLDyX2j86nVkgZnGK2LcNqcNVkjDwvtu7i4RmCtZHJ2P YGc1td/NjUk8pzB8eehj46yT5krRxd+2GVo/JgUyJPC7MrTl+zky2oAjP5+9LHRx mBWAeV03oRJWS7iOTWdH2vbXvJp2bA43 -----END CERTIFICATE-----Generated at Wed Oct 29 20:38:55 2025 by rpki-client