$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da6984b9-0ba3-34e3-801d-a634a21e2e94.roa File: da6984b9-0ba3-34e3-801d-a634a21e2e94.roa (raw, json) Hash identifier: /MBA1SI1aqLp5eyl6C351BruLUK2U0rSzsfsDoYDE9A= Subject key identifier: 52:D0:28:E4:2E:E1:E1:CA:21:AB:54:09:A8:4F:0D:D3:99:32:D4:08 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F5233303BBD6CB4CA8A0B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da6984b9-0ba3-34e3-801d-a634a21e2e94.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396583 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:33:30:3b:bd:6c:b4:ca:8a:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=b589979b-b223-4617-886c-f134efef8feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:62:fc:2b:af:98:42:16:52:4e:96:6e:ae:a8: 1b:80:4c:49:34:27:aa:8d:f7:9f:b2:4c:11:b2:93: 2f:b2:10:8a:28:1e:c0:31:b3:aa:55:73:8e:db:9b: 4f:e6:e0:15:5f:78:dc:8c:a2:56:7f:ba:84:be:2b: 73:e0:ff:58:59:6b:98:9c:64:23:2e:49:37:f3:dc: b3:7c:26:23:2e:97:93:b7:cf:04:53:e5:1a:c2:34: 28:12:4a:3b:45:07:57:b8:13:c7:09:27:da:c8:6f: e0:0e:b0:78:d3:dc:6b:78:e7:5e:96:cb:37:c5:86: 17:6c:a7:a6:bd:c2:c4:4e:4b:28:c5:90:3b:5f:d7: ce:e0:f0:f1:52:42:07:e9:44:ce:97:ce:ec:6b:6b: c3:a0:1c:6b:fa:8c:3b:64:66:31:48:1b:26:a9:f8: d7:17:80:8a:2c:6c:e5:6a:02:9a:b9:58:8b:d1:41: a9:1d:92:5e:87:e1:9d:2d:a1:ff:ac:8b:1e:c7:b8: 9d:bf:83:3b:10:d5:76:ad:a9:c7:de:07:a6:ed:d8: 6c:27:b9:96:a3:1b:81:75:45:4b:36:4d:cc:da:91: d0:20:96:c2:59:c5:b5:52:38:20:12:25:08:e1:e9: 45:da:20:d1:32:16:e2:5d:1b:06:69:72:58:7b:ca: 28:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D0:28:E4:2E:E1:E1:CA:21:AB:54:09:A8:4F:0D:D3:99:32:D4:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da6984b9-0ba3-34e3-801d-a634a21e2e94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:65:89:97:47:08:48:fc:2a:59:24:b6:14:a3:4f:47:a1:c6: e0:1b:9c:48:f9:1f:53:f0:88:75:8c:02:de:7d:5b:11:e9:0c: 9c:9e:b3:b5:0c:84:34:06:90:e8:78:c7:31:d2:c9:22:b2:13: c4:93:e2:32:61:2b:cd:53:29:24:cd:84:d9:06:4b:e0:06:a2: 1f:48:e6:98:a7:b4:e2:b4:0c:0c:4d:56:61:c1:1c:9b:b5:05: d8:62:fc:a4:cd:44:64:be:a6:42:fe:92:b7:62:ca:0d:12:7c: ea:a0:c7:c9:e0:de:d5:1c:31:cc:9e:71:d0:e1:8e:4b:52:63: 44:36:38:2e:b1:84:2c:91:09:71:ef:75:21:9a:ef:ca:d8:df: 27:40:c3:76:d4:4e:7f:6a:75:77:0f:13:ce:b7:4d:22:d1:2e: a1:d9:b1:bb:29:fe:90:1d:d2:2d:60:9a:97:36:87:94:3f:1a: 80:0a:25:7f:9a:90:5b:5a:fa:02:f5:c7:81:2d:bd:86:d9:f8: 5a:d6:29:64:1a:33:2e:24:01:ae:0d:31:2c:5b:46:c4:90:e9: f6:f9:4c:f5:2a:02:c7:a0:87:66:7b:a5:9a:18:15:ce:2e:cd: 92:5b:7c:c1:1f:06:dd:30:7b:45:32:bf:1d:71:89:48:7a:2a: 9f:fb:bd:da -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjMwO71stMqKCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YjU4OTk3OWItYjIyMy00NjE3LTg4NmMtZjEzNGVmZWY4ZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmL8K6+YQhZSTpZurqgbgExJNCeqjfefskwR spMvshCKKB7AMbOqVXOO25tP5uAVX3jcjKJWf7qEvitz4P9YWWuYnGQjLkk389yz fCYjLpeTt88EU+UawjQoEko7RQdXuBPHCSfayG/gDrB409xreOdelss3xYYXbKem vcLETksoxZA7X9fO4PDxUkIH6UTOl87sa2vDoBxr+ow7ZGYxSBsmqfjXF4CKLGzl agKauViL0UGpHZJeh+GdLaH/rIsex7idv4M7ENV2ranH3gem7dhsJ7mWoxuBdUVL Nk3M2pHQIJbCWcW1UjggEiUI4elF2iDRMhbiXRsGaXJYe8oo1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFLQKOQu4eHKIatUCahPDdOZMtQIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGE2OTg0YjktMGJhMy0z NGUzLTgwMWQtYTYzNGEyMWUyZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB+ZYmXRwhI/CpZJLYUo09HocbgG5xI+R9T8Ih1jALefVsR6QycnrO1 DIQ0BpDoeMcx0skishPEk+IyYSvNUykkzYTZBkvgBqIfSOaYp7TitAwMTVZhwRyb tQXYYvykzURkvqZC/pK3YsoNEnzqoMfJ4N7VHDHMnnHQ4Y5LUmNENjgusYQskQlx 73Uhmu/K2N8nQMN21E5/anV3DxPOt00i0S6h2bG7Kf6QHdItYJqXNoeUPxqACiV/ mpBbWvoC9ceBLb2G2fha1ilkGjMuJAGuDTEsW0bEkOn2+Uz1KgLHoIdme6WaGBXO Ls2SW3zBHwbdMHtFMr8dcYlIeiqf+73a -----END CERTIFICATE-----Generated at Wed Oct 29 20:45:27 2025 by rpki-client