$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbae136a-600c-3ec1-8570-5618e3baf9b7.roa File: dbae136a-600c-3ec1-8570-5618e3baf9b7.roa (raw, json) Hash identifier: BZnfUn4GR+upGOYXuQYKFJ4fdGTa6cTzhV0O4FJGVOc= Subject key identifier: 4C:84:FB:9A:52:52:73:16:00:C7:77:78:AD:6F:87:55:5A:4D:A6:F4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F523C94739DB94AE528DA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbae136a-600c-3ec1-8570-5618e3baf9b7.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 36631 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:3c:94:73:9d:b9:4a:e5:28:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=527a3e94-530d-48d7-bb73-542e667e7395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:93:9f:fd:e0:9a:51:a5:7c:a9:df:a2:b6:69: d0:26:d0:a2:b7:f8:f7:10:10:c8:1d:40:8c:35:02: 16:91:f1:b3:80:e1:d5:d7:3b:7b:43:ab:9b:71:91: aa:de:6e:04:26:47:b2:ff:09:29:ca:1b:0b:bf:a6: b5:ed:4c:05:05:a4:5a:74:41:1d:16:8d:b3:56:fc: b2:f9:74:08:14:78:b2:c7:b4:92:e3:8f:21:75:6c: e7:1b:e9:87:c7:5c:f6:74:34:08:18:a9:ba:d0:26: e7:6f:29:83:40:d8:2a:8c:7c:ed:04:e8:17:10:d0: e2:16:e2:86:f3:8d:65:13:bb:d4:bd:b9:6b:89:8b: 13:c0:d9:71:c3:b7:4a:d0:bd:e5:42:c8:12:99:9d: d0:aa:28:61:ce:88:e8:93:d9:81:b0:96:87:28:79: c5:8c:18:ae:c0:c2:37:b5:6e:42:d2:fd:02:9a:0d: 32:a8:1b:32:d0:e1:e3:b4:3e:6a:66:7b:f3:59:ba: 81:cc:af:f0:4e:d4:72:26:3e:4f:e5:49:13:f2:0b: 5a:b8:b5:54:6e:6a:99:79:34:4c:1d:e6:3a:56:5e: c3:35:c3:3d:ba:fe:08:52:e7:87:23:bc:a0:10:88: 98:37:76:0b:f8:5a:f4:f4:ad:46:92:e4:ca:cf:e4: 0e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:84:FB:9A:52:52:73:16:00:C7:77:78:AD:6F:87:55:5A:4D:A6:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbae136a-600c-3ec1-8570-5618e3baf9b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:64:74:54:a9:10:d9:e5:40:e7:21:87:e3:cb:5e:7a:71:7e: f5:e7:2d:a0:77:cf:9e:aa:80:d5:c4:16:be:c0:6e:bf:a6:9e: a4:20:e1:c1:9b:ab:29:0c:89:d0:00:a1:87:20:ad:d7:e9:90: 61:37:4f:f9:c7:46:06:97:09:f9:40:78:69:a0:7e:b0:6b:ac: a5:f1:3f:20:6b:46:2a:f5:b6:25:68:d4:be:da:67:dc:37:7c: 90:a6:34:5d:ad:86:a5:ce:01:32:c6:49:a3:0c:e8:5e:f3:3f: 01:1f:45:77:ac:da:35:23:aa:c4:5c:bc:fa:e3:77:c2:97:85: 77:12:bd:6d:59:39:f9:05:92:e7:a6:87:f2:72:0c:56:74:e5: 9a:4d:e2:a8:e0:49:9c:c9:49:6a:26:13:91:72:b1:04:0c:db: c8:19:23:79:3e:ef:28:f8:79:8e:16:a1:24:e3:eb:20:f4:5c: 7f:0f:52:15:a1:96:db:ab:20:07:4a:01:33:48:b5:77:14:cb: 86:90:e9:e1:cd:9f:0f:e7:7e:03:57:5e:37:42:87:c5:e3:a8: a0:52:c4:4c:2d:f0:23:6b:9e:76:59:ae:bc:c3:8b:69:ea:da: 9c:31:e5:fc:f6:30:12:4b:20:b1:2d:52:6a:60:01:da:ba:10: ad:3d:df:d7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjyUc525SuUo2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NTI3YTNlOTQtNTMwZC00OGQ3LWJiNzMtNTQyZTY2N2U3Mzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJOf/eCaUaV8qd+itmnQJtCit/j3EBDIHUCM NQIWkfGzgOHV1zt7Q6ubcZGq3m4EJkey/wkpyhsLv6a17UwFBaRadEEdFo2zVvyy +XQIFHiyx7SS448hdWznG+mHx1z2dDQIGKm60CbnbymDQNgqjHztBOgXENDiFuKG 841lE7vUvblriYsTwNlxw7dK0L3lQsgSmZ3Qqihhzojok9mBsJaHKHnFjBiuwMI3 tW5C0v0Cmg0yqBsy0OHjtD5qZnvzWbqBzK/wTtRyJj5P5UkT8gtauLVUbmqZeTRM HeY6Vl7DNcM9uv4IUueHI7ygEIiYN3YL+Fr09K1GkuTKz+QOFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEyE+5pSUnMWAMd3eK1vh1VaTab0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGJhZTEzNmEtNjAwYy0z ZWMxLTg1NzAtNTYxOGUzYmFmOWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBPZHRUqRDZ5UDnIYfjy156cX715y2gd8+eqoDVxBa+wG6/pp6kIOHB m6spDInQAKGHIK3X6ZBhN0/5x0YGlwn5QHhpoH6wa6yl8T8ga0Yq9bYlaNS+2mfc N3yQpjRdrYalzgEyxkmjDOhe8z8BH0V3rNo1I6rEXLz643fCl4V3Er1tWTn5BZLn pofycgxWdOWaTeKo4EmcyUlqJhORcrEEDNvIGSN5Pu8o+HmOFqEk4+sg9Fx/D1IV oZbbqyAHSgEzSLV3FMuGkOnhzZ8P534DV143QofF46igUsRMLfAja552Wa68w4tp 6tqcMeX89jASSyCxLVJqYAHauhCtPd/X -----END CERTIFICATE-----Generated at Wed Oct 29 20:35:11 2025 by rpki-client