$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de129a61-130f-3c6a-a5f8-4e5cc77abb17.roa File: de129a61-130f-3c6a-a5f8-4e5cc77abb17.roa (raw, json) Hash identifier: G2y6YlVuR/Ex+dUUD5U3rX/0ECKHhtFefAMYUjx2vv0= Subject key identifier: C4:27:D9:52:22:B2:34:B3:09:01:A2:8F:36:A8:78:FA:B1:98:95:04 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F5232FF7CD1E5D4ED895680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de129a61-130f-3c6a-a5f8-4e5cc77abb17.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396563 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:32:ff:7c:d1:e5:d4:ed:89:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=9922980c-df02-41ab-988f-8eba8af83f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5c:5b:fd:a2:8e:5d:28:51:21:df:1f:c8:88: df:fb:da:60:84:61:81:e4:5f:d5:2e:8f:88:81:af: 2c:52:ef:17:ca:00:46:b0:6d:71:ee:15:77:2f:2d: d4:8f:70:eb:e4:b3:0e:93:0a:78:68:28:b8:30:d7: f9:41:b9:f8:88:4a:98:70:0b:2f:66:d3:da:a2:aa: 14:6b:09:73:9b:1f:7e:0f:92:3e:05:20:37:84:04: c3:33:90:7b:7a:99:01:87:c5:d1:3f:7b:6c:49:ad: 7a:02:c7:66:b3:a1:fe:d6:0b:8c:34:8f:31:55:64: a2:31:77:bf:55:ae:e0:9a:01:f3:62:41:d8:c4:54: d8:dd:2d:e6:38:75:9f:8c:eb:cd:03:d6:2d:3b:ca: 5f:50:f2:9a:77:7a:32:6a:06:18:e1:38:55:1a:19: d3:a5:02:4c:7a:4c:4f:cf:fc:c4:42:33:c2:27:92: 65:bd:f4:4b:52:0a:fd:16:fb:a5:98:e8:2f:6c:b7: f2:e6:74:38:3b:16:30:b5:70:bb:4a:45:18:07:78: ec:73:8b:ee:07:1b:54:a7:ac:ed:1b:11:bb:7f:4f: ec:47:a3:2e:47:d8:d6:6b:c7:6a:50:2a:0c:75:20: fd:7a:1c:6e:4d:7c:35:ce:01:d2:2a:45:f2:d0:2b: e9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:27:D9:52:22:B2:34:B3:09:01:A2:8F:36:A8:78:FA:B1:98:95:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de129a61-130f-3c6a-a5f8-4e5cc77abb17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:f4:67:de:83:4e:f4:40:20:ac:eb:32:fe:bb:b2:1a:53:c1: 44:1d:68:41:03:cc:e1:ae:0e:3e:0d:3f:cc:78:00:59:53:5d: 18:7a:46:dd:ac:08:02:fc:c4:f0:6d:47:76:35:b1:da:ed:72: ee:de:84:48:4f:60:f9:a3:73:58:94:8e:59:45:ab:42:f0:ef: 0a:41:08:5c:6e:33:70:6e:05:1e:3f:44:25:a7:26:f9:17:c3: 00:43:c1:0b:e5:d0:40:e6:39:bb:21:94:fb:56:c7:7f:c6:b0: 2f:3d:f0:6d:84:c1:f8:26:90:72:bd:07:6d:a0:77:61:37:07: ab:6a:e2:96:72:cc:99:55:ab:fd:2c:65:c4:f4:f4:8e:57:61: c6:c9:78:86:e0:d8:f7:38:a3:cb:ea:ec:31:93:d7:53:45:da: 09:24:86:75:99:85:d7:da:45:d9:26:4d:53:28:fa:d5:8b:12: 0c:cf:f2:2d:ad:ad:fd:be:f2:8a:92:c5:d3:bd:4a:5c:ba:24: 6e:f3:82:f9:bf:75:50:44:e3:dc:cb:19:5f:43:26:f1:7d:c7: 18:85:37:59:c3:ff:e6:0e:04:c8:75:4d:69:1f:cd:e4:c5:d3: 70:af:70:04:3b:38:e0:0d:92:40:58:7a:60:72:34:9b:18:3e: fb:3e:42:02 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjL/fNHl1O2JVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk OTkyMjk4MGMtZGYwMi00MWFiLTk4OGYtOGViYThhZjgzZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklxb/aKOXShRId8fyIjf+9pghGGB5F/VLo+I ga8sUu8XygBGsG1x7hV3Ly3Uj3Dr5LMOkwp4aCi4MNf5Qbn4iEqYcAsvZtPaoqoU awlzmx9+D5I+BSA3hATDM5B7epkBh8XRP3tsSa16Asdms6H+1guMNI8xVWSiMXe/ Va7gmgHzYkHYxFTY3S3mOHWfjOvNA9YtO8pfUPKad3oyagYY4ThVGhnTpQJMekxP z/zEQjPCJ5JlvfRLUgr9FvulmOgvbLfy5nQ4OxYwtXC7SkUYB3jsc4vuBxtUp6zt GxG7f0/sR6MuR9jWa8dqUCoMdSD9ehxuTXw1zgHSKkXy0CvpCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMQn2VIisjSzCQGijzaoePqxmJUEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGUxMjlhNjEtMTMwZi0z YzZhLWE1ZjgtNGU1Y2M3N2FiYjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCL9Gfeg070QCCs6zL+u7IaU8FEHWhBA8zhrg4+DT/MeABZU10Yekbd rAgC/MTwbUd2NbHa7XLu3oRIT2D5o3NYlI5ZRatC8O8KQQhcbjNwbgUeP0Qlpyb5 F8MAQ8EL5dBA5jm7IZT7Vsd/xrAvPfBthMH4JpByvQdtoHdhNwerauKWcsyZVav9 LGXE9PSOV2HGyXiG4Nj3OKPL6uwxk9dTRdoJJIZ1mYXX2kXZJk1TKPrVixIMz/It ra39vvKKksXTvUpcuiRu84L5v3VQROPcyxlfQybxfccYhTdZw//mDgTIdU1pH83k xdNwr3AEOzjgDZJAWHpgcjSbGD77PkIC -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:57 2025 by rpki-client