$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e26e5a76-42e4-3a9c-a2a0-aeb23ccc2549.roa File: e26e5a76-42e4-3a9c-a2a0-aeb23ccc2549.roa (raw, json) Hash identifier: Zb2wqAHvGFz5r8tM2Fp5XX5adTPlJ5zOqRrv5eMNWnY= Subject key identifier: 82:A3:1B:03:E3:A4:8F:0A:A2:19:C3:07:61:AD:42:BB:3E:4A:B7:44 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B7F52311FB06493767C8AC600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e26e5a76-42e4-3a9c-a2a0-aeb23ccc2549.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396604 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:31:1f:b0:64:93:76:7c:8a:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=7d2ab572-bfcd-4b98-a131-aa6eb2a50161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:59:1c:16:57:8c:00:fc:89:87:a0:59:d4:81: 7d:2d:8b:dc:9e:1d:1b:e5:03:91:f5:33:d6:a6:20: 85:e1:7f:f2:f5:f3:c8:fc:95:d4:8b:f2:a4:27:36: 0e:14:4f:3d:98:1c:73:1f:ec:b6:10:c6:b1:58:38: 1d:fe:04:08:7d:03:de:2f:66:62:e2:10:62:8e:ab: f6:82:a5:13:1e:17:0a:a5:a2:93:97:13:86:c6:4f: 1a:24:73:89:1a:c6:fc:b4:df:89:83:ed:b5:b7:2d: 83:1a:a8:8d:03:42:7f:b9:94:5f:90:9e:ff:e1:87: 38:52:ce:0b:eb:2e:ad:f4:5a:e1:5d:0f:f2:12:61: 61:78:64:16:61:a8:07:47:2c:b7:91:d6:07:88:15: 93:b5:02:ef:46:05:81:84:db:e2:23:ab:83:be:fa: cb:02:53:f8:e0:bc:4f:58:24:43:56:01:12:8b:9f: 29:3a:5e:f7:fe:82:fb:13:ea:5c:db:47:2e:a9:fc: 9b:58:15:ce:5a:01:79:56:97:d2:e9:a0:3a:e4:e5: 04:df:44:32:20:cf:19:ef:8b:e4:4c:f9:1b:5e:9b: e9:97:0c:9d:93:17:96:13:de:80:3f:06:82:6f:09: 39:a0:f2:7f:4f:a1:7e:bf:1c:23:bf:23:12:d4:fa: 96:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A3:1B:03:E3:A4:8F:0A:A2:19:C3:07:61:AD:42:BB:3E:4A:B7:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e26e5a76-42e4-3a9c-a2a0-aeb23ccc2549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:10:c8:73:0c:78:9f:dd:32:48:76:60:f4:0f:7b:0a:e7:f7: c4:4f:9f:71:2c:89:ad:bc:c3:f6:17:34:52:41:d3:15:11:73: f1:41:2c:fa:9b:72:6e:69:cd:21:d0:43:dc:35:73:4a:b1:bc: eb:40:09:b4:73:52:80:11:19:4a:f1:c0:05:20:94:34:77:e8: 4e:59:5b:75:1a:45:88:32:8d:72:db:53:8d:93:9b:2e:48:d5: 17:9a:6a:4c:42:09:54:8f:83:2a:b1:bd:47:b5:43:bc:48:91: b8:60:99:33:54:0c:f1:09:50:b0:8d:cf:42:34:fa:ae:4f:83: 7d:8e:ed:ec:52:f0:8b:8f:cf:37:48:1d:f1:94:c9:7e:a2:71: 32:bd:df:98:4d:06:85:51:73:6d:ff:e3:e6:28:03:71:ce:d7: bc:1c:83:99:a3:c4:36:44:3d:4b:86:d4:91:7b:5f:8a:a0:a0: 2f:6c:8f:2f:ca:7d:b7:c2:f6:dd:a4:a6:a1:4a:63:b1:1b:f6: bf:05:b4:13:8c:da:f5:d0:f4:de:01:1c:39:e4:1f:90:20:35: 6f:1b:2d:67:40:84:cd:e6:e2:ba:8d:b7:ac:fd:b9:ab:eb:dc: 30:ab:1b:e3:81:c5:7c:ba:9a:74:70:f5:19:64:ab:65:9e:8f: 79:fc:ad:93 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UjEfsGSTdnyKxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk N2QyYWI1NzItYmZjZC00Yjk4LWExMzEtYWE2ZWIyYTUwMTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFkcFleMAPyJh6BZ1IF9LYvcnh0b5QOR9TPW piCF4X/y9fPI/JXUi/KkJzYOFE89mBxzH+y2EMaxWDgd/gQIfQPeL2Zi4hBijqv2 gqUTHhcKpaKTlxOGxk8aJHOJGsb8tN+Jg+21ty2DGqiNA0J/uZRfkJ7/4Yc4Us4L 6y6t9FrhXQ/yEmFheGQWYagHRyy3kdYHiBWTtQLvRgWBhNviI6uDvvrLAlP44LxP WCRDVgESi58pOl73/oL7E+pc20cuqfybWBXOWgF5VpfS6aA65OUE30QyIM8Z74vk TPkbXpvplwydkxeWE96APwaCbwk5oPJ/T6F+vxwjvyMS1PqW7QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIKjGwPjpI8KohnDB2GtQrs+SrdEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTI2ZTVhNzYtNDJlNC0z YTljLWEyYTAtYWViMjNjY2MyNTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBCEMhzDHif3TJIdmD0D3sK5/fET59xLImtvMP2FzRSQdMVEXPxQSz6 m3Juac0h0EPcNXNKsbzrQAm0c1KAERlK8cAFIJQ0d+hOWVt1GkWIMo1y21ONk5su SNUXmmpMQglUj4Mqsb1HtUO8SJG4YJkzVAzxCVCwjc9CNPquT4N9ju3sUvCLj883 SB3xlMl+onEyvd+YTQaFUXNt/+PmKANxzte8HIOZo8Q2RD1LhtSRe1+KoKAvbI8v yn23wvbdpKahSmOxG/a/BbQTjNr10PTeARw55B+QIDVvGy1nQITN5uK6jbes/bmr 69wwqxvjgcV8upp0cPUZZKtlno95/K2T -----END CERTIFICATE-----Generated at Wed Oct 29 11:36:13 2025 by rpki-client