$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/095e1ffa-66c8-33a3-80c7-9718b3e96603.roa File: 095e1ffa-66c8-33a3-80c7-9718b3e96603.roa (raw, json) Hash identifier: oN6Ss1oV6sUcYE52aP0aVB/uVj7ltJBGVWvxlUiSF54= Subject key identifier: 2F:53:3D:D2:F1:09:85:E5:0F:79:A5:B7:8E:5D:00:CA:E6:1E:0D:3E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963B5701AFC282E3FDD660 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/095e1ffa-66c8-33a3-80c7-9718b3e96603.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396589 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:3b:57:01:af:c2:82:e3:fd:d6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=980ba916-c2db-47cf-ab11-50989e0bed1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f2:6b:4d:4e:55:6b:37:80:5e:1c:fe:63:ea: 36:d4:6d:64:8f:71:00:ae:d6:67:05:aa:06:12:0f: 01:fe:2a:0b:46:2c:43:d9:12:a0:36:33:a3:3e:26: fa:c4:78:70:67:5b:cd:13:2c:11:b5:a3:9e:38:dc: 52:e8:e5:f2:1b:d6:49:84:4a:a8:5c:77:39:20:e4: 09:7d:36:19:b8:38:b7:df:d5:6a:08:2a:5a:7e:cc: 5f:7a:38:dd:17:e9:b3:d9:42:a7:2b:51:ba:c9:ba: f9:26:fe:ba:fe:36:85:87:a0:c7:22:4a:8a:2c:ca: e6:c7:e4:2b:2e:dd:1c:61:d1:9d:ed:6b:6d:31:ce: e0:82:70:a8:b7:cf:5b:a3:4c:4f:f3:e7:6a:ca:bc: c0:98:fa:f4:30:80:b3:c1:4e:0a:1b:54:bd:ff:d0: 1f:92:b1:88:b8:1a:df:81:20:e8:9e:9e:f9:a7:e9: cc:fd:a1:c4:d6:3a:38:2e:24:d6:eb:d3:45:62:0b: 10:d1:05:eb:d2:e5:85:c8:79:7a:6d:d1:1b:26:af: 51:c9:26:a7:31:35:e2:8f:32:ac:ac:84:e7:9b:aa: b7:af:fa:f5:f4:e3:0d:54:38:07:3c:23:12:83:87: 3a:28:ec:63:c5:9f:54:f7:61:83:20:bd:cc:de:5d: 30:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:53:3D:D2:F1:09:85:E5:0F:79:A5:B7:8E:5D:00:CA:E6:1E:0D:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/095e1ffa-66c8-33a3-80c7-9718b3e96603.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:66:c5:17:8a:65:a7:3b:50:32:41:01:5a:29:8a:48:34:b6: 7a:1d:70:01:2a:16:41:57:91:a4:a5:6d:b5:ae:6e:5c:76:bb: d4:b2:c0:86:a9:cf:af:e7:96:b9:bc:eb:5e:5c:c5:7a:8f:1e: 2c:69:2e:7c:72:2d:9f:ea:b1:3b:e0:85:86:1f:1d:97:a3:9b: 0b:d5:e5:80:5a:46:80:64:e6:c3:67:a6:36:56:21:81:40:07: 2a:a5:3f:2f:e8:7d:5a:e2:75:e8:21:79:e7:66:5a:c6:23:9e: d1:66:a6:41:be:bb:bb:bb:16:ec:27:91:0f:da:dc:06:73:49: 4f:e2:cc:26:9d:c8:82:95:aa:e6:b0:a5:e4:a7:ed:d5:8b:2f: fe:a3:0b:18:56:24:e3:88:8c:56:89:6a:d5:bc:27:f8:6c:77: d0:a4:71:95:24:ad:f7:db:56:b1:32:b5:c9:3c:f4:6d:33:24: 36:87:b5:05:8c:a3:08:e4:7b:6d:35:48:11:9b:54:3e:e6:7a: 1e:a8:c5:dc:6c:50:e3:0d:b5:7d:fd:b9:14:1e:b2:5f:5b:40: 5c:90:9e:57:17:e3:36:50:93:b3:a9:d4:a8:a5:50:d4:6a:e5: b8:ea:45:92:ba:8e:79:3d:d5:47:06:97:40:0a:ba:aa:4c:bd: b6:c0:74:63 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqeljtXAa/CguP91mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk OTgwYmE5MTYtYzJkYi00N2NmLWFiMTEtNTA5ODllMGJlZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPJrTU5VazeAXhz+Y+o21G1kj3EArtZnBaoG Eg8B/ioLRixD2RKgNjOjPib6xHhwZ1vNEywRtaOeONxS6OXyG9ZJhEqoXHc5IOQJ fTYZuDi339VqCCpafsxfejjdF+mz2UKnK1G6ybr5Jv66/jaFh6DHIkqKLMrmx+Qr Lt0cYdGd7WttMc7ggnCot89bo0xP8+dqyrzAmPr0MICzwU4KG1S9/9AfkrGIuBrf gSDonp75p+nM/aHE1jo4LiTW69NFYgsQ0QXr0uWFyHl6bdEbJq9RySanMTXijzKs rITnm6q3r/r19OMNVDgHPCMSg4c6KOxjxZ9U92GDIL3M3l0wnwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC9TPdLxCYXlD3mlt45dAMrmHg0+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDk1ZTFmZmEtNjZjOC0z M2EzLTgwYzctOTcxOGIzZTk2NjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB9ZsUXimWnO1AyQQFaKYpINLZ6HXABKhZBV5GkpW21rm5cdrvUssCG qc+v55a5vOteXMV6jx4saS58ci2f6rE74IWGHx2Xo5sL1eWAWkaAZObDZ6Y2ViGB QAcqpT8v6H1a4nXoIXnnZlrGI57RZqZBvru7uxbsJ5EP2twGc0lP4swmnciClarm sKXkp+3Viy/+owsYViTjiIxWiWrVvCf4bHfQpHGVJK3321axMrXJPPRtMyQ2h7UF jKMI5HttNUgRm1Q+5noeqMXcbFDjDbV9/bkUHrJfW0BckJ5XF+M2UJOzqdSopVDU auW46kWSuo55PdVHBpdACrqqTL22wHRj -----END CERTIFICATE-----Generated at Mon Aug 4 15:27:32 2025 by rpki-client