$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a7925a3-7a9a-3920-97d4-de9b773e29f2.roa File: 0a7925a3-7a9a-3920-97d4-de9b773e29f2.roa (raw, json) Hash identifier: zPkJeAB/PYHuxON7F9Q5Q02CoAUoK2be8qw6cWG8nSw= Subject key identifier: 6C:38:09:F2:12:09:52:93:7B:9E:98:86:55:5B:0B:08:EB:DA:0F:9C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963F2872D4ED76E8DF5F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a7925a3-7a9a-3920-97d4-de9b773e29f2.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 36621 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:3f:28:72:d4:ed:76:e8:df:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=e6a225d0-47ce-4f44-a711-fd4d6a087e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e5:57:41:16:08:2a:86:f8:78:ef:9f:b5:a4: 7c:5e:a8:c9:09:58:b5:b1:fd:5b:ae:fe:48:5b:3c: b0:38:c2:2d:71:16:1e:47:34:a6:8d:17:31:34:24: 70:4c:f8:89:41:79:12:b2:5f:35:f3:9a:1d:06:92: 15:2c:5d:9f:a1:39:86:46:54:4a:c8:40:37:99:68: 68:5e:f7:52:f3:25:4e:2c:3c:8a:7f:0d:a8:da:e4: 20:40:9f:f4:61:32:50:42:71:fc:03:f4:4e:e8:2d: 71:c0:82:83:d3:c4:7d:1e:03:c5:1a:1c:fa:29:82: 24:77:16:f8:a0:d7:3f:fa:48:83:2d:fd:50:4d:a6: cf:3b:5e:74:84:3d:13:e7:a1:66:e5:ff:bc:3d:9f: 43:bf:77:e5:1a:a6:1a:8a:f0:66:70:17:2f:91:71: ff:99:2a:74:f4:3a:c9:af:19:f6:b7:32:b2:81:33: 6d:f2:8f:27:2e:10:07:e0:f2:61:dd:a6:45:1f:af: 4e:f7:a5:7f:98:68:31:6a:ef:18:2f:50:8d:1c:ae: 15:ff:80:87:fc:bd:84:08:7d:bf:5a:9b:4d:cf:b8: 33:59:6c:c4:17:b5:a7:b0:f1:70:4b:1a:a5:da:aa: f4:dd:a3:60:fa:35:74:7b:6e:27:81:57:26:d7:10: 78:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:38:09:F2:12:09:52:93:7B:9E:98:86:55:5B:0B:08:EB:DA:0F:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a7925a3-7a9a-3920-97d4-de9b773e29f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:4c:b9:b7:c3:07:10:f5:a6:9c:7e:f6:c4:a7:2d:7b:62:3a: 1d:dd:44:e8:09:17:6f:70:45:1e:bb:a1:13:e9:8d:88:79:b6: 16:6b:42:1b:78:c8:f2:e6:73:bf:f3:95:9e:7e:a3:ab:ca:b5: 43:14:a6:a6:7a:cc:17:90:fb:9a:91:bb:90:a2:31:82:59:e1: c3:b8:c3:ec:d3:b4:88:ac:6f:fb:4d:b4:19:c4:40:9d:a3:b9: e8:1c:e8:1a:a7:ef:14:83:47:44:f5:9b:b8:61:6c:4e:d3:c3: 8a:d9:62:b2:35:67:00:2c:72:06:74:7e:21:c5:6a:d6:68:71: 35:b3:e9:e1:79:1c:a8:c7:e2:5c:35:ec:cf:df:9d:8d:17:01: a3:94:ab:4d:86:ad:c7:6c:4f:d5:12:17:58:c9:ea:7f:12:dc: 29:1c:38:49:59:62:6d:d2:79:d2:06:d2:65:22:e8:82:ca:7e: 0d:06:20:15:5a:a9:9d:11:ae:c7:a7:c7:05:be:4d:d8:2f:97: f2:5e:7b:2a:63:7c:ef:c8:af:11:a1:f4:08:c2:fd:8f:07:bf: 92:4e:67:e0:6b:96:81:08:72:ec:e0:b3:ba:6b:c1:9e:0d:ed: ce:1e:de:62:1e:c8:af:7f:55:1b:26:18:eb:ef:2e:35:83:37: 09:06:71:35 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelj8octTtdujfXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ZTZhMjI1ZDAtNDdjZS00ZjQ0LWE3MTEtZmQ0ZDZhMDg3ZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuVXQRYIKob4eO+ftaR8XqjJCVi1sf1brv5I WzywOMItcRYeRzSmjRcxNCRwTPiJQXkSsl8185odBpIVLF2foTmGRlRKyEA3mWho XvdS8yVOLDyKfw2o2uQgQJ/0YTJQQnH8A/RO6C1xwIKD08R9HgPFGhz6KYIkdxb4 oNc/+kiDLf1QTabPO150hD0T56Fm5f+8PZ9Dv3flGqYaivBmcBcvkXH/mSp09DrJ rxn2tzKygTNt8o8nLhAH4PJh3aZFH69O96V/mGgxau8YL1CNHK4V/4CH/L2ECH2/ WptNz7gzWWzEF7WnsPFwSxql2qr03aNg+jV0e24ngVcm1xB4pwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGw4CfISCVKTe56YhlVbCwjr2g+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGE3OTI1YTMtN2E5YS0z OTIwLTk3ZDQtZGU5Yjc3M2UyOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAQTLm3wwcQ9aacfvbEpy17Yjod3UToCRdvcEUeu6ET6Y2IebYWa0Ib eMjy5nO/85WefqOryrVDFKameswXkPuakbuQojGCWeHDuMPs07SIrG/7TbQZxECd o7noHOgap+8Ug0dE9Zu4YWxO08OK2WKyNWcALHIGdH4hxWrWaHE1s+nheRyox+Jc NezP352NFwGjlKtNhq3HbE/VEhdYyep/EtwpHDhJWWJt0nnSBtJlIuiCyn4NBiAV WqmdEa7Hp8cFvk3YL5fyXnsqY3zvyK8RofQIwv2PB7+STmfga5aBCHLs4LO6a8Ge De3OHt5iHsivf1UbJhjr7y41gzcJBnE1 -----END CERTIFICATE-----Generated at Mon Aug 4 19:10:49 2025 by rpki-client