$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21c8994c-b7a9-3921-a776-411828754690.roa File: 21c8994c-b7a9-3921-a776-411828754690.roa (raw, json) Hash identifier: xl0NdrivpZ2UQHpKAWStYB2jp/NgNN+PPqErvsRB1HE= Subject key identifier: 6F:E8:12:D5:A0:38:17:48:F2:32:81:C0:CD:A9:21:19:51:3F:C7:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E9641FB96CF10D47E4A6840 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21c8994c-b7a9-3921-a776-411828754690.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396614 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:41:fb:96:cf:10:d4:7e:4a:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=8e5df3c0-84ae-48f5-b5cf-f6f348417dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:fd:40:fb:d2:fd:b0:0b:d7:8f:e2:81:dd: be:59:6b:64:0b:ce:76:45:81:51:97:e6:24:c5:a9: fe:79:67:d9:f1:3b:c0:16:53:52:48:41:d1:1e:33: 9c:4d:b7:4d:4c:e5:61:1a:7a:69:e4:44:bc:b4:6b: 7a:44:4d:26:00:50:48:e3:bc:3b:bc:cb:49:8e:ab: 8a:ea:29:3c:76:d1:d1:d5:87:0a:19:3f:88:c7:56: 37:54:4b:14:ad:76:e8:44:a0:db:60:18:2f:73:b6: 53:c9:7d:d4:87:af:b0:b5:fe:bd:b3:d2:11:ed:b2: d7:5d:60:35:c2:b2:a6:55:d4:53:f5:14:ee:cf:ca: aa:f4:0e:57:e2:43:1d:fd:6a:fb:27:09:3f:a4:c9: 4b:94:11:1b:36:bd:35:c8:b7:aa:b5:a3:16:8e:b6: 3d:21:6e:ee:f5:87:78:b7:a2:e4:0e:4e:0c:45:00: cc:e2:97:6b:ab:0a:e2:d4:b8:69:d8:67:bf:1a:e2: 7c:f4:15:44:c8:75:6c:b8:10:26:2d:17:26:3d:18: 8a:b2:11:b5:b1:cc:55:b4:42:75:9b:9c:45:27:64: 1e:90:b0:73:0c:a0:6b:0e:3f:16:9d:6f:82:e1:60: f9:3d:e7:3a:aa:f1:cf:f3:1f:4c:ce:77:b3:05:01: 7f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E8:12:D5:A0:38:17:48:F2:32:81:C0:CD:A9:21:19:51:3F:C7:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21c8994c-b7a9-3921-a776-411828754690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:78:13:ac:b1:af:38:5c:3d:6d:3d:dd:d5:b3:82:21:f0:34: ae:7d:bf:99:c3:68:d5:66:12:0d:2c:9b:48:7b:73:5d:5d:70: 2f:49:20:8c:80:e9:72:eb:d2:ab:f7:61:70:01:f9:d4:ae:45: 9f:11:a5:22:75:9f:5b:d9:31:17:dd:22:cb:68:14:97:b7:f3: c9:72:b9:51:75:fd:d0:03:42:50:20:21:7c:99:e5:9f:90:61: 23:11:6d:07:6e:93:8f:ed:c8:66:6d:3e:28:ef:95:22:61:77: 68:d7:22:57:15:87:60:ee:70:6b:69:86:e5:0d:99:f9:0f:fd: 41:98:31:20:66:01:49:4a:de:19:df:61:eb:b2:f8:c8:7f:fe: d6:7c:f2:26:d3:2f:b1:73:ca:15:75:1d:d9:69:46:3a:a1:19: 6b:f2:6c:aa:16:cf:eb:e3:bc:10:21:25:2c:b8:30:10:89:0c: cf:c3:9b:e1:1d:4b:73:59:5d:85:38:12:9b:fb:d0:84:74:9d: 06:18:f9:5e:2b:4f:91:35:92:85:41:c1:49:5f:a5:f0:ef:f1: 23:14:bf:8c:38:6d:38:af:4c:b7:6d:9a:fe:8b:a0:da:0c:78: bd:01:72:3c:9c:e2:5f:20:04:f9:a2:79:d0:ee:11:84:38:92: fc:bc:18:36 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelkH7ls8Q1H5KaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk OGU1ZGYzYzAtODRhZS00OGY1LWI1Y2YtZjZmMzQ4NDE3ZGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCD9QPvS/bAL14/igd2+WWtkC852RYFRl+Yk xan+eWfZ8TvAFlNSSEHRHjOcTbdNTOVhGnpp5ES8tGt6RE0mAFBI47w7vMtJjquK 6ik8dtHR1YcKGT+Ix1Y3VEsUrXboRKDbYBgvc7ZTyX3Uh6+wtf69s9IR7bLXXWA1 wrKmVdRT9RTuz8qq9A5X4kMd/Wr7Jwk/pMlLlBEbNr01yLeqtaMWjrY9IW7u9Yd4 t6LkDk4MRQDM4pdrqwri1Lhp2Ge/GuJ89BVEyHVsuBAmLRcmPRiKshG1scxVtEJ1 m5xFJ2QekLBzDKBrDj8WnW+C4WD5Pec6qvHP8x9MznezBQF/7QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFG/oEtWgOBdI8jKBwM2pIRlRP8c7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjFjODk5NGMtYjdhOS0z OTIxLWE3NzYtNDExODI4NzU0NjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA/eBOssa84XD1tPd3Vs4Ih8DSufb+Zw2jVZhINLJtIe3NdXXAvSSCM gOly69Kr92FwAfnUrkWfEaUidZ9b2TEX3SLLaBSXt/PJcrlRdf3QA0JQICF8meWf kGEjEW0HbpOP7chmbT4o75UiYXdo1yJXFYdg7nBraYblDZn5D/1BmDEgZgFJSt4Z 32HrsvjIf/7WfPIm0y+xc8oVdR3ZaUY6oRlr8myqFs/r47wQISUsuDAQiQzPw5vh HUtzWV2FOBKb+9CEdJ0GGPleK0+RNZKFQcFJX6Xw7/EjFL+MOG04r0y3bZr+i6Da DHi9AXI8nOJfIAT5onnQ7hGEOJL8vBg2 -----END CERTIFICATE-----Generated at Mon Aug 4 16:09:10 2025 by rpki-client