$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23adb641-033d-3ed1-8f65-f2788cfcdd22.roa File: 23adb641-033d-3ed1-8f65-f2788cfcdd22.roa (raw, json) Hash identifier: fRz19eeaZ63pRqbD9xXpOyU1ISM5GtHqmkSPZ6aCMwA= Subject key identifier: 41:78:82:65:30:EE:73:E6:B5:0F:4D:C7:E5:D3:5A:C9:21:84:8E:26 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963D5860C0DE901C3B5D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23adb641-033d-3ed1-8f65-f2788cfcdd22.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 397197 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:3d:58:60:c0:de:90:1c:3b:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=9048c21b-a091-4cfc-808b-2b657b3b1ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:27:3e:13:4c:71:f5:06:d6:8c:0e:d0:19:50: 8f:d7:49:20:a0:7e:7d:c4:46:ed:03:d5:3d:3b:9d: 68:c3:66:41:8f:47:84:09:ca:16:92:f1:7b:16:59: 5b:55:f8:18:5d:d2:d9:e3:32:33:c1:2a:e3:88:17: 1d:56:2b:50:28:18:7d:fc:39:46:f7:3b:0e:59:4b: 18:e8:1a:ce:78:f5:9c:89:bf:eb:b6:ff:85:6e:86: 68:0d:da:d3:a0:1b:74:1d:26:86:23:4b:ed:02:f4: fb:15:89:ec:5e:15:ca:75:87:7e:7d:3c:5b:cb:bd: 8e:ba:b2:0c:2c:c2:b7:eb:85:dc:86:5e:9a:3c:72: ac:fa:34:a0:48:47:26:fe:18:88:09:f4:9d:18:b1: a8:f4:dd:38:6a:3d:39:c9:78:32:71:2d:8a:a4:02: e0:3e:91:42:56:f0:c6:cb:42:69:9d:fc:69:73:9e: a8:23:2b:2d:9a:8f:4a:20:49:fc:d9:f5:3b:1f:d6: ec:f9:d6:86:53:bb:ba:8f:0a:39:d7:96:e2:58:0a: a0:b9:62:f8:69:c9:22:e6:52:8c:fe:81:b4:dc:ad: 62:b2:01:57:94:2a:3f:d4:f7:2c:af:ca:1a:78:34: 08:da:96:06:01:59:13:c6:2b:22:b7:ec:29:3f:ea: c3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:78:82:65:30:EE:73:E6:B5:0F:4D:C7:E5:D3:5A:C9:21:84:8E:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23adb641-033d-3ed1-8f65-f2788cfcdd22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:2c:91:a9:8e:35:e5:dc:1f:20:99:ac:37:5a:8e:aa:2a:a6: e0:d6:41:6a:42:8b:f6:c6:94:14:fb:a5:38:b8:33:6d:1c:05: 90:58:44:58:33:1a:51:6c:a1:b6:2c:57:af:cb:8f:6f:5b:91: 74:7c:98:e7:9c:42:2c:4f:60:a8:1a:61:b9:81:9d:bb:18:11: 49:22:8c:ea:e9:f7:70:a1:56:55:77:c7:d7:eb:42:de:d2:38: ff:ad:0c:d6:1c:03:1e:f6:76:5a:f8:78:dc:27:de:5f:b6:6b: a7:29:d8:23:4e:67:7f:40:01:6e:5f:ce:a8:c7:ae:2b:17:f4: b8:00:d6:b6:52:38:18:72:39:99:af:cb:2d:94:97:76:80:e9: e6:be:44:65:27:71:ef:bf:d8:82:6b:55:79:83:23:65:84:0b: 80:9b:5a:9d:d9:1c:48:01:c9:5a:a6:b4:c3:1d:42:63:36:25: 3f:21:20:e8:18:68:19:1a:8f:d1:43:87:cc:68:ba:b0:78:f0: 7d:6b:d5:5e:9a:32:ed:cd:d2:56:9d:e8:d9:76:0f:06:b8:a9: c4:d4:42:d8:f6:1d:72:ad:6c:d6:a6:4e:ac:bf:26:9d:d0:db: 57:9d:2c:5a:fc:60:0d:bc:f2:3d:e9:28:88:2b:55:4b:6b:54: c7:48:d5:d8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelj1YYMDekBw7XYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk OTA0OGMyMWItYTA5MS00Y2ZjLTgwOGItMmI2NTdiM2IxYWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCc+E0xx9QbWjA7QGVCP10kgoH59xEbtA9U9 O51ow2ZBj0eECcoWkvF7FllbVfgYXdLZ4zIzwSrjiBcdVitQKBh9/DlG9zsOWUsY 6BrOePWcib/rtv+FboZoDdrToBt0HSaGI0vtAvT7FYnsXhXKdYd+fTxby72OurIM LMK364Xchl6aPHKs+jSgSEcm/hiICfSdGLGo9N04aj05yXgycS2KpALgPpFCVvDG y0Jpnfxpc56oIystmo9KIEn82fU7H9bs+daGU7u6jwo515biWAqguWL4acki5lKM /oG03K1isgFXlCo/1Pcsr8oaeDQI2pYGAVkTxisit+wpP+rDvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEF4gmUw7nPmtQ9Nx+XTWskhhI4mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjNhZGI2NDEtMDMzZC0z ZWQxLThmNjUtZjI3ODhjZmNkZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAtLJGpjjXl3B8gmaw3Wo6qKqbg1kFqQov2xpQU+6U4uDNtHAWQWERY MxpRbKG2LFevy49vW5F0fJjnnEIsT2CoGmG5gZ27GBFJIozq6fdwoVZVd8fX60Le 0jj/rQzWHAMe9nZa+HjcJ95ftmunKdgjTmd/QAFuX86ox64rF/S4ANa2UjgYcjmZ r8stlJd2gOnmvkRlJ3Hvv9iCa1V5gyNlhAuAm1qd2RxIAclaprTDHUJjNiU/ISDo GGgZGo/RQ4fMaLqwePB9a9VemjLtzdJWnejZdg8GuKnE1ELY9h1yrWzWpk6svyad 0NtXnSxa/GANvPI96SiIK1VLa1THSNXY -----END CERTIFICATE-----Generated at Wed Aug 6 00:35:54 2025 by rpki-client