$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30458aaf-8bc5-3f53-9556-5078d9063a6f.roa File: 30458aaf-8bc5-3f53-9556-5078d9063a6f.roa (raw, json) Hash identifier: WBPlInZlu92Ud2RbmhxFsUIjHW2CklItOVx6A+/JPZQ= Subject key identifier: 49:87:C7:BA:F1:F3:F2:59:6B:1B:25:D2:88:D3:8C:DF:F0:88:20:B0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963CDA9805E62CDB6A99DB Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30458aaf-8bc5-3f53-9556-5078d9063a6f.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396551 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:3c:da:98:05:e6:2c:db:6a:99:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=07ce17a5-d98c-4ff6-ba18-1a60ae202c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b7:4f:7c:70:d9:e3:e6:6f:14:98:3a:8b:d0: d7:ef:c4:c0:c4:d7:9d:d4:2b:ff:b9:78:fe:ba:83: 06:ae:54:3c:53:c6:4b:0a:38:bb:78:44:00:19:35: 8f:33:07:66:d4:68:59:92:89:32:fe:a6:4f:8a:97: 0f:93:d6:5d:84:70:ab:81:30:38:f5:e1:ec:a3:63: 0a:e2:21:76:33:13:eb:17:d4:ff:96:4a:7a:cb:ca: b5:80:82:ad:a9:5b:68:3f:24:99:de:68:d6:b7:f4: bf:6f:e1:0c:69:bd:cf:cf:f3:dd:22:df:ae:df:77: 12:89:68:d7:4e:19:fb:2f:2b:8b:b0:ce:34:20:94: 02:88:9e:b6:4a:a7:21:90:ac:9b:5d:88:c6:94:36: ae:b5:29:ac:3a:69:11:8c:c2:b9:d0:b0:ef:a0:75: 9f:40:74:bf:55:a5:b1:90:ed:ee:56:95:0c:87:08: 38:b1:ef:8c:9a:2e:de:e6:76:04:33:8e:c4:82:bd: d4:37:fc:83:fe:69:35:c8:59:04:af:78:ec:5a:3e: cf:4f:97:00:fb:c7:18:f2:09:82:55:d6:98:3c:a1: 4f:04:e7:b5:db:3e:1e:be:1e:98:81:92:7d:26:a3: 41:48:40:43:4d:bc:15:e6:74:dc:da:c7:aa:cc:f7: 3b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:87:C7:BA:F1:F3:F2:59:6B:1B:25:D2:88:D3:8C:DF:F0:88:20:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30458aaf-8bc5-3f53-9556-5078d9063a6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:83:3c:f5:2d:d5:5e:73:53:a1:94:65:f5:ca:93:1b:2e:5a: 64:1c:f1:fe:95:19:07:93:34:d3:56:12:55:7e:92:1e:0d:02: 6f:a9:0a:ed:d5:a9:09:03:1d:6b:2a:91:83:1b:3b:e5:ee:64: a7:f4:16:bd:c1:65:35:af:be:ef:5a:bd:57:98:ad:b7:7a:89: c4:12:10:67:93:7a:91:30:f5:0a:93:75:6a:f6:94:e3:f7:ee: 1b:22:25:c2:4d:fc:3c:49:06:b1:e1:dc:e9:4c:6c:71:27:55: e6:0b:7f:bd:3c:c2:0c:e3:ac:1d:af:28:2d:af:2c:90:7a:06: f0:03:1f:b2:c6:e5:c6:e3:52:fb:f8:8b:8c:55:85:30:8e:5f: 7a:82:98:87:83:9f:3c:50:a8:4d:23:52:4e:87:75:05:07:bf: b8:fc:14:92:4e:0c:26:5c:eb:7f:70:56:0b:77:8a:4b:1c:e8: 89:3a:01:ee:40:8c:d7:42:f3:aa:8e:eb:52:31:d1:d6:b2:ae: cd:16:86:fc:0a:05:a6:23:ab:24:ab:a2:13:87:dd:33:61:95: f6:ba:8d:cb:82:38:75:28:06:ed:4f:4a:cf:f2:55:d0:93:53: dd:00:4d:0e:bc:4e:80:47:e1:cc:d3:ab:43:69:55:ac:97:74: bf:57:1a:2e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqeljzamAXmLNtqmdswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MDdjZTE3YTUtZDk4Yy00ZmY2LWJhMTgtMWE2MGFlMjAyYzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrdPfHDZ4+ZvFJg6i9DX78TAxNed1Cv/uXj+ uoMGrlQ8U8ZLCji7eEQAGTWPMwdm1GhZkoky/qZPipcPk9ZdhHCrgTA49eHso2MK 4iF2MxPrF9T/lkp6y8q1gIKtqVtoPySZ3mjWt/S/b+EMab3Pz/PdIt+u33cSiWjX Thn7LyuLsM40IJQCiJ62SqchkKybXYjGlDautSmsOmkRjMK50LDvoHWfQHS/VaWx kO3uVpUMhwg4se+Mmi7e5nYEM47Egr3UN/yD/mk1yFkEr3jsWj7PT5cA+8cY8gmC VdaYPKFPBOe12z4evh6YgZJ9JqNBSEBDTbwV5nTc2seqzPc7sQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEmHx7rx8/JZaxsl0ojTjN/wiCCwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzA0NThhYWYtOGJjNS0z ZjUzLTk1NTYtNTA3OGQ5MDYzYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQASgzz1LdVec1OhlGX1ypMbLlpkHPH+lRkHkzTTVhJVfpIeDQJvqQrt 1akJAx1rKpGDGzvl7mSn9Ba9wWU1r77vWr1XmK23eonEEhBnk3qRMPUKk3Vq9pTj 9+4bIiXCTfw8SQax4dzpTGxxJ1XmC3+9PMIM46wdrygtryyQegbwAx+yxuXG41L7 +IuMVYUwjl96gpiHg588UKhNI1JOh3UFB7+4/BSSTgwmXOt/cFYLd4pLHOiJOgHu QIzXQvOqjutSMdHWsq7NFob8CgWmI6skq6ITh90zYZX2uo3Lgjh1KAbtT0rP8lXQ k1PdAE0OvE6AR+HM06tDaVWsl3S/Vxou -----END CERTIFICATE-----Generated at Wed Aug 6 06:00:54 2025 by rpki-client