$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3754b53b-bd6d-3ab2-91c6-dffcc3227967.roa File: 3754b53b-bd6d-3ab2-91c6-dffcc3227967.roa (raw, json) Hash identifier: Abvg1mjuhKIGLN+Wa+qncH1Rt5PU268K8+9i5HaYeF0= Subject key identifier: 23:21:99:B4:9B:08:C6:6A:42:B4:F9:BB:A6:A2:3A:5F:8C:52:A3:5C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E96461147E48F12455DC420 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3754b53b-bd6d-3ab2-91c6-dffcc3227967.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396572 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:46:11:47:e4:8f:12:45:5d:c4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=71e80c9a-0b74-45cc-9a53-192a02a18fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:22:f0:ec:d2:e1:ac:82:33:be:3f:ea:32:bc: a2:18:a6:6b:3c:23:19:df:9f:42:7e:f7:d2:c2:1a: 72:57:ea:ef:e1:aa:42:79:22:c7:eb:e9:29:3c:cf: 25:32:a8:e4:64:52:b4:0a:a8:f9:0f:0c:e3:f5:14: 1c:89:f1:21:b1:9c:fa:34:f1:50:01:b1:ae:3a:be: 73:91:4a:e8:3e:bf:c6:e8:06:61:63:17:ad:88:f6: e9:c9:8a:2f:60:e1:74:e1:c9:1d:93:7a:85:b6:c8: 9a:1d:dc:3d:b1:ec:c7:48:01:52:cd:40:0b:38:55: 05:f4:f4:c6:06:7b:6c:a1:41:54:50:05:34:ad:74: d8:ae:b6:9b:37:31:a8:ed:ab:3f:aa:d8:7d:fc:a9: 0a:72:61:e1:0e:9c:09:f6:4c:f9:94:ba:9b:72:a8: 79:11:4f:d8:01:4f:59:bb:b3:82:96:45:39:af:58: bc:43:c6:7c:d2:cb:db:7e:90:df:53:7d:11:0d:af: af:fe:a5:61:53:5d:06:89:d5:b3:d1:45:e0:a4:4d: 3a:b5:70:e2:93:cf:7a:a4:4b:27:88:d1:75:56:7e: 49:65:25:57:23:3d:8c:5b:2e:d7:ca:eb:84:0f:40: 1a:f4:7b:65:30:fd:eb:2a:72:2a:19:1f:f3:74:9b: 1b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:21:99:B4:9B:08:C6:6A:42:B4:F9:BB:A6:A2:3A:5F:8C:52:A3:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3754b53b-bd6d-3ab2-91c6-dffcc3227967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:37:70:14:cd:29:92:fb:11:28:28:5f:75:24:ad:82:d4:53: 14:6e:7c:90:fa:3d:1b:e6:da:c8:08:86:60:88:5d:d0:7a:5f: e3:d1:d2:24:06:f3:1a:81:86:96:19:cb:ae:03:10:84:42:fd: a4:3d:91:98:13:e4:14:ab:c4:01:62:30:3f:59:1a:9f:3d:4b: c4:2a:75:1f:e2:b9:2a:c6:67:c7:63:b7:7e:f5:03:b7:26:e0: 97:ad:53:73:24:52:cc:60:2a:72:0f:b8:63:0d:1a:9f:52:f8: 21:7f:a3:f9:72:b2:94:6f:5b:e1:5b:2b:72:0f:08:e3:c6:98: 1e:f2:e5:b7:71:dd:13:06:8b:b9:ff:39:09:01:81:2e:19:d3: cc:7a:ed:82:54:97:67:ec:7d:99:26:85:89:12:92:93:43:bc: 18:dc:70:67:a8:b5:2f:d7:6c:f9:c6:5e:e3:42:95:36:34:6c: b1:51:22:3a:2b:c6:de:e5:8b:f9:95:a1:35:d6:93:16:c6:c1: 0f:7f:00:50:db:bb:78:99:f8:80:2f:23:7a:bd:23:89:df:59: f1:f5:0b:c0:d3:cb:cf:32:05:c4:45:d0:0b:27:f2:3d:df:81: 1e:76:34:ec:0c:07:5c:2c:e9:4f:03:66:cf:80:d5:dd:18:c3: e5:68:1f:20 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelkYRR+SPEkVdxCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NzFlODBjOWEtMGI3NC00NWNjLTlhNTMtMTkyYTAyYTE4ZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CLw7NLhrIIzvj/qMryiGKZrPCMZ359CfvfS whpyV+rv4apCeSLH6+kpPM8lMqjkZFK0Cqj5Dwzj9RQcifEhsZz6NPFQAbGuOr5z kUroPr/G6AZhYxetiPbpyYovYOF04ckdk3qFtsiaHdw9sezHSAFSzUALOFUF9PTG BntsoUFUUAU0rXTYrrabNzGo7as/qth9/KkKcmHhDpwJ9kz5lLqbcqh5EU/YAU9Z u7OClkU5r1i8Q8Z80svbfpDfU30RDa+v/qVhU10GidWz0UXgpE06tXDik896pEsn iNF1Vn5JZSVXIz2MWy7XyuuED0Aa9HtlMP3rKnIqGR/zdJsb5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCMhmbSbCMZqQrT5u6aiOl+MUqNcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzc1NGI1M2ItYmQ2ZC0z YWIyLTkxYzYtZGZmY2MzMjI3OTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6N3AUzSmS+xEoKF91JK2C1FMUbnyQ+j0b5trICIZgiF3Qel/j0dIk BvMagYaWGcuuAxCEQv2kPZGYE+QUq8QBYjA/WRqfPUvEKnUf4rkqxmfHY7d+9QO3 JuCXrVNzJFLMYCpyD7hjDRqfUvghf6P5crKUb1vhWytyDwjjxpge8uW3cd0TBou5 /zkJAYEuGdPMeu2CVJdn7H2ZJoWJEpKTQ7wY3HBnqLUv12z5xl7jQpU2NGyxUSI6 K8be5Yv5laE11pMWxsEPfwBQ27t4mfiALyN6vSOJ31nx9QvA08vPMgXERdALJ/I9 34EedjTsDAdcLOlPA2bPgNXdGMPlaB8g -----END CERTIFICATE-----Generated at Wed Aug 6 09:29:57 2025 by rpki-client