$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b17fe67-f014-318e-a766-667fa5056720.roa File: 3b17fe67-f014-318e-a766-667fa5056720.roa (raw, json) Hash identifier: +N5Rd/jslOSERbBMaZPsroUv/uWFE3m8P8hLK8XTSRE= Subject key identifier: 17:59:16:5A:C6:E8:9B:84:7C:44:25:ED:16:8D:C5:32:A6:60:A9:F9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963DB8540724BC188643C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b17fe67-f014-318e-a766-667fa5056720.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396611 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:3d:b8:54:07:24:bc:18:86:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=8ee22b81-67db-4470-825d-ef5c1a19f768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:27:3e:55:2b:1b:51:3a:cc:16:9c:57:c4:4a: ab:e1:e2:ad:e5:cf:5f:dd:46:14:c8:e7:f6:d5:fe: a4:9f:1d:e9:6c:ca:7b:dc:d0:fd:b0:7c:72:cf:56: ba:55:3d:83:90:d0:f6:20:0d:4a:33:9f:ff:82:00: dd:1f:c8:84:f9:1c:d8:ad:99:6e:6a:27:b8:44:c6: 83:86:9c:7b:3c:65:15:2c:7e:d4:fa:48:86:65:5c: eb:80:f1:b9:8a:c1:c9:18:87:3f:d6:ad:51:69:a8: 61:81:07:bc:98:c1:11:21:00:d8:5a:17:91:e1:d1: 04:59:af:1b:c7:de:4c:df:28:00:b5:76:91:dd:0a: cf:d1:40:72:68:0d:87:d6:52:2c:66:52:b0:2f:c9: 4b:a7:23:20:ab:63:e4:64:f9:ac:40:6d:40:ab:9d: c1:cd:d7:25:08:50:88:29:50:a3:96:f5:c1:20:a5: fa:8b:af:b8:c5:40:14:e5:54:be:68:d3:0d:40:93: b1:4c:b4:42:40:86:a2:ab:4d:25:dd:d0:d4:88:9a: 06:d8:d9:6c:5f:c9:a4:c8:9b:19:b5:ec:d1:8d:f6: e2:36:54:e8:56:81:36:6c:eb:70:d1:bb:23:24:e1: f3:84:23:87:9e:86:19:17:09:2b:6a:a3:cd:6b:99: 72:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:59:16:5A:C6:E8:9B:84:7C:44:25:ED:16:8D:C5:32:A6:60:A9:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b17fe67-f014-318e-a766-667fa5056720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:4c:ed:ab:50:0d:ef:35:16:43:f9:74:a2:32:32:ef:fb:48: b4:2e:17:fc:33:2c:6e:0c:1c:04:1f:19:14:d2:72:4c:da:23: 49:3a:7e:40:3c:f5:2d:e1:db:fd:5e:66:3b:6d:61:85:0a:49: 68:fe:57:62:70:8a:45:1e:e7:31:75:c5:6f:8c:2a:d6:7b:d6: f7:0b:92:5a:9b:45:f1:e1:55:a6:5b:4c:70:0f:0c:f9:b3:65: 07:42:cc:6e:97:45:4f:2e:9a:d2:a5:31:71:44:62:ad:b2:c1: 59:ce:a3:7d:dd:f7:55:50:75:ba:e8:e0:3d:b9:3d:fc:7f:22: 46:aa:10:6b:1c:26:ab:00:2f:cb:4c:17:c1:aa:de:7f:eb:ed: 86:a2:5e:1f:3b:d8:72:41:66:9a:9e:1f:11:80:bf:2e:dd:63: 37:31:6f:a0:56:05:6e:8c:65:1c:29:e5:2f:c2:8e:09:76:e0: 29:cc:02:54:33:1c:3f:1e:a5:65:d5:96:55:a4:80:25:09:c4: 40:e3:b8:f7:fa:a9:7e:c6:aa:ab:79:85:1b:fc:1d:f7:dd:f2: 1d:69:62:57:97:7f:c7:1a:dd:b3:45:c6:2c:28:c9:7f:24:b1: f8:3b:88:9e:f7:c9:e7:b6:86:21:30:b7:f0:d5:fc:b0:e6:94: 3c:f9:e2:81 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelj24VAckvBiGQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk OGVlMjJiODEtNjdkYi00NDcwLTgyNWQtZWY1YzFhMTlmNzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCc+VSsbUTrMFpxXxEqr4eKt5c9f3UYUyOf2 1f6knx3pbMp73ND9sHxyz1a6VT2DkND2IA1KM5//ggDdH8iE+RzYrZluaie4RMaD hpx7PGUVLH7U+kiGZVzrgPG5isHJGIc/1q1RaahhgQe8mMERIQDYWheR4dEEWa8b x95M3ygAtXaR3QrP0UByaA2H1lIsZlKwL8lLpyMgq2PkZPmsQG1Aq53BzdclCFCI KVCjlvXBIKX6i6+4xUAU5VS+aNMNQJOxTLRCQIaiq00l3dDUiJoG2NlsX8mkyJsZ tezRjfbiNlToVoE2bOtw0bsjJOHzhCOHnoYZFwkraqPNa5lyqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBdZFlrG6JuEfEQl7RaNxTKmYKn5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2IxN2ZlNjctZjAxNC0z MThlLWE3NjYtNjY3ZmE1MDU2NzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB+TO2rUA3vNRZD+XSiMjLv+0i0Lhf8MyxuDBwEHxkU0nJM2iNJOn5A PPUt4dv9XmY7bWGFCklo/ldicIpFHucxdcVvjCrWe9b3C5Jam0Xx4VWmW0xwDwz5 s2UHQsxul0VPLprSpTFxRGKtssFZzqN93fdVUHW66OA9uT38fyJGqhBrHCarAC/L TBfBqt5/6+2Gol4fO9hyQWaanh8RgL8u3WM3MW+gVgVujGUcKeUvwo4JduApzAJU Mxw/HqVl1ZZVpIAlCcRA47j3+ql+xqqreYUb/B333fIdaWJXl3/HGt2zRcYsKMl/ JLH4O4ie98nntoYhMLfw1fyw5pQ8+eKB -----END CERTIFICATE-----Generated at Tue Aug 5 17:24:19 2025 by rpki-client