$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ecd9ebd-5aca-3470-b0e7-3d749e98d3de.roa File: 3ecd9ebd-5aca-3470-b0e7-3d749e98d3de.roa (raw, json) Hash identifier: SleAB6f4NwsbdvkxBPGtUkvdZBVasuIInNP5huaKyTU= Subject key identifier: A3:3B:7B:A8:92:62:7E:35:69:58:C8:EB:C7:55:6F:49:0F:30:C0:CE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E9639E32507C95351A4C300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ecd9ebd-5aca-3470-b0e7-3d749e98d3de.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396540 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:39:e3:25:07:c9:53:51:a4:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=60a9ca19-4bae-42db-8dff-36068261e58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:11:c9:78:e8:cf:96:83:79:85:5a:9f:c7:01: 92:b4:bb:cd:b5:fa:78:75:61:09:4c:ad:d5:ec:7a: 5a:3b:12:fe:ec:b6:bb:d8:00:59:9a:e2:01:5a:b8: c6:39:0f:36:b2:07:8b:af:07:1d:5f:e4:b0:fd:00: 3f:1d:64:a7:4b:0d:ba:04:63:99:ce:f8:1b:9c:f1: cb:69:c8:8e:aa:b0:4f:d2:ea:a7:8d:57:0a:0e:b5: 6b:c4:a5:76:44:64:49:18:35:84:48:a1:f9:68:6f: 62:08:73:74:e9:4d:ce:d6:df:71:ed:a0:0a:5b:ea: 7c:20:0e:40:20:d1:48:f4:8f:2f:d5:64:b4:10:a1: 05:f4:13:a6:fb:a8:7b:e1:bd:6a:43:42:6f:5d:d9: ea:57:a5:e4:a5:ac:ab:d2:70:ef:a7:22:6f:b0:70: b0:45:d9:c9:b1:2f:f7:4b:f4:90:15:80:e8:d8:36: cf:ff:35:88:06:97:ca:53:e1:31:27:62:8c:8d:b2: a8:58:51:f8:0b:fa:f0:d3:a2:10:f4:fd:23:67:c3: 68:e2:06:e0:d9:23:56:93:ff:2c:44:8e:80:f6:79: f4:58:b9:d9:ac:ac:db:e3:31:f0:b7:27:02:a1:a2: 5d:53:74:ce:ee:19:d9:24:80:63:4f:9c:55:9a:81: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3B:7B:A8:92:62:7E:35:69:58:C8:EB:C7:55:6F:49:0F:30:C0:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ecd9ebd-5aca-3470-b0e7-3d749e98d3de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:13:cb:49:38:ae:ad:d3:f3:ed:ec:24:27:48:85:55:59:d3: 30:d1:61:4d:50:c9:20:c1:db:d0:6c:ba:75:9a:57:d4:19:c1: 5b:f1:30:03:27:8a:a5:17:60:1e:e2:a6:d3:ee:3f:1b:8f:05: cf:58:3c:1a:2b:74:41:81:4a:7b:9d:67:6d:8b:ad:6c:fd:a7: 5e:7c:d3:85:0e:38:0b:56:10:cc:5e:0f:aa:88:9b:b4:e7:da: ac:58:aa:5a:00:a9:cf:8a:aa:87:01:b2:a1:2d:1e:0f:f1:78: f2:e3:b9:80:cc:e6:45:73:94:e0:e5:13:ff:22:3f:9d:a3:9b: 8a:bf:e6:7d:05:76:89:1e:1f:af:89:65:7a:70:c6:34:da:50: cb:cc:d2:ad:80:3f:80:f2:83:90:26:af:85:d9:43:ac:50:49: 12:53:5c:ce:00:39:51:22:00:04:62:94:fa:a0:ab:39:03:ba: 2b:c9:cc:7c:08:08:cd:89:a3:9c:10:b4:08:84:44:6b:98:1a: b3:e3:a3:6f:aa:68:d8:d0:7e:4d:a9:10:14:14:88:e2:1c:19: 48:50:25:c4:a2:32:ce:a8:d8:bc:21:a6:4d:f1:72:bd:e0:6b: c9:6b:f9:c8:7d:da:c9:a1:fd:01:27:de:c9:fa:39:7c:67:98: 72:e6:35:ee -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqeljnjJQfJU1GkwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NjBhOWNhMTktNGJhZS00MmRiLThkZmYtMzYwNjgyNjFlNThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxHJeOjPloN5hVqfxwGStLvNtfp4dWEJTK3V 7HpaOxL+7La72ABZmuIBWrjGOQ82sgeLrwcdX+Sw/QA/HWSnSw26BGOZzvgbnPHL aciOqrBP0uqnjVcKDrVrxKV2RGRJGDWESKH5aG9iCHN06U3O1t9x7aAKW+p8IA5A INFI9I8v1WS0EKEF9BOm+6h74b1qQ0JvXdnqV6Xkpayr0nDvpyJvsHCwRdnJsS/3 S/SQFYDo2DbP/zWIBpfKU+ExJ2KMjbKoWFH4C/rw06IQ9P0jZ8No4gbg2SNWk/8s RI6A9nn0WLnZrKzb4zHwtycCoaJdU3TO7hnZJIBjT5xVmoHoiQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKM7e6iSYn41aVjI68dVb0kPMMDOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2VjZDllYmQtNWFjYS0z NDcwLWIwZTctM2Q3NDllOThkM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB8E8tJOK6t0/Pt7CQnSIVVWdMw0WFNUMkgwdvQbLp1mlfUGcFb8TAD J4qlF2Ae4qbT7j8bjwXPWDwaK3RBgUp7nWdti61s/adefNOFDjgLVhDMXg+qiJu0 59qsWKpaAKnPiqqHAbKhLR4P8Xjy47mAzOZFc5Tg5RP/Ij+do5uKv+Z9BXaJHh+v iWV6cMY02lDLzNKtgD+A8oOQJq+F2UOsUEkSU1zOADlRIgAEYpT6oKs5A7orycx8 CAjNiaOcELQIhERrmBqz46NvqmjY0H5NqRAUFIjiHBlIUCXEojLOqNi8IaZN8XK9 4GvJa/nIfdrJof0BJ97J+jl8Z5hy5jXu -----END CERTIFICATE-----Generated at Mon Aug 4 19:10:48 2025 by rpki-client