$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa File: 525cb902-d047-345f-b98a-33a46136085b.roa (raw, json) Hash identifier: 5o2Z5TzShn1Hwzgvx1kpEMn2CZRMz0jm8LntvEz2aYc= Subject key identifier: DC:D6:D9:D5:08:52:B9:56:07:BE:4B:13:87:18:C5:7E:0C:54:AE:2A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E9643C859FBD2B1D61D9978 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396578 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:43:c8:59:fb:d2:b1:d6:1d:99:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=650010d6-0f62-4747-ac2f-0fb5d2928f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a5:a4:12:ef:db:53:1e:c7:75:07:49:74:e5: d4:f7:76:61:ce:6c:5d:9b:72:87:6b:85:f6:a7:09: 4e:bd:20:eb:7c:96:b7:31:ee:0c:32:df:57:50:7e: d7:1a:b2:09:2e:6a:6c:05:28:da:9f:eb:65:78:7f: 5d:a1:a0:a2:44:69:37:7f:8d:29:fa:8f:34:14:61: c0:63:f3:e3:78:3e:44:20:43:6b:09:fa:0f:8f:1f: 2b:b9:22:7e:0d:15:8e:a2:d4:a6:04:02:dd:63:bd: 00:c5:e5:6b:c0:62:a0:73:58:75:f2:9b:33:44:73: 4b:2e:eb:1a:d5:85:80:ee:1d:a8:c2:90:6b:05:a2: 6d:aa:eb:89:55:07:21:80:d5:0f:2d:d2:bf:6d:fd: 24:55:15:36:b1:48:6f:89:e3:b3:96:ec:c1:c6:ce: 7b:90:f0:83:f7:fe:0d:04:27:59:31:c3:be:83:5d: 03:89:ef:76:29:0b:0b:06:b3:f3:3c:82:75:76:c4: b9:7c:28:6c:f2:8d:d5:88:38:ea:9b:70:05:8f:af: 12:78:65:70:ec:77:a6:b0:4d:d8:53:f8:d0:d1:b7: 5a:77:68:8c:63:2c:be:90:90:14:9d:77:9a:59:7d: 7d:14:16:cb:eb:9a:0f:eb:fc:d2:42:66:c8:67:28: 70:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D6:D9:D5:08:52:B9:56:07:BE:4B:13:87:18:C5:7E:0C:54:AE:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:df:dd:e6:0f:5f:70:50:af:9b:c9:9d:65:a7:77:ee:8d:c4: eb:68:ee:a8:0e:24:f3:37:66:31:40:98:e5:41:58:66:aa:63: 83:6f:e7:4d:dc:f9:dc:57:d5:3a:fd:ee:3f:fc:80:70:0f:59: 88:b3:ae:43:1d:82:90:f7:b7:89:a7:8e:45:eb:1b:2e:78:a0: 77:ce:72:2d:9b:d7:86:ca:06:d6:c1:35:7e:f6:03:15:b0:31: d1:80:c8:08:a2:66:f5:43:44:17:5f:f6:ea:7b:bd:32:59:be: a8:69:94:a2:d8:4d:d4:9f:0f:00:33:b4:98:01:dc:44:18:8a: 4b:b9:5a:e3:64:57:af:ed:19:c3:f9:81:ef:30:5e:5a:cb:58: 69:3a:86:cf:fd:9b:8b:56:f3:97:52:17:02:c0:6b:26:6d:62: 8a:55:cf:53:a4:0e:73:9e:fb:a7:1b:79:66:eb:5e:85:9e:b8: d1:94:bc:a9:e3:14:d9:ae:68:46:ef:0b:bc:00:9e:d9:72:b8: e8:63:6a:ff:95:b1:76:8d:ab:e9:b0:20:b1:8f:de:57:a2:ac: f1:5c:bc:94:27:53:45:1a:75:67:db:7b:bf:5b:84:cb:d5:e7: 94:dd:d4:8a:8b:d5:b5:90:65:42:60:16:04:04:f5:4e:46:68: b6:01:0a:33 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelkPIWfvSsdYdmXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NjUwMDEwZDYtMGY2Mi00NzQ3LWFjMmYtMGZiNWQyOTI4ZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6WkEu/bUx7HdQdJdOXU93Zhzmxdm3KHa4X2 pwlOvSDrfJa3Me4MMt9XUH7XGrIJLmpsBSjan+tleH9doaCiRGk3f40p+o80FGHA Y/PjeD5EIENrCfoPjx8ruSJ+DRWOotSmBALdY70AxeVrwGKgc1h18pszRHNLLusa 1YWA7h2owpBrBaJtquuJVQchgNUPLdK/bf0kVRU2sUhvieOzluzBxs57kPCD9/4N BCdZMcO+g10Die92KQsLBrPzPIJ1dsS5fChs8o3ViDjqm3AFj68SeGVw7HemsE3Y U/jQ0bdad2iMYyy+kJAUnXeaWX19FBbL65oP6/zSQmbIZyhwqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNzW2dUIUrlWB75LE4cYxX4MVK4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTI1Y2I5MDItZDA0Ny0z NDVmLWI5OGEtMzNhNDYxMzYwODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBd393mD19wUK+byZ1lp3fujcTraO6oDiTzN2YxQJjlQVhmqmODb+dN 3PncV9U6/e4//IBwD1mIs65DHYKQ97eJp45F6xsueKB3znItm9eGygbWwTV+9gMV sDHRgMgIomb1Q0QXX/bqe70yWb6oaZSi2E3Unw8AM7SYAdxEGIpLuVrjZFev7RnD +YHvMF5ay1hpOobP/ZuLVvOXUhcCwGsmbWKKVc9TpA5znvunG3lm616FnrjRlLyp 4xTZrmhG7wu8AJ7ZcrjoY2r/lbF2javpsCCxj95XoqzxXLyUJ1NFGnVn23u/W4TL 1eeU3dSKi9W1kGVCYBYEBPVORmi2AQoz -----END CERTIFICATE-----Generated at Wed Aug 6 13:03:18 2025 by rpki-client