$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/54d25cbb-7b65-334e-bd13-e7e58b7576e6.roa File: 54d25cbb-7b65-334e-bd13-e7e58b7576e6.roa (raw, json) Hash identifier: 2vIpY9IYr2+6CB+zcDm+6OZuLPCb2xcIyXyCrFoVyu0= Subject key identifier: D3:05:7E:FB:F8:86:6E:E8:74:B7:A2:63:31:51:4C:34:51:D7:71:78 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E96399E4A4FBE1326880180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/54d25cbb-7b65-334e-bd13-e7e58b7576e6.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 27544 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:39:9e:4a:4f:be:13:26:88:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=6dc47892-4753-43a2-b523-06e69f76b147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:2f:bb:ac:4e:a2:cc:d6:da:f3:bf:55:0b: 2c:e9:85:3e:ec:26:b6:61:f8:7e:21:6f:b2:0e:55: a7:c1:33:70:3c:c7:05:da:d4:3c:1d:5c:14:47:5a: c7:5d:a8:37:91:61:8f:df:8d:3f:26:b2:7a:87:07: 64:3f:a5:97:b0:13:91:60:c0:f7:1c:61:89:bf:33: 3c:68:92:d7:8e:05:d1:ab:68:c8:d5:f6:7d:88:4a: 93:ba:a6:f6:78:3e:60:f1:12:98:24:0c:fa:0e:69: 83:fc:22:ae:13:86:12:bf:f9:4f:70:16:d2:c6:e8: 6e:0b:b3:d2:17:29:9c:53:c1:4b:2f:9a:c1:e1:15: ea:80:aa:7d:31:25:de:dd:f8:1e:63:ca:c5:b6:58: 92:14:ee:ba:f1:e7:cb:f3:1b:e8:85:e8:77:73:ba: 95:2d:17:e1:e4:16:3e:79:29:8c:40:59:47:16:a4: 49:98:82:ce:99:d7:b7:ce:b7:66:d5:a3:2a:cf:bb: dc:9b:08:e9:6f:1d:dc:e3:0a:b3:e9:5b:ba:8a:ae: 9f:10:cc:52:09:fd:53:59:73:ff:b0:5e:36:f2:bf: 4a:0a:b4:c7:cf:1f:29:8b:99:07:18:21:61:d8:a9: 5e:5e:c7:bc:74:07:14:bc:6c:e9:f9:6b:1a:df:82: 47:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:05:7E:FB:F8:86:6E:E8:74:B7:A2:63:31:51:4C:34:51:D7:71:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/54d25cbb-7b65-334e-bd13-e7e58b7576e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:4c:fc:42:bc:02:92:ea:77:26:b4:8d:dd:80:0b:07:d1:1e: 40:21:98:a3:19:9a:61:f0:3a:f8:d2:a1:7d:0a:1c:3c:d3:ae: 45:6b:41:da:5f:1f:47:ed:d5:f9:de:23:ad:86:0d:af:ee:31: 2e:94:fe:14:f7:71:6d:0e:a7:a4:1e:41:b4:66:f3:c4:f6:7d: 5d:69:20:92:4e:37:1f:8c:2e:9c:6b:86:f6:da:93:18:a3:5f: d8:c1:de:41:5d:b8:2b:cf:ad:1a:3b:e4:9e:34:68:e2:c1:a8: 1f:65:54:c9:fc:bc:ce:db:e6:dd:b3:6e:3b:3d:ec:d0:03:01: d4:d1:dd:16:d2:09:30:21:d7:44:e7:ed:81:ad:df:c0:0a:4b: 26:2f:2a:53:2d:23:dd:ed:3d:99:1c:79:ac:a6:44:7c:d7:bb: d5:d9:69:ab:be:ad:1d:23:4b:1c:62:e3:2b:88:3f:ec:fd:57: 09:1c:68:ef:6d:6c:ad:ef:35:5e:01:2d:fa:14:58:b6:af:16: a6:9b:2b:35:f0:13:94:86:cb:51:0d:6b:58:ca:9a:ab:40:a8: 45:c2:e5:4c:70:63:71:8d:5e:81:d3:6f:52:14:01:f2:14:82: 7e:a5:4a:2e:ce:63:dc:66:5e:ce:ea:b6:ea:59:6a:90:21:73: 2e:82:4a:77 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqeljmeSk++EyaIAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NmRjNDc4OTItNDc1My00M2EyLWI1MjMtMDZlNjlmNzZiMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVIvu6xOoszW2vO/VQss6YU+7Ca2Yfh+IW+y DlWnwTNwPMcF2tQ8HVwUR1rHXag3kWGP340/JrJ6hwdkP6WXsBORYMD3HGGJvzM8 aJLXjgXRq2jI1fZ9iEqTuqb2eD5g8RKYJAz6DmmD/CKuE4YSv/lPcBbSxuhuC7PS FymcU8FLL5rB4RXqgKp9MSXe3fgeY8rFtliSFO668efL8xvoheh3c7qVLRfh5BY+ eSmMQFlHFqRJmILOmde3zrdm1aMqz7vcmwjpbx3c4wqz6Vu6iq6fEMxSCf1TWXP/ sF428r9KCrTHzx8pi5kHGCFh2KleXse8dAcUvGzp+Wsa34JHcwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNMFfvv4hm7odLeiYzFRTDRR13F4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTRkMjVjYmItN2I2NS0z MzRlLWJkMTMtZTdlNThiNzU3NmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAUTPxCvAKS6ncmtI3dgAsH0R5AIZijGZph8Dr40qF9Chw8065Fa0Ha Xx9H7dX53iOthg2v7jEulP4U93FtDqekHkG0ZvPE9n1daSCSTjcfjC6ca4b22pMY o1/Ywd5BXbgrz60aO+SeNGjiwagfZVTJ/LzO2+bds247PezQAwHU0d0W0gkwIddE 5+2Brd/ACksmLypTLSPd7T2ZHHmspkR817vV2Wmrvq0dI0scYuMriD/s/VcJHGjv bWyt7zVeAS36FFi2rxammys18BOUhstRDWtYypqrQKhFwuVMcGNxjV6B029SFAHy FIJ+pUouzmPcZl7O6rbqWWqQIXMugkp3 -----END CERTIFICATE-----Generated at Mon Aug 4 19:08:46 2025 by rpki-client