$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/55aa0d63-d5ec-31ce-ad4c-38aaa2a1be17.roa File: 55aa0d63-d5ec-31ce-ad4c-38aaa2a1be17.roa (raw, json) Hash identifier: tyCNb1QeHrnadePU2/2wmgX+cr6yzCPV6ZWxONvWQGU= Subject key identifier: 8D:00:89:71:73:5D:04:E5:D1:55:D0:FD:29:C2:C7:EE:A6:6D:0B:2A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963E091FF275FEE5DAA780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/55aa0d63-d5ec-31ce-ad4c-38aaa2a1be17.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396612 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:3e:09:1f:f2:75:fe:e5:da:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=dc64a9f9-a255-4e30-8ee2-c1c51beb02f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:88:e1:6a:a6:8e:51:06:60:e2:bd:93:9e:da: 7c:60:30:b2:fc:c9:b0:c2:9b:2e:18:62:d6:c5:c7: 16:bc:d0:35:57:82:f6:e0:9c:f1:80:7e:50:bd:6c: cd:46:46:5c:87:c2:76:82:15:c0:0b:65:dc:da:40: 7d:2b:9e:22:1e:3c:72:44:70:32:41:53:f7:d0:a2: 6d:99:44:cd:b8:fc:13:3a:21:ea:31:26:f8:ec:11: 8b:eb:2c:5a:b1:36:8c:7c:6e:1f:7b:ed:a6:c8:3f: f3:72:67:68:04:d1:15:d2:ef:d6:2b:13:da:99:30: e2:de:df:2d:71:ad:8b:22:fa:86:1c:f6:5e:e0:ba: 25:f6:67:5e:96:61:1e:1f:7e:4e:5e:13:ca:76:13: 16:2b:74:6e:1e:45:7a:80:8f:fa:c1:2f:6f:9b:90: 73:99:53:04:d4:62:ac:a2:68:8a:8b:03:63:f3:e6: a8:2d:05:c4:3c:60:4b:3b:4a:4d:4f:1f:76:ae:fe: 34:0f:f1:2b:1e:bb:11:eb:93:96:0b:d1:75:33:ae: 5f:11:93:ce:ec:d4:54:47:4e:ad:c9:9d:53:39:df: 9c:14:73:f7:c7:ad:78:0b:85:42:50:b7:45:e1:a5: e1:73:09:50:1f:61:a7:ce:98:8c:21:15:b8:95:fd: 69:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:00:89:71:73:5D:04:E5:D1:55:D0:FD:29:C2:C7:EE:A6:6D:0B:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/55aa0d63-d5ec-31ce-ad4c-38aaa2a1be17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:09:9a:6c:eb:e8:a2:48:3e:2a:89:09:65:cb:34:2a:cd:d0: aa:e9:85:31:f2:b0:dc:e6:24:9e:e4:59:b5:a8:29:61:a5:a8: 2f:d6:60:ab:c4:07:d6:fb:be:bb:dd:f8:15:55:60:f4:a8:05: 4e:b9:10:4b:94:b8:f1:f6:05:74:81:7c:f3:30:8d:8a:04:9b: 70:92:4d:b6:42:8e:f7:73:b6:92:aa:8c:ef:04:16:0d:e0:d8: db:84:5a:55:45:7c:05:b8:30:8f:7e:4b:83:c6:b3:0b:c3:0c: 5d:a9:42:87:3e:42:2d:5b:a7:e2:8f:69:9e:e1:6c:32:96:16: d9:c0:ce:8d:ad:18:4a:c1:69:07:7b:81:ba:21:9a:ce:19:99: 87:3b:2f:c1:d9:62:7c:83:9d:ee:7b:47:62:1c:ae:8e:e2:f3: c6:4d:92:e9:86:fe:e8:8d:23:7e:be:ea:4a:da:32:b7:7a:d8: 83:2f:d8:9f:ee:be:09:e9:d6:f3:0e:23:6a:25:01:60:e8:42: 54:90:2e:4b:1a:26:b0:2f:a9:26:a8:bc:a1:db:5b:69:8c:d5: ba:de:78:23:f1:ea:57:5b:2a:11:c9:ca:40:82:d3:c7:73:df: 8d:95:80:db:6f:9a:31:41:aa:7d:53:5a:d1:96:61:89:11:3d: b3:34:c4:ca -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelj4JH/J1/uXap4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ZGM2NGE5ZjktYTI1NS00ZTMwLThlZTItYzFjNTFiZWIwMmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYjhaqaOUQZg4r2Tntp8YDCy/MmwwpsuGGLW xccWvNA1V4L24JzxgH5QvWzNRkZch8J2ghXAC2Xc2kB9K54iHjxyRHAyQVP30KJt mUTNuPwTOiHqMSb47BGL6yxasTaMfG4fe+2myD/zcmdoBNEV0u/WKxPamTDi3t8t ca2LIvqGHPZe4Lol9mdelmEeH35OXhPKdhMWK3RuHkV6gI/6wS9vm5BzmVME1GKs omiKiwNj8+aoLQXEPGBLO0pNTx92rv40D/ErHrsR65OWC9F1M65fEZPO7NRUR06t yZ1TOd+cFHP3x614C4VCULdF4aXhcwlQH2GnzpiMIRW4lf1pKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI0AiXFzXQTl0VXQ/SnCx+6mbQsqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTVhYTBkNjMtZDVlYy0z MWNlLWFkNGMtMzhhYWEyYTFiZTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAECZps6+iiSD4qiQllyzQqzdCq6YUx8rDc5iSe5Fm1qClhpagv1mCr xAfW+7673fgVVWD0qAVOuRBLlLjx9gV0gXzzMI2KBJtwkk22Qo73c7aSqozvBBYN 4NjbhFpVRXwFuDCPfkuDxrMLwwxdqUKHPkItW6fij2me4WwylhbZwM6NrRhKwWkH e4G6IZrOGZmHOy/B2WJ8g53ue0diHK6O4vPGTZLphv7ojSN+vupK2jK3etiDL9if 7r4J6dbzDiNqJQFg6EJUkC5LGiawL6kmqLyh21tpjNW63ngj8epXWyoRycpAgtPH c9+NlYDbb5oxQap9U1rRlmGJET2zNMTK -----END CERTIFICATE-----Generated at Mon Aug 4 22:28:42 2025 by rpki-client