$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/574a93c6-a18f-3df5-a131-c283150c7482.roa File: 574a93c6-a18f-3df5-a131-c283150c7482.roa (raw, json) Hash identifier: 2vYhQiap+ujYcjEaRjQ1PNhpQAdXEUbC3c4JpUh9lxc= Subject key identifier: 40:C3:A9:E3:1E:2F:72:A5:DD:13:57:1D:43:89:DE:0B:A1:EB:F4:B4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963D22B837D86CB7E45FC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/574a93c6-a18f-3df5-a131-c283150c7482.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396594 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:3d:22:b8:37:d8:6c:b7:e4:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=5400f350-6eb2-4fc0-a50e-c6829b1b7ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cd:24:61:66:78:a4:71:54:77:7b:eb:1b:af: 78:6f:be:b8:ef:66:ac:db:b3:ec:fb:cb:37:4e:45: 76:11:47:bb:13:7a:d9:65:f5:5c:6c:e9:05:65:3d: 19:9f:51:95:87:38:50:ee:29:16:5e:62:6d:29:1f: dc:9f:3e:84:49:4d:65:05:e6:a3:ec:a2:4f:5a:40: 86:a5:44:39:a5:1f:7a:93:94:32:07:f3:b1:01:11: 81:41:57:13:b1:c9:5a:e7:d4:66:2a:b3:10:71:19: bb:b5:bf:40:d3:c9:96:dd:2c:64:c3:ed:78:bd:5a: 0a:33:48:9d:05:d6:0d:1b:25:86:31:f3:09:89:34: 49:72:7b:a8:b1:8d:bf:0d:7e:0c:52:0a:5b:68:c6: 77:aa:4e:03:9c:30:27:d5:f4:21:6f:be:ae:ec:d9: 0e:b0:06:3e:13:06:fb:e2:14:ee:98:19:61:8a:d6: 46:fb:91:ce:71:5a:dc:9e:5b:58:bc:d8:88:08:a9: 6c:bc:d6:01:da:7f:d9:5d:d5:e8:54:19:a1:8b:03: 66:55:ff:18:50:07:f7:38:08:c2:4e:cd:a3:7a:2c: 73:e8:15:a7:75:c2:ee:58:9a:10:7f:4c:b5:0f:d5: 13:93:82:f8:7b:8d:47:8b:37:b0:55:2a:ff:b4:65: 69:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C3:A9:E3:1E:2F:72:A5:DD:13:57:1D:43:89:DE:0B:A1:EB:F4:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/574a93c6-a18f-3df5-a131-c283150c7482.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:5f:6e:4d:de:b7:5b:61:70:bd:eb:d8:a7:7a:63:1c:26:b2: 13:30:93:f9:a0:d5:50:ce:54:fc:db:2a:9b:7c:51:b8:34:36: 52:28:a1:3a:9d:04:82:d8:32:3d:29:50:79:67:4f:51:f1:a8: f9:01:c7:e2:d8:91:fc:81:10:c6:3a:d2:65:8d:f9:22:8a:62: 15:a1:1d:68:15:ec:6a:83:18:d2:da:22:a3:5b:b1:ed:c5:d7: 8b:09:5d:f3:5a:19:4e:28:cb:9e:35:27:a8:23:6c:37:97:9f: f2:9f:a3:c2:74:57:af:45:ae:52:a1:b2:ae:70:a7:9f:6a:46: 90:e8:62:b4:0d:86:d2:6e:66:98:72:ee:5a:ea:50:ee:b3:78: 99:7a:bc:55:81:25:00:e1:be:ea:c0:4c:64:fa:70:09:78:df: f7:bd:a9:cc:2f:35:80:86:e7:6f:67:05:cf:ad:01:66:d3:95: a9:20:56:76:37:16:59:92:35:f8:c6:51:55:7b:62:41:df:8c: 8f:a0:91:87:e9:5f:c8:7c:7e:14:ac:17:cf:1c:c3:f4:db:0f: 41:18:a6:89:40:dc:65:dd:0c:10:1e:56:19:52:26:fd:93:b1: d9:cc:9d:25:11:e9:ec:05:bd:ae:60:1f:67:eb:f9:8c:6a:e2: a8:f4:ff:26 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelj0iuDfYbLfkX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NTQwMGYzNTAtNmViMi00ZmMwLWE1MGUtYzY4MjliMWI3ZWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn80kYWZ4pHFUd3vrG694b76472as27Ps+8s3 TkV2EUe7E3rZZfVcbOkFZT0Zn1GVhzhQ7ikWXmJtKR/cnz6ESU1lBeaj7KJPWkCG pUQ5pR96k5QyB/OxARGBQVcTscla59RmKrMQcRm7tb9A08mW3Sxkw+14vVoKM0id BdYNGyWGMfMJiTRJcnuosY2/DX4MUgpbaMZ3qk4DnDAn1fQhb76u7NkOsAY+Ewb7 4hTumBlhitZG+5HOcVrcnltYvNiICKlsvNYB2n/ZXdXoVBmhiwNmVf8YUAf3OAjC Ts2jeixz6BWndcLuWJoQf0y1D9UTk4L4e41HizewVSr/tGVpZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEDDqeMeL3Kl3RNXHUOJ3guh6/S0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTc0YTkzYzYtYTE4Zi0z ZGY1LWExMzEtYzI4MzE1MGM3NDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQALX25N3rdbYXC969inemMcJrITMJP5oNVQzlT82yqbfFG4NDZSKKE6 nQSC2DI9KVB5Z09R8aj5Acfi2JH8gRDGOtJljfkiimIVoR1oFexqgxjS2iKjW7Ht xdeLCV3zWhlOKMueNSeoI2w3l5/yn6PCdFevRa5SobKucKefakaQ6GK0DYbSbmaY cu5a6lDus3iZerxVgSUA4b7qwExk+nAJeN/3vanMLzWAhudvZwXPrQFm05WpIFZ2 NxZZkjX4xlFVe2JB34yPoJGH6V/IfH4UrBfPHMP02w9BGKaJQNxl3QwQHlYZUib9 k7HZzJ0lEensBb2uYB9n6/mMauKo9P8m -----END CERTIFICATE-----Generated at Mon Aug 4 14:48:07 2025 by rpki-client