$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/586be0ff-556c-37d7-86fe-1cbb64864745.roa File: 586be0ff-556c-37d7-86fe-1cbb64864745.roa (raw, json) Hash identifier: W9KHVazgOtfvxKkolFKVRy8djjXOZHn0oFPam52Uh6w= Subject key identifier: 62:E7:C4:6E:E3:6B:68:07:5B:F0:0A:25:A2:60:03:85:57:17:E8:7C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E9641B747A96EEF9F21C440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/586be0ff-556c-37d7-86fe-1cbb64864745.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396566 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:41:b7:47:a9:6e:ef:9f:21:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=375b900e-5d73-4f45-bd44-04fa29ae6abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:54:64:f8:08:7e:e2:94:f1:d0:8c:e5:76:43: 44:f6:a0:80:ac:17:34:eb:a0:1f:3e:b6:f4:84:85: 1b:bb:a0:ac:f7:6a:b2:e6:c8:ea:b5:68:50:05:21: 81:e9:38:88:2a:89:7b:29:c0:e1:6a:e1:35:e4:73: 62:14:be:35:e3:2a:1d:1f:1f:da:e2:b8:32:e4:52: 77:16:b5:5f:37:37:34:e8:05:9c:1b:80:c5:ac:9a: 81:90:36:bf:68:41:90:86:dd:f4:8e:b4:6c:fa:ac: 2d:c6:f2:71:23:ab:5f:1f:b7:07:60:9b:d2:0c:7b: b1:e6:cf:af:d8:95:a1:ab:d2:38:28:fd:bd:da:da: 2d:65:ae:f7:4b:16:ad:c1:d1:b4:46:00:57:5f:4d: 50:4a:49:5d:6e:ea:be:07:40:19:8b:9c:50:1c:ac: 5c:db:96:ae:8f:56:59:da:f3:ff:14:98:09:80:53: 57:92:30:7d:4d:16:6a:ce:df:96:27:43:3b:4e:36: be:b6:b4:a5:85:b7:93:48:cc:8f:e4:b0:b6:82:08: 21:24:4e:58:79:1b:40:77:96:70:74:c1:f8:00:66: 53:73:ad:3e:e3:ea:56:27:75:80:73:ed:b6:b1:ff: 7f:2e:d0:ac:a5:aa:43:ac:0e:29:c7:c2:93:ee:d5: 4c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E7:C4:6E:E3:6B:68:07:5B:F0:0A:25:A2:60:03:85:57:17:E8:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/586be0ff-556c-37d7-86fe-1cbb64864745.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:94:91:c6:73:98:2a:33:3d:46:71:3b:f8:3c:ba:ba:e0:b6: ab:ee:a2:76:ad:ce:a9:9e:af:bf:1f:19:c2:af:54:a0:05:62: e2:35:12:a9:03:bb:51:03:41:1f:02:9f:3f:b7:0e:11:55:a7: 38:d0:89:61:8c:c2:5b:8f:6d:d7:40:03:0b:8a:8a:ea:1b:9e: 98:12:5f:c1:1c:6a:e5:5a:4a:c7:0b:90:a1:0c:89:5a:ab:a8: c1:86:f6:d7:33:67:5c:82:24:f8:d2:16:67:48:f0:3c:0f:82: c3:95:d6:f6:c5:f8:a0:c0:5f:64:83:fe:5c:73:e4:73:34:45: e9:75:3c:1b:c4:6c:99:c1:c0:15:31:26:75:7a:47:3e:10:8c: d5:84:f2:b7:68:1e:f4:7b:a9:cb:11:f6:9a:b0:31:28:67:10: 70:df:53:a0:93:4a:6e:ac:ee:50:89:dd:ae:69:14:6a:b0:a0: b4:49:c4:0f:1c:6c:6a:b6:b4:7a:64:a8:be:75:10:71:67:9e: 2b:bc:4e:2e:05:0d:25:f6:c8:11:e1:37:a3:5a:b6:99:24:32: 33:d5:c1:70:86:1b:7c:fb:9c:89:0e:63:ac:56:75:f4:bb:09: 76:35:11:ed:26:7a:7a:8d:d5:50:59:a1:2c:6c:4d:ed:61:86: b4:9d:4c:a6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelkG3R6lu758hxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk Mzc1YjkwMGUtNWQ3My00ZjQ1LWJkNDQtMDRmYTI5YWU2YWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVRk+Ah+4pTx0IzldkNE9qCArBc066AfPrb0 hIUbu6Cs92qy5sjqtWhQBSGB6TiIKol7KcDhauE15HNiFL414yodHx/a4rgy5FJ3 FrVfNzc06AWcG4DFrJqBkDa/aEGQht30jrRs+qwtxvJxI6tfH7cHYJvSDHux5s+v 2JWhq9I4KP292totZa73SxatwdG0RgBXX01QSkldbuq+B0AZi5xQHKxc25auj1ZZ 2vP/FJgJgFNXkjB9TRZqzt+WJ0M7Tja+trSlhbeTSMyP5LC2ggghJE5YeRtAd5Zw dMH4AGZTc60+4+pWJ3WAc+22sf9/LtCspapDrA4px8KT7tVMtQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGLnxG7ja2gHW/AKJaJgA4VXF+h8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTg2YmUwZmYtNTU2Yy0z N2Q3LTg2ZmUtMWNiYjY0ODY0NzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBVlJHGc5gqMz1GcTv4PLq64Lar7qJ2rc6pnq+/HxnCr1SgBWLiNRKp A7tRA0EfAp8/tw4RVac40IlhjMJbj23XQAMLiorqG56YEl/BHGrlWkrHC5ChDIla q6jBhvbXM2dcgiT40hZnSPA8D4LDldb2xfigwF9kg/5cc+RzNEXpdTwbxGyZwcAV MSZ1ekc+EIzVhPK3aB70e6nLEfaasDEoZxBw31Ogk0purO5Qid2uaRRqsKC0ScQP HGxqtrR6ZKi+dRBxZ54rvE4uBQ0l9sgR4TejWraZJDIz1cFwhht8+5yJDmOsVnX0 uwl2NRHtJnp6jdVQWaEsbE3tYYa0nUym -----END CERTIFICATE-----Generated at Wed Aug 6 00:35:10 2025 by rpki-client