$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68c468d2-bbdd-3e54-8fe0-cd566f21a8f4.roa File: 68c468d2-bbdd-3e54-8fe0-cd566f21a8f4.roa (raw, json) Hash identifier: mK6BGQppjn+iAnbhIfHsMz7E4jzdeZf9ks1y2t01lAo= Subject key identifier: E1:73:D0:91:08:29:37:E1:8E:0A:A2:87:A2:40:97:79:82:F6:69:F3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963E91308E25CAE64A5000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68c468d2-bbdd-3e54-8fe0-cd566f21a8f4.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 22547 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:3e:91:30:8e:25:ca:e6:4a:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=9ea33a9c-ee5f-4f9a-aa77-e5c0134b336c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a7:62:e7:44:6a:d1:4e:f0:a6:e8:9b:59:3f: 80:73:0c:b7:24:66:6b:a8:7c:39:6a:3b:62:19:9d: 67:90:4e:c4:1b:55:63:12:d7:f0:ac:cd:cb:f1:dc: 37:cf:eb:5e:25:8c:8b:9d:ab:81:32:2e:b3:c3:56: 03:d3:fa:7f:7e:0e:d3:56:c4:e3:26:62:40:fb:8d: 3c:e3:70:c4:3c:05:4c:36:56:4f:ba:dd:99:dc:fb: 51:d8:0c:f4:4b:4d:7e:82:03:4d:3d:20:23:93:97: 8d:b1:c1:dc:be:5e:a4:f6:64:91:fa:1f:f8:78:93: 50:8e:4e:6f:79:73:60:44:f5:7c:60:fe:ca:99:33: 31:f9:c3:f0:db:c2:1c:f4:f8:7d:76:00:45:a2:98: 73:6b:dc:32:42:a1:dd:1b:95:0b:f7:45:49:2f:0d: bf:ac:d7:76:8a:6b:7f:29:ab:75:73:f3:3e:39:c7: 04:df:79:1f:af:c8:95:81:f7:a3:44:e6:10:d8:8f: ed:86:ea:53:c6:ba:d9:58:a5:ef:65:59:48:fa:44: 87:2e:83:da:b2:a4:96:db:cd:a1:87:bb:d2:0a:a6: 6f:64:fd:7c:50:76:c3:ec:2a:5d:4f:66:ce:22:1b: 63:44:dc:6b:be:d5:9c:7f:ce:f1:06:48:4c:9c:23: 54:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:73:D0:91:08:29:37:E1:8E:0A:A2:87:A2:40:97:79:82:F6:69:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68c468d2-bbdd-3e54-8fe0-cd566f21a8f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:e7:8f:35:71:9e:a7:ef:d5:3c:78:c7:33:07:ca:18:b5:81: d5:25:79:6e:81:19:35:7b:be:f3:08:5e:bb:b5:27:f7:06:f1: a7:90:7c:00:73:e8:99:28:93:03:eb:a2:c5:13:bf:60:57:0e: f1:8a:56:e9:f7:f7:e2:ab:0a:31:a1:cb:6a:39:34:ae:a3:78: 9c:f7:99:7b:86:4c:40:cd:12:dd:79:fa:9e:f6:f3:20:f8:5c: c0:31:18:b3:39:71:ca:90:27:ee:0e:39:8d:55:03:8e:2d:e4: 16:7e:99:e6:27:82:66:6d:4b:c4:04:e3:fa:6c:b1:21:b3:92: ee:47:9e:08:77:3d:b3:0f:2e:11:d0:68:e9:66:38:35:a7:a1: ec:b5:fe:9d:75:61:dc:31:0f:98:b3:9b:40:c1:23:29:ec:85: 85:e8:8f:6a:aa:46:4c:3c:0b:cf:28:8d:9c:97:f1:08:9f:69: d8:37:d3:3d:04:7a:d8:f3:53:7a:36:2e:d9:a2:c1:84:a7:54: 56:1f:62:34:a2:2d:3b:7b:1b:10:f2:e8:78:ec:f7:d0:0c:84: 58:8b:77:13:97:0b:58:71:e0:82:b2:95:b0:a9:c1:01:1b:31: 24:12:79:e1:62:15:77:cc:a7:f0:74:fc:ce:84:01:87:fa:36: 03:ab:0a:ac -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelj6RMI4lyuZKUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk OWVhMzNhOWMtZWU1Zi00ZjlhLWFhNzctZTVjMDEzNGIzMzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6di50Rq0U7wpuibWT+Acwy3JGZrqHw5ajti GZ1nkE7EG1VjEtfwrM3L8dw3z+teJYyLnauBMi6zw1YD0/p/fg7TVsTjJmJA+408 43DEPAVMNlZPut2Z3PtR2Az0S01+ggNNPSAjk5eNscHcvl6k9mSR+h/4eJNQjk5v eXNgRPV8YP7KmTMx+cPw28Ic9Ph9dgBFophza9wyQqHdG5UL90VJLw2/rNd2imt/ Kat1c/M+OccE33kfr8iVgfejROYQ2I/thupTxrrZWKXvZVlI+kSHLoPasqSW282h h7vSCqZvZP18UHbD7CpdT2bOIhtjRNxrvtWcf87xBkhMnCNUVQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOFz0JEIKTfhjgqih6JAl3mC9mnzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjhjNDY4ZDItYmJkZC0z ZTU0LThmZTAtY2Q1NjZmMjFhOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAY5481cZ6n79U8eMczB8oYtYHVJXlugRk1e77zCF67tSf3BvGnkHwA c+iZKJMD66LFE79gVw7xilbp9/fiqwoxoctqOTSuo3ic95l7hkxAzRLdefqe9vMg +FzAMRizOXHKkCfuDjmNVQOOLeQWfpnmJ4JmbUvEBOP6bLEhs5LuR54Idz2zDy4R 0GjpZjg1p6Hstf6ddWHcMQ+Ys5tAwSMp7IWF6I9qqkZMPAvPKI2cl/EIn2nYN9M9 BHrY81N6Ni7ZosGEp1RWH2I0oi07exsQ8uh47PfQDIRYi3cTlwtYceCCspWwqcEB GzEkEnnhYhV3zKfwdPzOhAGH+jYDqwqs -----END CERTIFICATE-----Generated at Mon Aug 4 15:02:06 2025 by rpki-client