$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a4cf354-4dcb-3b5b-b906-086b5e6b1b11.roa File: 6a4cf354-4dcb-3b5b-b906-086b5e6b1b11.roa (raw, json) Hash identifier: yIt8yuzNG6zVy6LlqGWojGFWhhhy1F029L0rvacWpp0= Subject key identifier: 25:98:E1:54:76:02:31:24:A1:9A:3C:87:80:59:2F:0D:86:9A:54:85 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E964172FFEE00909E187E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a4cf354-4dcb-3b5b-b906-086b5e6b1b11.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396591 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:41:72:ff:ee:00:90:9e:18:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=63c6531d-8b8e-4e59-a8ed-a231682b3b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:04:c5:b8:87:f3:44:4a:06:b1:80:77:0f:57: e7:1a:b0:b0:5c:b8:91:84:31:a7:01:44:eb:ea:0b: e1:74:61:1f:f2:e8:0d:60:31:4e:2b:66:5b:72:6a: f9:9a:91:32:a0:d5:00:f5:ef:d5:5c:36:36:f4:e1: e3:e0:eb:9f:af:14:db:8e:f9:1e:4d:37:cb:07:26: c0:bf:0b:ce:be:e8:c8:a5:04:73:d7:68:77:bb:89: f3:91:00:3b:4d:e6:59:33:ca:c9:45:0e:43:a4:fa: 43:d4:a9:87:d0:44:2d:12:c6:fb:ed:a1:d7:d2:3d: 1b:b4:3f:5a:26:11:6b:56:e0:df:12:47:e5:7e:5e: ea:1a:d6:f4:c7:46:54:09:ae:11:6d:80:68:83:c7: ae:aa:d7:c3:4f:c2:2f:97:fb:00:f7:0f:45:77:86: fe:d8:40:af:35:cb:d8:3d:2a:2d:45:5a:85:35:c1: 0d:2d:da:19:9c:22:3f:69:62:9d:ca:6f:43:9d:55: 8d:c7:cc:ce:a0:20:69:f3:50:a1:a5:5f:2e:a0:59: a1:00:01:9e:f3:6c:ed:38:aa:40:78:65:68:23:24: 88:4d:ef:33:ea:72:d9:a8:c7:95:a2:c3:5c:98:09: cb:4b:98:2d:62:74:4a:57:c1:c6:df:30:71:46:fb: 23:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:98:E1:54:76:02:31:24:A1:9A:3C:87:80:59:2F:0D:86:9A:54:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a4cf354-4dcb-3b5b-b906-086b5e6b1b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c7:b0:56:95:c6:68:33:8b:38:5a:3a:b1:26:1e:2f:ee:5a: 7e:a8:61:48:a6:9c:ec:05:ac:81:e3:00:7b:62:27:ff:2d:3d: e1:72:cf:06:18:18:7f:b5:7e:33:e3:75:53:72:a1:a9:d7:a1: 4b:70:6d:43:85:c1:4d:de:29:26:59:17:95:29:47:1c:ee:13: c9:91:b1:3b:4b:4d:4f:2e:08:07:9e:24:72:f6:9a:16:e9:a5: 7e:07:c4:ab:61:23:47:02:0a:78:2d:3b:5c:04:33:0e:3f:88: d3:53:37:8f:be:ec:a9:0b:93:0c:95:b5:e3:24:e4:71:e0:a3: d5:4e:b4:d2:b0:e2:2f:70:59:cb:81:92:d7:98:06:19:df:e1: 52:18:02:d5:20:ea:ad:50:12:9f:7a:9b:82:57:c3:35:c0:c8: d7:92:f8:5b:68:9c:8a:57:a9:eb:76:9f:58:22:a2:dd:fb:a5: 5f:77:94:a4:f9:b6:f0:1c:ef:82:46:99:d1:54:f3:f1:b3:12: 56:2e:1d:95:52:be:60:80:cb:16:65:bf:49:72:45:2f:b0:f9: e3:93:9f:9e:9f:91:5a:b0:de:cd:cf:f5:d8:c2:41:7c:6d:5d: fa:77:ff:bb:3d:0c:af:33:2f:c5:6b:f7:e1:64:a0:a3:87:fa: 3f:6c:c7:ec -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelkFy/+4AkJ4YfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NjNjNjUzMWQtOGI4ZS00ZTU5LWE4ZWQtYTIzMTY4MmIzYjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwTFuIfzREoGsYB3D1fnGrCwXLiRhDGnAUTr 6gvhdGEf8ugNYDFOK2Zbcmr5mpEyoNUA9e/VXDY29OHj4OufrxTbjvkeTTfLBybA vwvOvujIpQRz12h3u4nzkQA7TeZZM8rJRQ5DpPpD1KmH0EQtEsb77aHX0j0btD9a JhFrVuDfEkflfl7qGtb0x0ZUCa4RbYBog8euqtfDT8Ivl/sA9w9Fd4b+2ECvNcvY PSotRVqFNcENLdoZnCI/aWKdym9DnVWNx8zOoCBp81ChpV8uoFmhAAGe82ztOKpA eGVoIySITe8z6nLZqMeVosNcmAnLS5gtYnRKV8HG3zBxRvsj8QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCWY4VR2AjEkoZo8h4BZLw2GmlSFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmE0Y2YzNTQtNGRjYi0z YjViLWI5MDYtMDg2YjVlNmIxYjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBGx7BWlcZoM4s4WjqxJh4v7lp+qGFIppzsBayB4wB7Yif/LT3hcs8G GBh/tX4z43VTcqGp16FLcG1DhcFN3ikmWReVKUcc7hPJkbE7S01PLggHniRy9poW 6aV+B8SrYSNHAgp4LTtcBDMOP4jTUzePvuypC5MMlbXjJORx4KPVTrTSsOIvcFnL gZLXmAYZ3+FSGALVIOqtUBKfepuCV8M1wMjXkvhbaJyKV6nrdp9YIqLd+6Vfd5Sk +bbwHO+CRpnRVPPxsxJWLh2VUr5ggMsWZb9JckUvsPnjk5+en5FasN7Nz/XYwkF8 bV36d/+7PQyvMy/Fa/fhZKCjh/o/bMfs -----END CERTIFICATE-----Generated at Tue Aug 5 20:17:34 2025 by rpki-client