$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c6268e2-5157-3f34-af90-a5e9a9da11e3.roa File: 6c6268e2-5157-3f34-af90-a5e9a9da11e3.roa (raw, json) Hash identifier: q1q0p4GD33QO2NyWPS8HHliPGE7b0Bb0AxBJOwGVKSM= Subject key identifier: E6:F6:80:9A:0D:DF:A3:CE:B2:8C:B0:D8:55:68:B0:08:1C:A3:8B:91 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963E4DF8FAC0FBD58C9680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c6268e2-5157-3f34-af90-a5e9a9da11e3.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 397203 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:3e:4d:f8:fa:c0:fb:d5:8c:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=af1a1fc3-20f7-4a37-afdc-752cd8997ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:db:68:89:5e:9e:76:d6:9b:90:45:fb:c0:2f: 52:29:20:c5:a3:cc:f0:31:af:28:3f:78:f9:df:79: d5:f5:46:68:80:1e:32:85:66:99:66:c0:43:d0:87: b0:dc:5e:69:ba:a5:b6:7f:45:56:5b:07:e6:ae:11: 28:b7:6c:d2:5a:35:b3:c7:ea:50:bc:0e:10:f7:37: da:85:9c:de:e2:45:b0:21:75:bc:eb:e0:ba:d3:ab: a4:90:6f:72:63:33:01:ef:32:c5:6b:3d:e1:02:6e: 38:48:4d:49:44:1b:5e:0e:cb:db:62:6c:76:a9:ba: fb:4d:fd:b7:40:0f:3c:22:63:6f:4e:f0:ec:e5:b0: 78:8d:db:17:73:b1:98:35:3d:02:e9:38:04:99:5e: 6d:0a:3d:a2:e3:26:e5:e1:90:1e:d0:a7:99:e2:3a: f7:a6:81:a2:ba:d4:f0:c7:a8:a1:46:3b:fe:c9:c7: b7:fe:e8:3f:6e:ec:8b:a7:47:ce:21:55:60:1d:29: 3c:68:92:3f:30:a6:0c:10:3e:7e:50:be:79:b1:9f: c3:20:2e:7e:8f:98:08:6a:31:ab:22:00:88:87:38: 05:b5:9a:57:8c:ca:1e:07:8b:7e:24:b2:b8:2a:06: f0:c4:a4:d9:c1:6f:31:ed:ea:ce:3b:ea:e2:20:55: 61:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F6:80:9A:0D:DF:A3:CE:B2:8C:B0:D8:55:68:B0:08:1C:A3:8B:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c6268e2-5157-3f34-af90-a5e9a9da11e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:72:50:f8:39:32:42:8e:7f:83:32:54:77:07:08:a0:c1:93: 6c:ea:9b:7a:47:ee:e8:16:cd:e6:5d:83:2b:72:94:3b:ff:97: b2:67:d2:9f:29:de:43:36:51:cc:54:58:e5:22:9a:5a:d9:80: c1:d4:cd:53:f9:ec:df:ff:46:3b:4a:94:2b:f2:1b:cb:37:4b: 29:25:07:1d:3c:a0:41:40:7d:74:72:f9:37:bd:4e:c0:20:d0: cc:b7:9b:e7:0f:59:b6:dd:e5:17:ab:f2:d2:0a:02:e7:af:a2: 96:0e:f0:13:e4:1a:55:58:ea:de:ab:cf:49:43:62:d1:53:75: f2:95:1e:f0:f5:2f:6c:26:d3:f8:cf:54:12:3d:1b:14:bc:cf: 41:64:5e:9b:c3:94:ae:64:47:9f:aa:75:83:e7:9e:a7:4e:86: 5b:14:35:fd:d7:b3:20:83:41:36:c6:ee:6f:7c:d5:c6:24:ec: f3:48:d1:13:67:c3:e4:af:62:85:dd:05:d3:3f:ff:a9:fc:bb: 1f:39:13:6f:46:5c:9f:50:88:a1:7b:91:98:82:da:4d:94:ed: 3e:42:78:c5:54:14:81:ca:3c:95:99:95:02:f7:dc:c4:85:b0: 4e:8e:30:b5:60:85:bf:bd:45:2f:f8:f0:ee:3e:f9:d4:84:a7: ff:8e:ac:19 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelj5N+PrA+9WMloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk YWYxYTFmYzMtMjBmNy00YTM3LWFmZGMtNzUyY2Q4OTk3ZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdtoiV6edtabkEX7wC9SKSDFo8zwMa8oP3j5 33nV9UZogB4yhWaZZsBD0Iew3F5puqW2f0VWWwfmrhEot2zSWjWzx+pQvA4Q9zfa hZze4kWwIXW86+C606ukkG9yYzMB7zLFaz3hAm44SE1JRBteDsvbYmx2qbr7Tf23 QA88ImNvTvDs5bB4jdsXc7GYNT0C6TgEmV5tCj2i4ybl4ZAe0KeZ4jr3poGiutTw x6ihRjv+yce3/ug/buyLp0fOIVVgHSk8aJI/MKYMED5+UL55sZ/DIC5+j5gIajGr IgCIhzgFtZpXjMoeB4t+JLK4KgbwxKTZwW8x7erOO+riIFVhiwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOb2gJoN36POsoyw2FVosAgco4uRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmM2MjY4ZTItNTE1Ny0z ZjM0LWFmOTAtYTVlOWE5ZGExMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQATclD4OTJCjn+DMlR3BwigwZNs6pt6R+7oFs3mXYMrcpQ7/5eyZ9Kf Kd5DNlHMVFjlIppa2YDB1M1T+ezf/0Y7SpQr8hvLN0spJQcdPKBBQH10cvk3vU7A INDMt5vnD1m23eUXq/LSCgLnr6KWDvAT5BpVWOreq89JQ2LRU3XylR7w9S9sJtP4 z1QSPRsUvM9BZF6bw5SuZEefqnWD556nToZbFDX917Mgg0E2xu5vfNXGJOzzSNET Z8Pkr2KF3QXTP/+p/LsfORNvRlyfUIihe5GYgtpNlO0+QnjFVBSByjyVmZUC99zE hbBOjjC1YIW/vUUv+PDuPvnUhKf/jqwZ -----END CERTIFICATE-----Generated at Mon Aug 4 15:30:13 2025 by rpki-client