$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8900f8b4-3545-36e7-be3c-e06d169a79b6.roa File: 8900f8b4-3545-36e7-be3c-e06d169a79b6.roa (raw, json) Hash identifier: Do/CGm2VJjvvk51m2HMJlG+uDvx+SDqrwfhE7UIc9Sc= Subject key identifier: 95:42:A3:4A:76:9A:AC:67:17:3C:9C:16:11:1C:3C:45:B1:F6:CE:C2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963DD8509CA5EE9C6CB240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8900f8b4-3545-36e7-be3c-e06d169a79b6.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 36623 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:3d:d8:50:9c:a5:ee:9c:6c:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=8e9bbd0a-d9cc-45e4-a40e-34d3dae87251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5e:15:82:5d:98:92:54:f5:f0:52:36:51:7f: 4d:88:f2:d5:0e:55:81:33:2b:13:65:58:8d:fa:61: fc:e3:e2:c2:9d:c0:de:6a:af:8a:b1:22:53:ca:bc: 65:81:6c:41:41:2c:22:05:29:ef:8a:fe:8b:4f:1f: 67:0a:a2:be:74:b5:0c:fd:c5:f8:55:82:2c:62:2c: a4:f2:4c:6e:08:f0:4d:c5:60:6f:e4:a4:6a:02:72: d6:27:ed:19:52:ba:dc:20:31:71:51:cf:15:ea:43: bc:d0:ca:7b:21:bd:49:da:8d:64:37:53:49:83:d5: 16:d8:64:cd:3f:2d:ba:7f:5b:4d:ba:7a:f8:36:93: d5:b2:55:ae:65:96:8f:08:5d:aa:72:90:b9:45:9e: 27:e9:1f:18:10:86:9d:cb:4d:f2:b6:dd:93:21:6b: 4f:74:0b:9b:10:1e:c9:d8:dd:b5:9b:6a:fc:c8:2c: 42:20:64:64:43:df:84:a4:ce:a7:32:a4:70:e9:c6: 48:21:cf:67:50:f0:98:11:8f:f8:09:48:7e:c9:92: 15:be:58:64:32:6d:98:0f:d1:c9:e9:49:65:4e:0d: ca:28:08:e6:c2:ce:56:f4:85:9c:a2:f1:70:3f:f8: 9c:d9:1f:28:f6:c3:12:9f:4b:0e:12:06:a2:ff:2a: 3a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:42:A3:4A:76:9A:AC:67:17:3C:9C:16:11:1C:3C:45:B1:F6:CE:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8900f8b4-3545-36e7-be3c-e06d169a79b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:37:12:ac:c1:47:1e:50:dd:3e:42:72:7d:cf:c3:39:8c:77: 9c:0f:c4:62:26:60:9f:5d:bb:79:35:b5:f7:35:c4:bc:0b:32: cf:4b:96:df:48:93:38:18:33:2f:0f:1f:73:18:08:9c:12:06: c2:08:fe:11:07:65:d1:f1:27:2d:84:11:ca:9e:b0:61:5b:9c: 28:24:79:7d:65:2b:46:38:f8:96:85:7f:f4:40:ac:9f:58:2e: 0c:70:46:5d:a1:14:a0:50:ca:59:52:63:87:f1:8b:55:81:03: c1:2b:21:f9:44:b2:48:69:60:24:61:69:56:45:6c:c0:2b:68: e5:3a:c0:61:dc:02:8d:f6:f4:b6:b2:54:81:c1:6c:5e:ab:1d: a4:37:79:2a:06:40:af:fc:e0:81:0c:dd:6d:77:0f:01:34:65: 8b:3f:1d:38:a8:6b:b0:6f:05:b1:7b:d9:86:a9:b4:17:32:d0: 0b:78:25:42:43:30:42:6d:a9:7f:3f:8e:66:29:4c:75:d4:46: 11:c6:89:7b:c6:28:f1:9c:ad:54:f2:24:d9:9d:cf:82:98:cd: b2:3f:55:75:5a:7d:24:b4:6e:43:0b:d3:6c:41:0a:85:4e:81: 93:4f:ee:ab:be:e5:68:41:59:e5:98:32:95:70:15:51:2f:fe: 27:5d:50:d1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelj3YUJyl7pxsskAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk OGU5YmJkMGEtZDljYy00NWU0LWE0MGUtMzRkM2RhZTg3MjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF4Vgl2YklT18FI2UX9NiPLVDlWBMysTZViN +mH84+LCncDeaq+KsSJTyrxlgWxBQSwiBSnviv6LTx9nCqK+dLUM/cX4VYIsYiyk 8kxuCPBNxWBv5KRqAnLWJ+0ZUrrcIDFxUc8V6kO80Mp7Ib1J2o1kN1NJg9UW2GTN Py26f1tNunr4NpPVslWuZZaPCF2qcpC5RZ4n6R8YEIady03ytt2TIWtPdAubEB7J 2N21m2r8yCxCIGRkQ9+EpM6nMqRw6cZIIc9nUPCYEY/4CUh+yZIVvlhkMm2YD9HJ 6UllTg3KKAjmws5W9IWcovFwP/ic2R8o9sMSn0sOEgai/yo6gQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJVCo0p2mqxnFzycFhEcPEWx9s7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODkwMGY4YjQtMzU0NS0z NmU3LWJlM2MtZTA2ZDE2OWE3OWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQABNxKswUceUN0+QnJ9z8M5jHecD8RiJmCfXbt5NbX3NcS8CzLPS5bf SJM4GDMvDx9zGAicEgbCCP4RB2XR8ScthBHKnrBhW5woJHl9ZStGOPiWhX/0QKyf WC4McEZdoRSgUMpZUmOH8YtVgQPBKyH5RLJIaWAkYWlWRWzAK2jlOsBh3AKN9vS2 slSBwWxeqx2kN3kqBkCv/OCBDN1tdw8BNGWLPx04qGuwbwWxe9mGqbQXMtALeCVC QzBCbal/P45mKUx11EYRxol7xijxnK1U8iTZnc+CmM2yP1V1Wn0ktG5DC9NsQQqF ToGTT+6rvuVoQVnlmDKVcBVRL/4nXVDR -----END CERTIFICATE-----Generated at Mon Aug 4 16:04:09 2025 by rpki-client