$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9505a683-925a-30d4-8ee0-ebb8050e9a35.roa File: 9505a683-925a-30d4-8ee0-ebb8050e9a35.roa (raw, json) Hash identifier: vsoglCqZnWXbCkoXi45UoDUdgRJQoXgQYKc8nXECZ7o= Subject key identifier: 81:7A:C3:90:D8:36:79:78:4D:5D:1A:77:5D:38:06:B9:76:57:98:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E96452579D97A8C70A8DA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9505a683-925a-30d4-8ee0-ebb8050e9a35.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 36618 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:45:25:79:d9:7a:8c:70:a8:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=dc981829-ec1d-45fb-aaf7-36f07ed9c8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:df:aa:95:22:c4:d9:de:cc:9a:ed:0c:cb:64: b5:4d:ae:e3:a5:15:3a:54:ba:78:56:16:79:0c:db: 74:29:d6:39:bd:e6:42:fa:a7:e1:0a:f8:c1:51:3f: a0:79:c7:f8:29:8c:59:06:23:ce:2f:26:b1:e4:a1: 97:a9:b7:72:23:fd:0d:45:37:e7:9a:0c:f7:32:93: bd:46:98:42:6b:a1:d1:c6:5b:a2:6c:6f:8c:5a:86: 5f:50:bd:76:41:03:10:db:cb:e4:e4:66:cc:4e:8f: 47:fc:5d:13:af:30:f1:78:f7:b7:27:46:f8:d7:a2: 1e:f1:a4:c9:7f:dc:88:56:f8:20:e3:46:1a:ea:fd: e5:62:0e:0c:8b:ec:ea:87:5e:62:d4:8f:c7:4f:4f: 01:9b:a8:31:69:0a:ac:00:a3:14:35:d0:34:56:86: 72:1e:55:da:4e:94:d5:6e:12:8b:7e:1e:12:18:bf: f3:35:1f:58:3a:16:b1:c0:88:94:dc:90:c2:98:2a: 06:8f:ed:c9:95:a2:1d:4f:17:43:56:ab:8d:90:14: f3:91:48:7b:2e:53:04:2a:c9:b1:bd:f1:21:7a:27: 96:83:43:17:65:0a:ad:b4:91:4d:a0:99:33:94:92: be:c9:45:46:83:c1:18:e8:c8:6b:02:cc:bb:b7:b8: db:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7A:C3:90:D8:36:79:78:4D:5D:1A:77:5D:38:06:B9:76:57:98:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9505a683-925a-30d4-8ee0-ebb8050e9a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:3d:45:0a:5f:4d:76:46:17:83:bd:cc:48:27:1c:84:3a:0e: 84:8b:26:09:2e:df:4f:a2:88:90:a2:c0:14:67:74:cc:2c:51: 29:04:05:8f:0e:c5:f7:0d:c5:62:c2:57:cc:34:ba:cc:61:9b: 87:29:b9:ec:d1:eb:f3:93:7a:05:9d:fc:3a:4c:70:2b:a6:d7: ea:7d:a2:c5:a5:b8:eb:a6:6a:b2:d3:8c:bc:a4:86:1d:bf:68: d8:4a:47:36:df:5f:be:84:4e:3d:1f:4f:cd:0f:cb:de:16:1a: 61:32:f2:be:f8:8e:65:41:d5:0d:08:23:9e:e2:12:e4:5e:c2: 9e:8b:95:a3:4e:69:34:95:d7:d0:ce:ba:75:f5:ce:3f:53:b3: 3e:45:8a:f2:b4:de:0d:19:18:bf:3e:5c:20:cf:11:bb:ac:c9: 6c:7e:c9:70:d1:f6:cd:61:e2:a1:71:83:8c:64:da:21:23:27: bb:6a:4d:1a:55:29:61:2d:b0:52:50:bb:f5:55:88:d8:3e:07: 16:24:99:1a:e2:76:c8:8c:04:4b:a4:3f:d5:1f:d1:be:ac:01: 9e:bb:5d:ce:62:18:7b:bd:63:06:a0:cd:7c:4c:26:fc:b0:b7: 5e:0c:92:8a:bb:18:41:d3:2a:27:b5:25:8c:de:d4:12:2d:d3: 4a:be:2f:37 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelkUledl6jHCo2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ZGM5ODE4MjktZWMxZC00NWZiLWFhZjctMzZmMDdlZDljOGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN+qlSLE2d7Mmu0My2S1Ta7jpRU6VLp4VhZ5 DNt0KdY5veZC+qfhCvjBUT+gecf4KYxZBiPOLyax5KGXqbdyI/0NRTfnmgz3MpO9 RphCa6HRxluibG+MWoZfUL12QQMQ28vk5GbMTo9H/F0TrzDxePe3J0b416Ie8aTJ f9yIVvgg40Ya6v3lYg4Mi+zqh15i1I/HT08Bm6gxaQqsAKMUNdA0VoZyHlXaTpTV bhKLfh4SGL/zNR9YOhaxwIiU3JDCmCoGj+3JlaIdTxdDVquNkBTzkUh7LlMEKsmx vfEheieWg0MXZQqttJFNoJkzlJK+yUVGg8EY6MhrAsy7t7jbjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIF6w5DYNnl4TV0ad104Brl2V5g7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTUwNWE2ODMtOTI1YS0z MGQ0LThlZTAtZWJiODA1MGU5YTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAKPUUKX012RheDvcxIJxyEOg6EiyYJLt9PooiQosAUZ3TMLFEpBAWP DsX3DcViwlfMNLrMYZuHKbns0evzk3oFnfw6THArptfqfaLFpbjrpmqy04y8pIYd v2jYSkc231++hE49H0/ND8veFhphMvK++I5lQdUNCCOe4hLkXsKei5WjTmk0ldfQ zrp19c4/U7M+RYrytN4NGRi/PlwgzxG7rMlsfslw0fbNYeKhcYOMZNohIye7ak0a VSlhLbBSULv1VYjYPgcWJJka4nbIjARLpD/VH9G+rAGeu13OYhh7vWMGoM18TCb8 sLdeDJKKuxhB0yontSWM3tQSLdNKvi83 -----END CERTIFICATE-----Generated at Thu Aug 7 03:53:06 2025 by rpki-client