$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/971b4293-7ab2-31ed-9725-061fbdf30cb7.roa File: 971b4293-7ab2-31ed-9725-061fbdf30cb7.roa (raw, json) Hash identifier: xASMfvBedz6XM8WGKjjEl/lYB0AozRtMMfHdLmmEX/8= Subject key identifier: 3B:49:21:2F:B1:1B:9F:4A:65:B0:C2:4C:58:01:C9:B8:12:5D:17:4D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963E67F736CBCFE4C06C60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/971b4293-7ab2-31ed-9725-061fbdf30cb7.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396597 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:3e:67:f7:36:cb:cf:e4:c0:6c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=5abe4c60-9671-4aa6-bd0d-be4989a6460d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:92:3f:35:ec:5d:11:38:03:b9:78:cc:44:e4: 4f:99:d0:f8:b8:26:e3:4d:ab:1b:23:64:03:08:be: 5c:38:b7:b3:8e:c2:8b:1b:34:44:97:4f:2d:84:89: c6:18:27:52:aa:77:36:c0:f6:80:6f:c8:27:bb:11: f9:8f:32:be:d4:9e:e3:e0:ea:f6:d8:3f:d8:58:c0: 54:f0:2a:d2:81:e4:b1:e0:a9:9c:1c:4e:9c:94:43: 38:e5:70:b2:c3:e5:17:96:d0:0d:f3:74:0c:6c:07: cc:25:33:9e:d2:c5:cc:4c:fd:6c:4a:f3:5b:f7:cb: 77:04:4f:bf:a9:e4:91:79:43:47:f5:0a:2a:e5:40: 98:8e:8e:02:95:cf:a1:8b:10:68:78:73:96:61:e6: d0:c0:c6:e5:51:81:47:61:ea:75:30:0e:6b:37:dd: a9:bf:46:e6:10:2c:40:3a:35:61:5d:5e:85:f5:65: d3:7a:b2:7e:1a:9d:cb:f9:39:76:4b:c5:30:7c:5b: ef:20:17:72:d9:f3:40:7a:39:5f:47:52:85:b4:57: 23:f9:9f:f8:22:fd:69:c7:07:72:84:5c:10:4f:35: b4:b8:dd:ff:36:58:2e:c7:dc:20:be:36:6f:0a:c5: 2d:e0:23:35:90:1f:94:44:39:05:50:95:ac:e9:0a: 45:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:49:21:2F:B1:1B:9F:4A:65:B0:C2:4C:58:01:C9:B8:12:5D:17:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/971b4293-7ab2-31ed-9725-061fbdf30cb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ae:66:7a:0b:de:68:9f:2c:44:cf:84:05:f1:4c:b5:ae:9d: be:3f:61:5d:d6:9a:da:52:57:c2:97:b4:b0:ef:9c:71:03:2e: c1:36:7c:bc:7f:21:bf:60:89:b8:4f:aa:8c:b4:d9:13:96:9a: 58:ef:b7:f6:6e:15:71:ab:8e:27:3c:df:46:df:0d:e2:1e:88: af:27:da:f1:3c:1f:91:3d:f3:de:94:b8:e6:13:98:d6:ed:0e: 21:77:37:cc:fc:b3:88:6f:ad:71:27:03:74:93:b3:7f:72:7e: 3c:67:3d:17:87:ff:07:1b:53:28:90:35:1e:89:78:4f:f7:a4: 6f:2b:23:0f:15:eb:9b:59:57:2e:95:69:22:17:3e:a7:3e:61: fd:d9:eb:12:31:ab:1e:82:9b:3c:98:7f:1e:1c:19:0f:ac:4c: 96:a7:30:eb:4f:a1:4b:24:e8:c6:7f:81:1b:66:8b:60:4b:ed: f0:17:ef:3c:41:28:9e:ed:3a:b4:ec:01:f5:77:fd:2b:7c:f2: 8c:c7:bd:a5:27:86:da:8f:21:9c:f3:fb:8f:d8:7c:98:e9:61: 38:c1:f2:c8:90:1b:7f:4a:26:04:32:55:30:68:8d:48:d0:16: 99:45:b8:92:3b:c7:92:aa:f1:b2:a2:95:f3:bf:99:e9:dd:b3: a3:0f:ae:19 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelj5n9zbLz+TAbGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NWFiZTRjNjAtOTY3MS00YWE2LWJkMGQtYmU0OTg5YTY0NjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpI/NexdETgDuXjMRORPmdD4uCbjTasbI2QD CL5cOLezjsKLGzREl08thInGGCdSqnc2wPaAb8gnuxH5jzK+1J7j4Or22D/YWMBU 8CrSgeSx4KmcHE6clEM45XCyw+UXltAN83QMbAfMJTOe0sXMTP1sSvNb98t3BE+/ qeSReUNH9Qoq5UCYjo4Clc+hixBoeHOWYebQwMblUYFHYep1MA5rN92pv0bmECxA OjVhXV6F9WXTerJ+Gp3L+Tl2S8UwfFvvIBdy2fNAejlfR1KFtFcj+Z/4Iv1pxwdy hFwQTzW0uN3/Nlgux9wgvjZvCsUt4CM1kB+URDkFUJWs6QpFbQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDtJIS+xG59KZbDCTFgBybgSXRdNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTcxYjQyOTMtN2FiMi0z MWVkLTk3MjUtMDYxZmJkZjMwY2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBormZ6C95onyxEz4QF8Uy1rp2+P2Fd1praUlfCl7Sw75xxAy7BNny8 fyG/YIm4T6qMtNkTlppY77f2bhVxq44nPN9G3w3iHoivJ9rxPB+RPfPelLjmE5jW 7Q4hdzfM/LOIb61xJwN0k7N/cn48Zz0Xh/8HG1MokDUeiXhP96RvKyMPFeubWVcu lWkiFz6nPmH92esSMasegps8mH8eHBkPrEyWpzDrT6FLJOjGf4EbZotgS+3wF+88 QSie7Tq07AH1d/0rfPKMx72lJ4bajyGc8/uP2HyY6WE4wfLIkBt/SiYEMlUwaI1I 0BaZRbiSO8eSqvGyopXzv5np3bOjD64Z -----END CERTIFICATE-----Generated at Wed Aug 6 12:35:07 2025 by rpki-client