$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7e5fd6b-e83c-30c9-8248-a6921d33938d.roa File: a7e5fd6b-e83c-30c9-8248-a6921d33938d.roa (raw, json) Hash identifier: s6gRkBcwyW6qaVX6cy22GlVFtGWTY9+Bt+eCuKsOF0Y= Subject key identifier: CA:D9:8D:25:7B:51:44:C6:FC:87:45:BF:21:75:01:AE:13:75:5E:2D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E96391158C704B2AFE650C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7e5fd6b-e83c-30c9-8248-a6921d33938d.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 397202 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:39:11:58:c7:04:b2:af:e6:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=0aef40db-86a9-44b8-a76d-9f3d77e4deaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:eb:46:19:f7:4e:7b:74:70:a8:5a:0f:52:ec: fb:d8:35:28:bb:8b:ed:41:ae:f4:92:9b:9b:b6:4d: c5:fb:f0:c2:78:0e:24:2f:a4:77:25:f4:c7:09:91: a7:f2:04:cb:fe:ec:fd:8d:ce:a4:d2:11:0d:a6:ea: 3b:f8:88:4d:56:ed:b9:10:e9:6d:2e:0e:7c:83:59: 1d:13:63:ab:73:e2:94:d5:9c:cd:95:15:f2:2c:74: 8a:02:ed:64:6e:85:c7:bb:f9:c3:d5:ae:d5:3e:d2: 28:d4:27:27:58:1c:d6:ba:25:ca:a1:bc:19:b7:c2: a8:21:36:e4:21:6a:c6:07:b2:aa:7f:db:79:85:20: e8:d2:8c:4d:74:fa:52:23:60:5f:0c:ea:c1:d8:df: b1:21:d7:b6:b3:6d:82:88:4f:99:70:1c:84:f5:f0: 59:b1:f5:42:78:a8:b7:39:28:2a:21:d3:32:cb:e0: 86:eb:9b:40:1e:9a:5f:9f:3c:06:cf:de:29:e9:29: c7:00:42:dc:f5:d8:d8:51:a6:42:fa:43:7a:91:ff: 09:33:87:72:c9:7f:70:1c:b0:a9:1e:81:69:a9:04: 55:da:33:dc:c8:5d:0e:0f:0c:fe:51:1c:12:24:45: 93:b4:2b:e2:11:c6:c7:a4:2b:c8:ad:02:3d:2c:1f: e5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D9:8D:25:7B:51:44:C6:FC:87:45:BF:21:75:01:AE:13:75:5E:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7e5fd6b-e83c-30c9-8248-a6921d33938d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:78:de:56:0d:bc:4e:81:40:37:7d:26:97:3d:90:7b:35:25: 7f:55:7f:86:4d:cc:f4:12:53:37:65:a7:fc:ba:98:c7:08:7d: fd:d5:55:7a:c0:78:e0:f7:15:ac:1c:52:d5:77:b9:8b:d6:3f: c6:30:c2:4d:da:2a:36:be:0c:78:c3:13:40:bd:d2:73:c8:30: f5:62:e0:17:68:c8:70:94:61:76:82:9e:c2:71:71:6c:26:4f: 76:b7:fc:96:be:cb:70:b2:cd:f0:a4:93:f6:74:5d:39:c8:d3: 6a:00:d3:9c:03:1e:8f:22:5e:d3:0f:70:44:e0:f3:3d:cb:a7: b2:ad:1b:f5:a6:a0:fb:64:cc:eb:5a:41:da:d2:af:1b:41:0d: 7f:1f:02:72:19:7b:01:cb:aa:2e:b8:ce:18:1f:74:4b:db:4d: 71:14:a3:80:7c:a3:4c:7f:87:66:6e:63:ed:48:2c:71:1f:c7: fc:a3:79:c0:4f:4e:cb:0e:cc:81:51:5a:53:a9:a2:f7:0a:88: 9a:6b:48:d8:8d:cc:49:0f:b0:ab:13:d4:51:94:1a:2e:15:47: d1:e5:41:61:52:09:21:1c:ca:b8:ef:a3:db:b2:a5:d0:77:fe: 16:a0:29:5c:4d:9a:cc:b4:ec:8a:29:93:f3:a9:72:03:69:5a: 3b:a6:65:73 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqeljkRWMcEsq/mUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MGFlZjQwZGItODZhOS00NGI4LWE3NmQtOWYzZDc3ZTRkZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAletGGfdOe3RwqFoPUuz72DUou4vtQa70kpub tk3F+/DCeA4kL6R3JfTHCZGn8gTL/uz9jc6k0hENpuo7+IhNVu25EOltLg58g1kd E2Orc+KU1ZzNlRXyLHSKAu1kboXHu/nD1a7VPtIo1CcnWBzWuiXKobwZt8KoITbk IWrGB7Kqf9t5hSDo0oxNdPpSI2BfDOrB2N+xIde2s22CiE+ZcByE9fBZsfVCeKi3 OSgqIdMyy+CG65tAHppfnzwGz94p6SnHAELc9djYUaZC+kN6kf8JM4dyyX9wHLCp HoFpqQRV2jPcyF0ODwz+URwSJEWTtCviEcbHpCvIrQI9LB/ljQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMrZjSV7UUTG/IdFvyF1Aa4TdV4tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTdlNWZkNmItZTgzYy0z MGM5LTgyNDgtYTY5MjFkMzM5MzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCLeN5WDbxOgUA3fSaXPZB7NSV/VX+GTcz0ElM3Zaf8upjHCH391VV6 wHjg9xWsHFLVd7mL1j/GMMJN2io2vgx4wxNAvdJzyDD1YuAXaMhwlGF2gp7CcXFs Jk92t/yWvstwss3wpJP2dF05yNNqANOcAx6PIl7TD3BE4PM9y6eyrRv1pqD7ZMzr WkHa0q8bQQ1/HwJyGXsBy6ouuM4YH3RL201xFKOAfKNMf4dmbmPtSCxxH8f8o3nA T07LDsyBUVpTqaL3Coiaa0jYjcxJD7CrE9RRlBouFUfR5UFhUgkhHMq476PbsqXQ d/4WoClcTZrMtOyKKZPzqXIDaVo7pmVz -----END CERTIFICATE-----Generated at Mon Aug 4 14:51:56 2025 by rpki-client