$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b36499dd-0dd6-3d2b-b3ab-7e97c848e9bc.roa File: b36499dd-0dd6-3d2b-b3ab-7e97c848e9bc.roa (raw, json) Hash identifier: B+NrUxdYDwVpn/WpApjmk/aZmviSs0vnL7+EFSiMOdo= Subject key identifier: DC:79:40:2B:84:CD:57:CB:AD:42:DF:AA:4F:87:28:60:EC:26:4B:EE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963D1165C020FFB2484800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b36499dd-0dd6-3d2b-b3ab-7e97c848e9bc.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396616 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:3d:11:65:c0:20:ff:b2:48:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=a5ebf443-901b-47d0-a948-bad5e5a4ac6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b2:85:9a:47:a1:b1:2f:77:39:73:de:5c:d0: e6:5f:7d:f5:f1:d4:34:77:ea:b1:ff:0b:18:f9:13: f3:d2:b9:b2:ed:5a:ea:fe:55:06:81:b0:1c:72:18: 3d:f8:04:36:81:e4:7b:17:15:35:5f:23:69:94:6e: aa:ff:a2:c0:15:99:bc:e2:0d:54:82:f0:12:fa:0e: 62:2e:9c:a4:c7:6e:80:d0:ab:b2:9f:94:85:72:1f: 3e:1b:f0:29:72:79:ca:b6:11:81:4e:c2:cb:29:e9: 75:a8:d9:88:2a:90:5c:5c:e8:a8:72:62:45:8f:57: b1:a1:15:55:26:71:51:73:c7:e1:0e:57:80:a7:d9: 71:cd:6e:cf:4f:76:60:f4:2f:3a:37:e6:4b:3a:e6: 7b:4e:b6:bb:50:97:dc:ef:94:1a:d3:29:3c:7e:86: 2c:c8:a0:42:2d:b9:bc:c7:2b:8d:ca:f5:59:48:72: c7:76:ac:80:a4:bb:96:2a:03:91:f3:73:ab:95:1b: 1c:cf:7d:d4:d1:95:83:ac:e0:6d:56:5a:ee:6c:2b: 4a:c5:8c:a7:df:95:4a:c3:71:b1:92:a9:8b:da:c5: 4e:5b:89:70:45:8d:1c:59:bd:f5:1c:cf:8f:21:52: 3d:96:2d:b8:81:c5:9f:96:73:a4:cf:14:06:eb:a8: 91:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:79:40:2B:84:CD:57:CB:AD:42:DF:AA:4F:87:28:60:EC:26:4B:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b36499dd-0dd6-3d2b-b3ab-7e97c848e9bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:82:ed:d0:fb:ef:bb:d0:15:4e:de:59:57:66:85:f2:cd:7c: a4:dc:b5:56:7f:59:71:4a:dc:a3:90:09:c8:fe:1f:66:e7:5a: d9:82:af:e9:cf:5e:b8:8a:3f:d6:55:72:97:91:f6:68:0c:32: b9:3c:9c:41:ae:10:23:6d:3c:56:38:2c:67:d7:f2:c5:2d:db: 7d:29:4f:98:a7:b2:7e:05:5a:1a:6a:03:03:70:46:9c:34:6b: 0b:3f:35:51:5b:26:f0:79:7e:1a:bf:79:6f:b6:67:7e:48:60: ac:36:11:5e:aa:e6:95:23:3f:7f:8f:32:d9:ab:53:a6:28:79: 82:a9:a2:bf:47:2b:80:7f:1b:de:a8:69:4d:83:c2:de:71:1e: 86:d4:5d:d2:7b:31:4b:92:9b:92:05:bf:ae:9c:84:f5:9d:0c: 40:b6:f9:ea:4c:33:74:78:27:a4:01:2e:e5:d9:78:b0:a7:34: 35:a1:d5:28:b1:05:83:fb:56:24:b5:d4:23:4d:d9:3b:45:19: a5:67:12:41:ce:ec:51:86:0c:7e:8a:c0:86:65:27:11:b3:43: 1c:9a:ac:f7:2a:02:17:95:b5:ec:50:3c:6c:79:24:9c:8b:db: 7d:53:1b:d6:c4:c7:d1:5a:f9:1a:e0:9c:47:59:15:7e:66:75: 82:ad:76:99 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelj0RZcAg/7JISAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk YTVlYmY0NDMtOTAxYi00N2QwLWE5NDgtYmFkNWU1YTRhYzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7KFmkehsS93OXPeXNDmX3318dQ0d+qx/wsY +RPz0rmy7Vrq/lUGgbAcchg9+AQ2geR7FxU1XyNplG6q/6LAFZm84g1UgvAS+g5i Lpykx26A0Kuyn5SFch8+G/ApcnnKthGBTsLLKel1qNmIKpBcXOiocmJFj1exoRVV JnFRc8fhDleAp9lxzW7PT3Zg9C86N+ZLOuZ7Tra7UJfc75Qa0yk8foYsyKBCLbm8 xyuNyvVZSHLHdqyApLuWKgOR83OrlRscz33U0ZWDrOBtVlrubCtKxYyn35VKw3Gx kqmL2sVOW4lwRY0cWb31HM+PIVI9li24gcWflnOkzxQG66iRyQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNx5QCuEzVfLrULfqk+HKGDsJkvuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjM2NDk5ZGQtMGRkNi0z ZDJiLWIzYWItN2U5N2M4NDhlOWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBQgu3Q+++70BVO3llXZoXyzXyk3LVWf1lxStyjkAnI/h9m51rZgq/p z164ij/WVXKXkfZoDDK5PJxBrhAjbTxWOCxn1/LFLdt9KU+Yp7J+BVoaagMDcEac NGsLPzVRWybweX4av3lvtmd+SGCsNhFequaVIz9/jzLZq1OmKHmCqaK/RyuAfxve qGlNg8LecR6G1F3SezFLkpuSBb+unIT1nQxAtvnqTDN0eCekAS7l2XiwpzQ1odUo sQWD+1YktdQjTdk7RRmlZxJBzuxRhgx+isCGZScRs0Mcmqz3KgIXlbXsUDxseSSc i9t9UxvWxMfRWvka4JxHWRV+ZnWCrXaZ -----END CERTIFICATE-----Generated at Mon Aug 4 14:56:59 2025 by rpki-client