$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc2c8108-ea8a-39b6-ac49-3f20ef29de20.roa File: bc2c8108-ea8a-39b6-ac49-3f20ef29de20.roa (raw, json) Hash identifier: MfumEjqSkG6j019/v7UbIsiOusRe3EM2Z+82TFymWsk= Subject key identifier: 61:7D:A4:91:EA:D0:AA:A6:D6:DD:33:30:13:C1:4F:F6:C2:E7:C1:23 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E96431D17EC252EE2B1BA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc2c8108-ea8a-39b6-ac49-3f20ef29de20.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 397201 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:43:1d:17:ec:25:2e:e2:b1:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=6a0746ee-e0a2-4ba1-8cf3-e095602b41d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cd:5e:a3:bd:26:69:cc:97:06:b8:87:c7:51: bf:f0:d2:67:6a:e0:d2:35:60:23:ee:5e:09:06:65: 05:ed:1c:a7:d0:bb:98:95:c6:5b:2e:50:4c:cd:a1: b9:00:67:6c:3c:e1:7d:18:54:a9:5f:65:8c:98:15: 3c:47:24:47:6d:52:cc:58:10:05:81:24:5c:bf:6a: f2:e8:a9:cd:fe:57:ff:4b:25:92:ab:c3:a6:0f:eb: 23:08:27:e8:d1:7f:21:01:a9:a3:92:48:c3:74:9c: cd:8b:50:84:7f:9b:26:c2:e0:b4:12:8c:69:70:ce: 75:06:fe:d9:3f:99:21:6a:86:4c:18:b1:f3:0d:95: 1a:57:76:d6:ec:9b:2e:35:e6:0a:46:f5:5b:fd:6f: f6:99:23:d0:68:3b:d6:01:e9:36:ee:b0:22:d5:bb: 42:7f:2c:31:0d:e7:00:e1:e0:44:62:1b:58:c1:74: cd:01:00:d7:9d:a1:3a:74:41:ae:b7:70:d6:92:20: 27:e3:6f:80:a8:8c:06:ac:45:0d:64:5d:79:a7:62: 59:11:27:22:b3:12:9a:98:3d:3e:fe:e5:e1:f2:78: ab:78:d3:89:2d:cf:eb:b0:f2:d4:bd:7d:b4:34:1f: 81:8a:1e:90:1b:47:4d:3f:fa:35:b2:4e:35:68:90: 06:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7D:A4:91:EA:D0:AA:A6:D6:DD:33:30:13:C1:4F:F6:C2:E7:C1:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc2c8108-ea8a-39b6-ac49-3f20ef29de20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:90:88:04:d2:5e:a4:b9:77:d8:56:dc:ef:62:f8:7e:53:95: 71:dd:98:71:35:42:92:9b:e6:61:a2:11:20:84:79:5f:37:32: 14:9a:56:41:ef:ee:14:ed:2a:25:48:fe:66:66:64:57:4a:56: 79:24:48:04:6e:62:26:f8:52:da:a6:df:ee:94:2b:b4:ef:0f: be:02:46:15:5a:7d:a0:d6:a3:aa:1c:32:85:da:c1:38:4e:75: 75:b7:fd:9e:fe:29:71:a2:db:8a:e6:87:d3:f7:42:82:07:b0: bb:8e:03:9a:d3:48:d8:0a:de:e9:00:cf:9b:88:02:bb:f7:03: 7d:63:c0:64:86:1a:f6:54:e3:ab:ef:00:03:76:66:35:ca:5c: 93:71:b9:e9:24:e8:83:fd:11:e7:f4:05:b1:10:d9:a1:fa:81: 1e:2b:d0:90:d2:50:5d:f1:22:ca:4d:c3:38:13:52:fc:86:62: d2:ec:4b:81:29:c1:1a:2f:e7:a3:14:de:e5:ec:c1:cf:d6:a4: 66:6f:af:4e:a6:dc:93:89:b1:be:59:c5:ac:81:45:ec:34:8b: b2:13:f3:43:4e:fc:82:30:94:ab:b4:db:b1:fe:40:40:c0:d0: 48:a0:e7:cd:38:2d:b3:03:46:69:15:c6:73:72:50:4f:4d:e3: 0e:73:ed:91 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelkMdF+wlLuKxugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NmEwNzQ2ZWUtZTBhMi00YmExLThjZjMtZTA5NTYwMmI0MWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM1eo70macyXBriHx1G/8NJnauDSNWAj7l4J BmUF7Ryn0LuYlcZbLlBMzaG5AGdsPOF9GFSpX2WMmBU8RyRHbVLMWBAFgSRcv2ry 6KnN/lf/SyWSq8OmD+sjCCfo0X8hAamjkkjDdJzNi1CEf5smwuC0EoxpcM51Bv7Z P5khaoZMGLHzDZUaV3bW7JsuNeYKRvVb/W/2mSPQaDvWAek27rAi1btCfywxDecA 4eBEYhtYwXTNAQDXnaE6dEGut3DWkiAn42+AqIwGrEUNZF15p2JZEScisxKamD0+ /uXh8nireNOJLc/rsPLUvX20NB+Bih6QG0dNP/o1sk41aJAGLQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGF9pJHq0Kqm1t0zMBPBT/bC58EjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmMyYzgxMDgtZWE4YS0z OWI2LWFjNDktM2YyMGVmMjlkZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAmkIgE0l6kuXfYVtzvYvh+U5Vx3ZhxNUKSm+ZhohEghHlfNzIUmlZB 7+4U7SolSP5mZmRXSlZ5JEgEbmIm+FLapt/ulCu07w++AkYVWn2g1qOqHDKF2sE4 TnV1t/2e/ilxotuK5ofT90KCB7C7jgOa00jYCt7pAM+biAK79wN9Y8Bkhhr2VOOr 7wADdmY1ylyTcbnpJOiD/RHn9AWxENmh+oEeK9CQ0lBd8SLKTcM4E1L8hmLS7EuB KcEaL+ejFN7l7MHP1qRmb69OptyTibG+WcWsgUXsNIuyE/NDTvyCMJSrtNux/kBA wNBIoOfNOC2zA0ZpFcZzclBPTeMOc+2R -----END CERTIFICATE-----Generated at Mon Aug 4 16:12:53 2025 by rpki-client