$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5521b7b-5f32-3762-9366-9c7f948e9eac.roa File: c5521b7b-5f32-3762-9366-9c7f948e9eac.roa (raw, json) Hash identifier: Lc3gBLQD/vrP6RjvH012CCGWKonSEerQ/v9wW2/IXMI= Subject key identifier: FF:58:04:94:0E:8C:FC:60:2D:0F:C3:B9:49:62:19:04:4C:95:A3:92 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E9639BA788264EC61A23D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5521b7b-5f32-3762-9366-9c7f948e9eac.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 36627 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:39:ba:78:82:64:ec:61:a2:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=9b64db8d-7b6c-452d-825c-a5de633400bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c9:fb:c4:da:19:c1:0b:09:0e:c8:9d:51:bc: 31:00:32:d7:af:66:5d:45:62:77:75:f4:c7:40:62: f0:70:0f:8a:30:2f:51:15:1f:bd:6d:ef:28:29:69: b1:4c:ab:dd:33:d4:ea:0f:a3:e8:89:bd:3c:b4:b5: ba:8a:1a:9f:21:da:a3:40:88:ba:af:16:9f:f3:38: 75:09:51:a9:17:70:f3:19:52:42:cd:d6:9a:bf:9f: c8:7f:90:4b:e1:92:95:9a:1f:cc:31:48:c5:f3:9d: 6e:71:9a:0c:79:c7:67:eb:d8:4b:23:bd:5d:00:57: 46:bb:0e:37:ea:52:7e:dd:88:31:31:2d:e5:38:37: f1:2d:6a:d6:cd:61:78:19:b4:02:b1:8e:32:bd:a6: eb:25:28:87:5f:62:81:76:b1:99:20:0b:2a:8d:01: ff:a6:7b:70:0a:9e:e3:cc:a7:62:f3:c4:75:53:4c: 65:ae:e6:3a:5d:ea:84:ca:66:64:af:56:7b:f1:18: cc:6d:8d:50:b8:78:ab:2b:37:03:95:f1:8d:41:4c: c2:31:ae:5a:92:cd:45:f1:f0:cb:2d:32:7f:b5:54: 1d:09:a1:d0:cf:f5:0c:ed:10:4a:8c:99:59:20:38: 27:62:b5:0c:b6:07:5a:03:ee:0f:90:cd:1a:27:e8: 50:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:58:04:94:0E:8C:FC:60:2D:0F:C3:B9:49:62:19:04:4C:95:A3:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5521b7b-5f32-3762-9366-9c7f948e9eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:82:a9:c9:b3:63:75:24:85:26:7f:59:2f:31:ab:ff:1b:38: 37:c8:c6:93:7d:cc:c6:0c:20:61:31:12:bd:bf:f0:fb:e2:88: 18:20:8f:b3:fe:51:d5:6b:8c:97:2f:46:8f:35:13:52:79:6f: 4c:e7:cc:98:0b:86:0f:1b:79:de:88:fe:59:69:c9:31:c8:fb: b9:e6:f4:d5:38:e9:aa:a9:18:0c:36:9e:8f:09:c9:46:2c:c5: 1f:21:c0:84:bd:07:d6:1c:68:93:8f:cb:fa:fc:5d:e7:7e:94: c2:f3:60:76:91:d7:e9:f0:4b:89:59:2c:ed:cf:55:bf:69:6a: 85:98:af:94:97:43:d6:cd:8e:9d:9c:8b:93:25:d5:ef:34:61: 13:1f:b6:c1:61:8d:c8:22:03:8d:ce:5a:f6:69:86:2d:d4:cf: 17:20:56:91:28:5c:43:89:b8:a9:f3:81:e9:9b:8c:94:f9:d6: 6a:17:08:b1:3f:bd:92:76:4c:29:72:f5:33:46:ed:ca:35:74: 30:76:0f:ed:11:c6:1f:7c:09:54:c6:ae:0d:aa:ae:37:f3:0d: 7a:93:3d:93:c2:db:14:48:17:86:75:d4:37:85:c3:59:9b:27: 38:14:1c:63:e4:bc:a7:ec:ab:67:e9:0f:20:82:85:5f:ae:da: 35:d0:76:66 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqeljm6eIJk7GGiPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk OWI2NGRiOGQtN2I2Yy00NTJkLTgyNWMtYTVkZTYzMzQwMGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8n7xNoZwQsJDsidUbwxADLXr2ZdRWJ3dfTH QGLwcA+KMC9RFR+9be8oKWmxTKvdM9TqD6Poib08tLW6ihqfIdqjQIi6rxaf8zh1 CVGpF3DzGVJCzdaav5/If5BL4ZKVmh/MMUjF851ucZoMecdn69hLI71dAFdGuw43 6lJ+3YgxMS3lODfxLWrWzWF4GbQCsY4yvabrJSiHX2KBdrGZIAsqjQH/pntwCp7j zKdi88R1U0xlruY6XeqEymZkr1Z78RjMbY1QuHirKzcDlfGNQUzCMa5aks1F8fDL LTJ/tVQdCaHQz/UM7RBKjJlZIDgnYrUMtgdaA+4PkM0aJ+hQkQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP9YBJQOjPxgLQ/DuUliGQRMlaOSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzU1MjFiN2ItNWYzMi0z NzYyLTkzNjYtOWM3Zjk0OGU5ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAggqnJs2N1JIUmf1kvMav/Gzg3yMaTfczGDCBhMRK9v/D74ogYII+z /lHVa4yXL0aPNRNSeW9M58yYC4YPG3neiP5ZackxyPu55vTVOOmqqRgMNp6PCclG LMUfIcCEvQfWHGiTj8v6/F3nfpTC82B2kdfp8EuJWSztz1W/aWqFmK+Ul0PWzY6d nIuTJdXvNGETH7bBYY3IIgONzlr2aYYt1M8XIFaRKFxDibip84Hpm4yU+dZqFwix P72SdkwpcvUzRu3KNXQwdg/tEcYffAlUxq4Nqq438w16kz2TwtsUSBeGddQ3hcNZ myc4FBxj5Lyn7Ktn6Q8ggoVfrto10HZm -----END CERTIFICATE-----Generated at Wed Aug 6 10:21:37 2025 by rpki-client