$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8bf74b6-0814-3fd8-acff-2c04fb48de29.roa File: c8bf74b6-0814-3fd8-acff-2c04fb48de29.roa (raw, json) Hash identifier: xeKUT5zHxLZQHl3qthQFFVbiqnWLEyINd7UupSMLoV0= Subject key identifier: 19:EB:E1:45:12:7A:67:1D:56:70:30:9A:36:1F:4B:90:0C:F4:F0:53 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963B2E611D336771E9C780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8bf74b6-0814-3fd8-acff-2c04fb48de29.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 36632 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:3b:2e:61:1d:33:67:71:e9:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=c2732c43-692e-4922-b0dd-12fdb9b02546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:73:4b:d1:b4:f3:6b:24:e0:b0:bc:1c:9b: 95:30:5f:bb:63:e1:41:fe:1a:05:8c:80:80:1d:b5: 57:47:4c:02:ce:10:39:37:4f:35:27:48:cb:5d:27: 5a:c4:a0:1e:aa:99:77:aa:c9:c0:ed:5b:56:5e:9b: a2:ef:d7:bf:1f:17:d2:06:47:e9:16:c8:d2:61:cc: 6d:01:a4:e5:aa:52:ba:d6:af:40:39:48:04:08:e7: 9d:96:cf:e8:7a:b7:e7:6c:95:dd:32:13:34:f6:8a: 42:55:41:d4:cd:ff:19:c6:67:45:7f:f6:6a:37:6f: d3:d6:87:3f:68:08:8d:a7:6a:c8:98:04:9d:02:cd: 77:f8:a7:ed:03:18:a7:45:8a:76:3e:68:e2:ea:b9: 02:16:09:95:f3:c1:ce:54:85:c8:a5:85:4a:04:1c: 1a:6b:62:a3:23:60:c7:87:30:ed:b2:7c:54:32:3d: f1:fe:28:fc:6b:59:1c:07:ee:9a:23:1d:57:b8:e9: e6:07:b5:ad:ca:2f:d8:e5:38:a1:57:10:9e:89:cd: 57:66:25:75:d8:eb:30:a1:41:2b:e8:2d:33:32:6d: 9d:2f:7e:2d:78:a9:1e:7e:7d:8f:c5:77:0e:32:8d: 7d:99:05:37:8b:dd:a8:47:e7:d6:8c:00:f6:36:4e: dc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EB:E1:45:12:7A:67:1D:56:70:30:9A:36:1F:4B:90:0C:F4:F0:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8bf74b6-0814-3fd8-acff-2c04fb48de29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:da:cb:f8:04:6c:db:a2:57:86:c5:fa:f5:ba:6b:75:2f:29: 50:dc:53:51:12:40:60:79:4c:c0:ba:7c:d6:fe:91:2c:d8:b7: d6:c1:e4:10:19:89:d8:d5:0e:55:a1:d2:de:85:a3:19:74:69: 37:43:e1:25:de:73:b7:a0:f5:4d:bc:c5:5e:63:a6:7f:9b:34: c6:2b:64:5a:52:b9:bb:eb:3a:f0:b3:f6:0e:64:bb:ce:e9:2e: b4:12:c9:48:fd:e3:f6:9a:52:ad:b9:4a:22:34:e8:e6:a3:a6: 55:99:d4:a3:52:59:50:22:f5:ba:84:af:5c:74:8a:b6:ca:c3: 7c:a5:b8:df:82:7d:60:99:f6:f3:25:e0:0c:ae:df:10:6b:91: a4:d0:4b:62:5a:39:9a:17:b2:dc:ef:f6:04:cf:e7:83:12:21: 99:39:26:0a:f8:08:cf:2b:a7:ae:8b:32:94:0e:d9:9b:0a:35: 23:06:96:23:07:71:27:81:53:77:4a:9c:41:2d:4b:68:e9:fd: d0:be:fa:7e:cc:98:b3:03:d8:26:4a:56:ef:a8:e7:fd:23:a5: 3a:2c:df:e8:6a:d1:f7:7d:3a:a2:74:67:9f:f9:ff:c5:3c:32: 96:e8:77:82:6b:cf:9b:38:48:fd:63:71:6c:95:9b:95:3b:74: 77:c4:47:1b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqeljsuYR0zZ3Hpx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk YzI3MzJjNDMtNjkyZS00OTIyLWIwZGQtMTJmZGI5YjAyNTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ9zS9G082sk4LC8HJuVMF+7Y+FB/hoFjICA HbVXR0wCzhA5N081J0jLXSdaxKAeqpl3qsnA7VtWXpui79e/HxfSBkfpFsjSYcxt AaTlqlK61q9AOUgECOedls/oerfnbJXdMhM09opCVUHUzf8ZxmdFf/ZqN2/T1oc/ aAiNp2rImASdAs13+KftAxinRYp2Pmji6rkCFgmV88HOVIXIpYVKBBwaa2KjI2DH hzDtsnxUMj3x/ij8a1kcB+6aIx1XuOnmB7Wtyi/Y5TihVxCeic1XZiV12OswoUEr 6C0zMm2dL34teKkefn2PxXcOMo19mQU3i92oR+fWjAD2Nk7cCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBnr4UUSemcdVnAwmjYfS5AM9PBTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzhiZjc0YjYtMDgxNC0z ZmQ4LWFjZmYtMmMwNGZiNDhkZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA92sv4BGzboleGxfr1umt1LylQ3FNREkBgeUzAunzW/pEs2LfWweQQ GYnY1Q5VodLehaMZdGk3Q+El3nO3oPVNvMVeY6Z/mzTGK2RaUrm76zrws/YOZLvO 6S60EslI/eP2mlKtuUoiNOjmo6ZVmdSjUllQIvW6hK9cdIq2ysN8pbjfgn1gmfbz JeAMrt8Qa5Gk0EtiWjmaF7Lc7/YEz+eDEiGZOSYK+AjPK6euizKUDtmbCjUjBpYj B3EngVN3SpxBLUto6f3Qvvp+zJizA9gmSlbvqOf9I6U6LN/oatH3fTqidGef+f/F PDKW6HeCa8+bOEj9Y3FslZuVO3R3xEcb -----END CERTIFICATE-----Generated at Mon Aug 4 18:54:29 2025 by rpki-client