$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9bdb552-3747-3060-8c91-220dceab6cf6.roa File: c9bdb552-3747-3060-8c91-220dceab6cf6.roa (raw, json) Hash identifier: ANawhlRyH/fS6K67eF5fCV9VZGApiQeORlN1Rj6dVKk= Subject key identifier: 8C:E6:91:1D:FF:53:1E:4C:FC:B0:34:3D:15:A3:9C:F5:64:B9:65:6D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E9638A9D0566A1A68E18480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9bdb552-3747-3060-8c91-220dceab6cf6.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 397196 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:38:a9:d0:56:6a:1a:68:e1:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=2219e399-2800-432c-8f11-dcd5d0ae1e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:73:54:6d:bd:53:df:8b:82:60:41:7e:31: 15:77:12:ba:ad:5e:d9:34:a6:cc:de:50:fd:97:a5: f2:74:37:af:b6:1e:c4:40:c5:b5:6d:d2:33:0d:b5: f5:59:49:5c:52:7f:07:f6:a5:9d:88:92:27:61:50: 64:01:a4:73:a1:c8:5e:98:b7:fe:c4:a0:cf:a0:fd: db:02:de:d8:c7:0f:5c:05:cb:3f:37:08:21:27:35: 88:cc:ed:38:91:3b:dc:f4:18:8f:d1:40:7c:e7:99: 16:32:1d:74:a9:b0:a3:9d:9f:d5:9b:f2:ae:c5:c7: 41:ae:8d:0e:9b:fe:2f:39:bc:6f:7f:71:90:79:10: 62:9c:78:5e:bc:13:78:7b:8a:98:e7:e1:9d:61:75: 52:90:1d:01:0b:16:40:f9:66:e7:7c:0d:7b:26:ff: 84:b9:a3:8e:08:5f:f8:ba:46:28:26:40:26:14:42: e5:c2:1c:e9:a0:d8:5b:f8:68:b5:c2:68:e7:0d:04: b8:0d:99:fe:3c:22:94:e6:ef:8e:a4:d8:78:18:aa: 92:aa:a5:06:45:1e:62:c3:e5:9a:c6:22:61:d8:58: cd:1a:45:9a:28:f2:ae:c8:89:85:54:b1:96:f9:71: 21:ad:6d:88:53:c2:c5:73:3d:a9:51:4c:02:d9:bb: ca:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E6:91:1D:FF:53:1E:4C:FC:B0:34:3D:15:A3:9C:F5:64:B9:65:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9bdb552-3747-3060-8c91-220dceab6cf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:a4:8e:6c:ea:21:a5:78:0a:cb:40:e1:22:ba:19:7c:45:f1: 71:b3:06:d5:4c:58:b6:24:4a:8d:e0:21:5c:7c:7a:7e:0c:8c: 0b:2b:2e:98:a3:e5:56:c9:63:cc:d7:36:2b:b2:bc:ed:97:e7: 2e:d9:06:af:bd:05:46:9e:f0:2e:96:75:91:aa:2d:55:80:93: 46:70:92:9a:2d:19:6f:db:7b:96:80:e9:c9:5b:86:62:90:a3: c8:ac:b6:69:a5:1f:64:b0:b4:cc:2f:ca:96:3a:ed:a8:7d:48: 3d:9f:e6:17:12:3b:e8:8d:e8:27:17:47:80:ea:9d:70:06:82: 8f:d4:bb:e5:ce:47:b8:c5:bb:1f:09:8b:f8:d6:cc:d9:8b:5e: ea:bf:16:c0:21:3f:c1:5b:61:39:3b:19:03:c3:41:db:1b:06: b8:9f:f8:71:50:80:66:12:36:e5:e8:78:76:3f:5c:88:df:f0: d4:cf:09:35:ed:37:26:37:69:c3:a1:62:fe:3b:8a:91:79:bb: d9:ac:92:47:d4:c7:71:21:bf:97:0b:0b:5f:e4:08:15:7a:e6: 62:19:34:02:8c:b0:63:ea:1a:0a:fa:39:f0:f4:1c:6a:72:d3: 38:80:b5:e8:49:c8:d5:c6:14:5f:3d:2a:58:49:ae:c7:21:94: f5:7a:e1:cf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqeljip0FZqGmjhhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MjIxOWUzOTktMjgwMC00MzJjLThmMTEtZGNkNWQwYWUxZTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApppzVG29U9+LgmBBfjEVdxK6rV7ZNKbM3lD9 l6XydDevth7EQMW1bdIzDbX1WUlcUn8H9qWdiJInYVBkAaRzochemLf+xKDPoP3b At7Yxw9cBcs/NwghJzWIzO04kTvc9BiP0UB855kWMh10qbCjnZ/Vm/KuxcdBro0O m/4vObxvf3GQeRBinHhevBN4e4qY5+GdYXVSkB0BCxZA+WbnfA17Jv+EuaOOCF/4 ukYoJkAmFELlwhzpoNhb+Gi1wmjnDQS4DZn+PCKU5u+OpNh4GKqSqqUGRR5iw+Wa xiJh2FjNGkWaKPKuyImFVLGW+XEhrW2IU8LFcz2pUUwC2bvKWwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIzmkR3/Ux5M/LA0PRWjnPVkuWVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzliZGI1NTItMzc0Ny0z MDYwLThjOTEtMjIwZGNlYWI2Y2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBQpI5s6iGleArLQOEiuhl8RfFxswbVTFi2JEqN4CFcfHp+DIwLKy6Y o+VWyWPM1zYrsrztl+cu2QavvQVGnvAulnWRqi1VgJNGcJKaLRlv23uWgOnJW4Zi kKPIrLZppR9ksLTML8qWOu2ofUg9n+YXEjvojegnF0eA6p1wBoKP1Lvlzke4xbsf CYv41szZi17qvxbAIT/BW2E5OxkDw0HbGwa4n/hxUIBmEjbl6Hh2P1yI3/DUzwk1 7TcmN2nDoWL+O4qRebvZrJJH1MdxIb+XCwtf5AgVeuZiGTQCjLBj6hoK+jnw9Bxq ctM4gLXoScjVxhRfPSpYSa7HIZT1euHP -----END CERTIFICATE-----Generated at Wed Aug 6 12:42:02 2025 by rpki-client