$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa File: cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa (raw, json) Hash identifier: QMd6VN5yzShnICr/m28VMgVGB8IpW90PsMxyhSdXvL8= Subject key identifier: 77:83:98:C5:BB:1D:D6:DC:86:85:02:66:75:D0:22:93:A3:5F:2C:EF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E96393FF1EB3EB22F3F1620 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 397200 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:39:3f:f1:eb:3e:b2:2f:3f:16:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=2a1a2c5e-6ca0-495b-b798-979e3a14886b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6b:e4:92:e4:24:4f:8e:37:92:b5:9a:56:6c: b8:df:50:8d:6d:cb:be:fb:df:b1:98:7c:3c:6d:83: f8:02:8a:f1:06:6f:ba:d2:54:c9:63:0c:17:82:27: d9:7b:d6:65:91:1a:36:e3:c8:fb:5e:e6:96:89:48: f7:e3:02:be:52:5c:da:c3:18:e9:7a:3b:03:52:3a: 0f:12:4f:e4:33:38:9f:cb:ef:d6:1a:6b:04:b7:75: e5:19:02:6a:d7:e1:15:4f:99:b5:57:51:18:4f:64: 89:44:d8:83:ad:a5:fb:4d:3f:f0:3d:8b:2b:21:d4: 28:84:24:f7:f6:2a:b0:b4:d2:5e:eb:52:ed:aa:a1: f5:5c:85:50:9e:ea:a0:1b:e6:94:be:9f:38:1f:2c: 18:0a:bd:a2:c6:32:02:6d:b4:37:f2:a3:80:8d:0a: 60:0f:2b:da:6e:bc:9a:c6:48:ae:d6:99:88:89:2c: e6:20:14:d8:21:af:d2:bd:c1:8f:b2:6b:4d:6b:86: 15:19:dc:b2:83:71:8d:b8:f9:b5:29:36:97:c9:bf: 84:1c:5a:e3:aa:38:d4:53:01:a8:33:a1:09:0e:4c: 3d:52:4b:43:ac:64:e1:86:23:70:da:6b:08:9b:ef: 31:6d:26:d4:fe:1b:ec:76:ba:80:79:b4:d2:9a:64: 71:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:83:98:C5:BB:1D:D6:DC:86:85:02:66:75:D0:22:93:A3:5F:2C:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:04:cd:50:2d:08:a2:6b:b4:a9:97:f1:ea:40:74:df:17:78: c6:b8:b6:46:91:27:15:d6:c2:91:03:ff:ef:97:ed:66:c1:9b: 0f:c4:a4:c6:65:f2:31:f1:98:a4:5d:66:9c:b5:fd:05:ef:94: c1:be:fc:e6:b0:5c:66:a0:7c:28:9c:08:85:e9:92:98:69:be: 07:5b:c9:2e:47:51:19:50:6a:e5:e6:57:2d:d0:2c:cf:d4:1e: d7:91:48:3b:f8:ef:b5:b7:39:b3:90:60:33:a1:df:38:a0:fe: b5:53:da:0c:c0:df:62:1a:56:fb:ca:2c:7d:69:5c:9e:b8:49: 76:4c:c9:6b:51:d7:c6:34:95:15:c2:87:f8:16:b8:bd:45:16: 85:88:1b:92:31:74:58:b8:3f:04:89:09:da:6e:92:32:9b:92: 4b:ca:78:b5:96:29:3f:39:19:19:51:8b:ae:d6:0b:ba:9c:04: d3:d9:47:73:03:5e:d1:8b:37:41:86:d1:fa:6e:57:b1:0c:bb: b4:8a:22:89:2d:e6:c0:b4:48:db:52:3c:be:e4:48:b2:ec:10: a9:7a:3b:55:0c:4b:fc:fd:b5:c4:c9:4f:af:66:c2:b7:b0:e0: d5:11:c6:fc:e0:ed:5c:6a:04:58:a4:a8:72:60:a5:f8:a1:38: 07:64:79:a7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqeljk/8es+si8/FiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MmExYTJjNWUtNmNhMC00OTViLWI3OTgtOTc5ZTNhMTQ4ODZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomvkkuQkT443krWaVmy431CNbcu++9+xmHw8 bYP4AorxBm+60lTJYwwXgifZe9ZlkRo248j7XuaWiUj34wK+UlzawxjpejsDUjoP Ek/kMzify+/WGmsEt3XlGQJq1+EVT5m1V1EYT2SJRNiDraX7TT/wPYsrIdQohCT3 9iqwtNJe61LtqqH1XIVQnuqgG+aUvp84HywYCr2ixjICbbQ38qOAjQpgDyvabrya xkiu1pmIiSzmIBTYIa/SvcGPsmtNa4YVGdyyg3GNuPm1KTaXyb+EHFrjqjjUUwGo M6EJDkw9UktDrGThhiNw2msIm+8xbSbU/hvsdrqAebTSmmRx/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHeDmMW7HdbchoUCZnXQIpOjXyzvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2I4ZTc0ZjgtN2EyZi0z ZDg1LTk0NWEtZDNlMTU5MGJiYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB7BM1QLQiia7Spl/HqQHTfF3jGuLZGkScV1sKRA//vl+1mwZsPxKTG ZfIx8ZikXWactf0F75TBvvzmsFxmoHwonAiF6ZKYab4HW8kuR1EZUGrl5lct0CzP 1B7XkUg7+O+1tzmzkGAzod84oP61U9oMwN9iGlb7yix9aVyeuEl2TMlrUdfGNJUV wof4Fri9RRaFiBuSMXRYuD8EiQnabpIym5JLyni1lik/ORkZUYuu1gu6nATT2Udz A17RizdBhtH6blexDLu0iiKJLebAtEjbUjy+5Eiy7BCpejtVDEv8/bXEyU+vZsK3 sODVEcb84O1cagRYpKhyYKX4oTgHZHmn -----END CERTIFICATE-----Generated at Mon Aug 4 15:02:04 2025 by rpki-client