$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3d98473-927e-303b-8f85-d4838579f165.roa File: d3d98473-927e-303b-8f85-d4838579f165.roa (raw, json) Hash identifier: C204gRK/o0M7PxQ+q742JC+3bGQ6zElCGFXukYXp5k4= Subject key identifier: 5C:FE:84:C5:EA:DC:13:56:0C:C2:76:99:B2:EC:FD:CD:6B:64:41:87 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E96419DD087B965FC532900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3d98473-927e-303b-8f85-d4838579f165.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396571 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:41:9d:d0:87:b9:65:fc:53:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=8242ac0a-1a15-4df6-8423-75cb78d9e7da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d5:fe:92:a3:6c:88:08:b5:39:a1:40:c1:ff: 3e:50:09:3d:40:d1:13:0d:61:b6:16:28:4e:7c:24: 8b:0b:29:2c:dd:bd:43:04:72:46:cc:21:88:30:ae: bc:be:f8:b1:19:38:98:f7:62:43:f2:d5:68:02:ab: 8b:db:d2:ad:9c:13:1e:26:df:9a:ef:a0:ad:3a:bf: 99:f1:0b:a8:db:65:73:db:2c:32:46:aa:e3:97:88: ef:37:be:cf:69:c2:b3:39:b2:e6:f8:f4:9b:1f:4d: fc:67:9f:e2:04:6b:4a:4d:54:57:f0:8e:fd:19:cc: 88:e3:dc:f1:c1:b4:23:bf:93:e6:2b:10:cc:22:e2: 78:de:b0:3d:eb:ba:68:81:08:68:d9:aa:b9:8e:ea: 5b:d7:09:90:b3:c6:c7:0c:4b:2d:47:4f:66:6e:cb: 60:69:4f:f8:f9:58:a7:29:1e:fc:18:ef:cf:b4:35: 02:3a:81:d5:31:19:b5:32:ea:31:08:9c:fe:16:58: c4:ee:4a:60:a8:8a:75:e4:ac:01:3d:90:36:84:76: a8:cf:a9:1b:00:60:07:33:4f:0d:a0:55:11:65:37: e9:fb:d7:c4:3d:63:56:ef:b0:bd:65:75:b1:be:ba: 67:94:07:46:1b:ba:e3:3d:93:84:81:ae:b2:6d:91: f0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FE:84:C5:EA:DC:13:56:0C:C2:76:99:B2:EC:FD:CD:6B:64:41:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3d98473-927e-303b-8f85-d4838579f165.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:3e:36:3c:82:f7:f3:f2:da:ca:df:91:fc:18:9d:7a:5f:16: 96:3f:56:91:09:b4:0c:59:1b:83:a0:9f:10:4c:17:e2:02:c4: 2d:49:7a:00:21:bd:6e:05:e2:6a:c6:86:eb:1d:23:5c:7f:1c: d4:7c:fb:69:03:5d:33:5e:c6:6f:49:49:41:ef:80:4e:09:47: 6e:74:61:18:3e:72:a5:be:11:c8:9e:92:35:5e:a4:39:c9:d1: 56:32:49:b5:12:93:ec:79:ba:4b:35:b3:73:84:c5:32:41:e6: 78:9a:ce:42:cf:40:d9:bc:8d:51:e6:db:cb:53:82:f9:3b:53: 82:07:36:11:65:30:16:41:47:e4:f7:f9:51:c4:84:83:ed:89: 28:18:cd:0b:92:a2:3e:cc:2b:16:ce:44:c2:5b:e8:4a:9f:69: d1:50:7a:59:20:31:36:77:95:01:6c:77:4c:c6:48:30:51:e0: 25:31:6e:72:6e:01:73:5c:78:95:4b:08:13:de:29:c9:ac:8b: 31:fa:11:28:7c:da:5e:70:ae:17:d7:98:b2:a3:7a:99:cd:27: 82:eb:db:84:bc:67:51:d2:cb:8b:c5:58:d6:a0:1f:42:7e:5a: c2:6e:77:b1:a0:13:d3:a7:e2:8d:16:0f:d8:d2:10:b9:95:2b: 1e:c5:91:03 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelkGd0Ie5ZfxTKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ODI0MmFjMGEtMWExNS00ZGY2LTg0MjMtNzVjYjc4ZDllN2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNX+kqNsiAi1OaFAwf8+UAk9QNETDWG2FihO fCSLCyks3b1DBHJGzCGIMK68vvixGTiY92JD8tVoAquL29KtnBMeJt+a76CtOr+Z 8Quo22Vz2ywyRqrjl4jvN77PacKzObLm+PSbH038Z5/iBGtKTVRX8I79GcyI49zx wbQjv5PmKxDMIuJ43rA967pogQho2aq5jupb1wmQs8bHDEstR09mbstgaU/4+Vin KR78GO/PtDUCOoHVMRm1MuoxCJz+FljE7kpgqIp15KwBPZA2hHaoz6kbAGAHM08N oFURZTfp+9fEPWNW77C9ZXWxvrpnlAdGG7rjPZOEga6ybZHwBQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFz+hMXq3BNWDMJ2mbLs/c1rZEGHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDNkOTg0NzMtOTI3ZS0z MDNiLThmODUtZDQ4Mzg1NzlmMTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBLPjY8gvfz8trK35H8GJ16XxaWP1aRCbQMWRuDoJ8QTBfiAsQtSXoA Ib1uBeJqxobrHSNcfxzUfPtpA10zXsZvSUlB74BOCUdudGEYPnKlvhHInpI1XqQ5 ydFWMkm1EpPsebpLNbNzhMUyQeZ4ms5Cz0DZvI1R5tvLU4L5O1OCBzYRZTAWQUfk 9/lRxISD7YkoGM0LkqI+zCsWzkTCW+hKn2nRUHpZIDE2d5UBbHdMxkgwUeAlMW5y bgFzXHiVSwgT3inJrIsx+hEofNpecK4X15iyo3qZzSeC69uEvGdR0suLxVjWoB9C flrCbnexoBPTp+KNFg/Y0hC5lSsexZED -----END CERTIFICATE-----Generated at Wed Aug 6 09:31:02 2025 by rpki-client