$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbae136a-600c-3ec1-8570-5618e3baf9b7.roa File: dbae136a-600c-3ec1-8570-5618e3baf9b7.roa (raw, json) Hash identifier: niN9AQ5fDY2LQ3yv+8rarJlbeOegD9XKL24KCvsuhQQ= Subject key identifier: BD:C1:25:FA:3E:0A:51:B8:67:58:DC:F8:FF:F2:9A:18:C5:A3:86:A5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E9643E7CE29788EB1729C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbae136a-600c-3ec1-8570-5618e3baf9b7.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 36631 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:43:e7:ce:29:78:8e:b1:72:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=2a7f911d-3ceb-4164-90af-dcd2887e6d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f9:9e:9e:fc:3d:b4:92:84:ce:63:b6:98:4d: 9f:9a:73:65:d1:81:e1:f7:ad:96:38:14:64:d1:f9: d7:1e:55:22:54:53:22:b1:d9:c5:a7:07:ae:58:42: f3:ce:d1:62:f1:90:ba:25:65:fb:cc:60:2d:b2:d7: 2d:61:d8:e2:49:76:a5:b0:03:ec:7a:a8:1b:3d:94: 61:be:6c:3d:d4:c5:3b:03:55:91:13:d8:b4:ab:1e: ab:1e:d2:d8:3c:30:d4:e9:6a:fc:9e:d2:6b:2d:9a: 48:e0:d9:ae:2e:59:c4:b2:c2:f8:60:3c:89:65:18: bb:45:e3:2f:ee:8b:93:0f:9f:d0:ad:9c:28:69:ab: 01:06:b7:92:7f:eb:c1:d4:d1:50:a0:24:55:fe:b0: 54:24:30:be:2c:a1:97:1d:af:16:1d:6c:9c:66:26: 5f:e2:31:f8:83:0a:f4:db:30:81:a7:27:a5:f2:dd: 4e:1a:06:5e:0a:2b:27:41:3f:c0:9b:d2:dd:c7:f8: 67:80:bf:85:c1:2b:82:1f:76:13:af:87:09:d3:28: c0:72:17:be:57:b6:5b:08:70:ee:49:a5:0a:de:55: eb:18:94:59:66:16:4c:bd:44:31:b9:33:59:6a:75: 5e:70:03:7e:e6:3e:2f:e9:f7:ce:31:d2:3f:84:2f: 62:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C1:25:FA:3E:0A:51:B8:67:58:DC:F8:FF:F2:9A:18:C5:A3:86:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbae136a-600c-3ec1-8570-5618e3baf9b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:3b:f1:05:43:f8:6b:3d:de:80:92:8c:87:30:e1:fe:83:fd: 7c:c7:83:c0:d7:9b:87:01:1b:93:c5:ba:fb:a5:2e:e2:fb:9f: 98:70:38:b2:5a:83:c2:5b:57:1f:8c:f9:f4:f0:4f:a3:ee:18: ff:73:57:76:51:d7:be:e1:4b:97:a3:69:75:54:fb:2e:0a:c4: a2:15:cd:26:90:66:30:d4:9a:12:33:91:4d:bb:48:fb:f4:9d: bf:47:3e:dd:ad:42:b5:18:0d:81:2d:6d:ef:fd:ce:58:81:6e: 14:9c:e5:66:ef:81:79:ed:f5:d2:f5:9e:1a:58:6f:9f:d1:94: 1f:5c:bb:93:9c:83:2d:22:69:0c:88:4d:9b:bb:68:bb:38:e1: 81:29:94:07:91:8f:79:e2:6e:2d:17:49:4a:0c:78:6f:4e:2e: da:62:62:0f:75:ff:3e:a3:62:9c:c5:36:c2:d1:dc:04:b0:03: 44:11:39:76:61:55:37:18:69:c5:2a:de:69:b5:78:f2:b4:97: 56:f0:53:b2:4d:67:8f:7e:55:36:34:27:5b:71:ff:76:92:fa: 7c:56:bc:9c:36:c3:f8:d2:75:93:1e:10:fc:7d:f4:b8:e6:f4: f9:e2:db:83:11:34:82:03:20:d5:91:49:34:47:c8:fe:68:35: 6a:9c:f0:a2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelkPnzil4jrFynAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MmE3ZjkxMWQtM2NlYi00MTY0LTkwYWYtZGNkMjg4N2U2ZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvmenvw9tJKEzmO2mE2fmnNl0YHh962WOBRk 0fnXHlUiVFMisdnFpweuWELzztFi8ZC6JWX7zGAtstctYdjiSXalsAPseqgbPZRh vmw91MU7A1WRE9i0qx6rHtLYPDDU6Wr8ntJrLZpI4NmuLlnEssL4YDyJZRi7ReMv 7ouTD5/QrZwoaasBBreSf+vB1NFQoCRV/rBUJDC+LKGXHa8WHWycZiZf4jH4gwr0 2zCBpyel8t1OGgZeCisnQT/Am9Ldx/hngL+FwSuCH3YTr4cJ0yjAche+V7ZbCHDu SaUK3lXrGJRZZhZMvUQxuTNZanVecAN+5j4v6ffOMdI/hC9iPQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL3BJfo+ClG4Z1jc+P/ymhjFo4alMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGJhZTEzNmEtNjAwYy0z ZWMxLTg1NzAtNTYxOGUzYmFmOWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjO/EFQ/hrPd6AkoyHMOH+g/18x4PA15uHARuTxbr7pS7i+5+YcDiy WoPCW1cfjPn08E+j7hj/c1d2Ude+4UuXo2l1VPsuCsSiFc0mkGYw1JoSM5FNu0j7 9J2/Rz7drUK1GA2BLW3v/c5YgW4UnOVm74F57fXS9Z4aWG+f0ZQfXLuTnIMtImkM iE2bu2i7OOGBKZQHkY954m4tF0lKDHhvTi7aYmIPdf8+o2KcxTbC0dwEsANEETl2 YVU3GGnFKt5ptXjytJdW8FOyTWePflU2NCdbcf92kvp8VrycNsP40nWTHhD8ffS4 5vT54tuDETSCAyDVkUk0R8j+aDVqnPCi -----END CERTIFICATE-----Generated at Mon Aug 4 22:27:16 2025 by rpki-client