$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd4c72a8-5672-3004-8b49-d08829b1d2eb.roa File: dd4c72a8-5672-3004-8b49-d08829b1d2eb.roa (raw, json) Hash identifier: Fs5byKgCP7rLbVKqysfXi4Ff140DuhARH+OI+tI2I3E= Subject key identifier: ED:5F:DD:B6:E3:A8:DD:22:EF:5B:F3:96:84:A7:40:14:60:B8:F7:76 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963A85C5BEC3CCFA424700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd4c72a8-5672-3004-8b49-d08829b1d2eb.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396541 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:3a:85:c5:be:c3:cc:fa:42:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=63b1fff1-d37e-407e-b4df-35a5a8a9ec45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bd:e8:88:6f:5d:03:67:f3:a4:1e:b7:ca:ef: d0:42:86:6c:56:ea:ec:14:70:a6:6e:20:fa:f8:74: d8:c2:77:99:99:de:ac:b2:02:93:f8:af:e2:31:86: 99:48:e5:6a:44:37:31:c7:7b:30:9c:a5:20:69:2f: 53:6a:f1:bf:14:ad:ae:ca:49:4c:66:95:e5:2d:40: bc:26:de:92:c9:ea:19:8e:25:da:1c:5a:6b:ec:78: bc:5c:47:7e:90:19:ab:0e:83:f5:f5:ec:88:f5:08: 6e:05:b2:02:ee:7d:a0:3d:2e:e6:8c:dd:5a:14:23: 60:80:6a:62:1b:9f:0e:05:43:db:cd:00:f9:e2:74: 93:f7:0d:da:8e:9f:d1:a8:88:d0:f9:00:90:bb:d6: dd:44:57:65:99:2f:c3:43:13:94:06:ae:ee:fe:4f: 76:02:fe:36:75:90:48:db:46:26:71:1d:e4:18:94: ee:38:fe:51:6b:18:57:af:af:a8:10:c9:46:61:11: 15:50:d2:0a:0d:7f:bf:cf:20:19:1e:f8:78:c8:bc: 9c:fa:4b:da:69:22:04:4b:73:52:21:53:40:59:8d: a0:13:6b:1f:1f:95:c6:ec:f4:d7:62:7f:5c:d1:0e: 51:b0:45:eb:90:ab:b4:6c:f6:84:5a:13:74:9f:7b: f9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5F:DD:B6:E3:A8:DD:22:EF:5B:F3:96:84:A7:40:14:60:B8:F7:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd4c72a8-5672-3004-8b49-d08829b1d2eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:5a:29:11:65:bd:c3:58:3d:df:a5:2f:56:43:44:75:fc:b3: b7:86:00:a4:50:b1:d0:1d:4b:c6:a2:22:92:70:c9:1f:a6:5d: 36:64:1c:cf:b6:92:96:7a:de:30:90:76:c9:56:31:27:ab:9c: f4:ae:25:7a:98:c7:55:bf:78:1a:f4:4e:13:7a:d8:31:57:eb: fe:d1:fc:6b:ca:78:47:5d:34:46:32:84:0e:4d:0c:b7:b0:d0: 10:5b:1f:ae:2f:80:d8:15:39:7f:3a:8d:38:97:79:40:9b:e3: d7:dc:cf:7f:c6:a6:ac:2b:46:75:d1:aa:8d:29:ed:b6:5e:6a: ba:79:ef:10:13:02:02:96:12:be:e5:dd:ff:17:cf:66:fc:b9: 3a:d2:45:10:cc:e2:26:bc:c1:d9:4d:df:29:02:35:3c:36:e8: 90:0e:d3:98:59:e4:c0:b0:98:f0:d0:7b:9d:ae:e8:cd:22:22: 97:33:65:df:72:69:56:6e:bd:f5:34:22:17:65:b3:7c:17:42: ca:e5:06:a4:3a:0b:ba:2f:8b:1c:63:b0:3f:35:14:84:aa:54: d8:bb:60:e9:7e:2e:4f:b5:f4:aa:85:5a:df:fb:8f:9f:ee:a4: e8:b0:63:c4:29:47:8a:ba:03:93:26:d0:2c:72:74:25:b5:b2: 87:9a:29:b4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqeljqFxb7DzPpCRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NjNiMWZmZjEtZDM3ZS00MDdlLWI0ZGYtMzVhNWE4YTllYzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL3oiG9dA2fzpB63yu/QQoZsVursFHCmbiD6 +HTYwneZmd6ssgKT+K/iMYaZSOVqRDcxx3swnKUgaS9TavG/FK2uyklMZpXlLUC8 Jt6SyeoZjiXaHFpr7Hi8XEd+kBmrDoP19eyI9QhuBbIC7n2gPS7mjN1aFCNggGpi G58OBUPbzQD54nST9w3ajp/RqIjQ+QCQu9bdRFdlmS/DQxOUBq7u/k92Av42dZBI 20YmcR3kGJTuOP5RaxhXr6+oEMlGYREVUNIKDX+/zyAZHvh4yLyc+kvaaSIES3NS IVNAWY2gE2sfH5XG7PTXYn9c0Q5RsEXrkKu0bPaEWhN0n3v5zwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO1f3bbjqN0i71vzloSnQBRguPd2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGQ0YzcyYTgtNTY3Mi0z MDA0LThiNDktZDA4ODI5YjFkMmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAeWikRZb3DWD3fpS9WQ0R1/LO3hgCkULHQHUvGoiKScMkfpl02ZBzP tpKWet4wkHbJVjEnq5z0riV6mMdVv3ga9E4TetgxV+v+0fxrynhHXTRGMoQOTQy3 sNAQWx+uL4DYFTl/Oo04l3lAm+PX3M9/xqasK0Z10aqNKe22Xmq6ee8QEwIClhK+ 5d3/F89m/Lk60kUQzOImvMHZTd8pAjU8NuiQDtOYWeTAsJjw0HudrujNIiKXM2Xf cmlWbr31NCIXZbN8F0LK5QakOgu6L4scY7A/NRSEqlTYu2Dpfi5PtfSqhVrf+4+f 7qTosGPEKUeKugOTJtAscnQltbKHmim0 -----END CERTIFICATE-----Generated at Mon Aug 4 16:05:50 2025 by rpki-client