$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de129a61-130f-3c6a-a5f8-4e5cc77abb17.roa File: de129a61-130f-3c6a-a5f8-4e5cc77abb17.roa (raw, json) Hash identifier: DpUK43tEiBmKO39Pt6+5yIArR+9JRJ8yedS3srSpzK0= Subject key identifier: 7D:E8:D1:8A:54:D0:AB:47:85:C7:11:7D:50:DD:4E:2B:A4:3D:D3:B2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963B1FBA1DA4EA2B27D400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de129a61-130f-3c6a-a5f8-4e5cc77abb17.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396563 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:3b:1f:ba:1d:a4:ea:2b:27:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=dce9ce63-a5e0-45af-a1b9-c841533d66fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:65:ae:da:99:dc:7b:cc:1b:45:fd:f8:2c:15: e9:c6:60:f8:f5:36:69:8b:11:ed:57:c2:97:ee:04: 39:cf:0e:be:45:7a:95:b7:48:e7:21:5a:34:ea:cf: 56:5f:f3:78:73:a7:ce:93:9e:d8:a8:8d:2d:4f:12: a4:d1:8b:b1:86:84:81:fb:55:32:97:88:a5:d8:5f: 36:b8:5a:b5:1b:ab:ee:f3:ed:b3:d8:62:55:d9:16: d2:1c:d7:d6:cb:77:37:64:15:26:48:1c:76:6f:86: 21:19:ad:56:3d:11:22:f2:96:b3:79:65:04:a6:51: e0:cb:42:59:fd:fd:14:a1:6d:df:ba:8e:08:a1:4a: 9f:e1:83:f6:66:69:0e:f5:d2:cd:d6:2f:da:9f:9f: 84:88:24:9b:c1:5d:b0:79:78:92:04:03:24:6e:60: ed:f0:b1:63:b0:27:71:16:73:03:94:79:35:12:38: 58:02:ab:9f:eb:72:c2:ad:53:62:33:36:b9:7c:fb: 9f:d4:4d:6b:79:7c:d2:9d:54:26:62:fa:e4:1a:6a: 94:73:5f:87:80:5d:cc:b4:e3:61:b4:49:a0:7d:83: c3:60:fc:ed:2a:dd:be:19:3f:0d:f9:55:8b:83:b9: 16:cf:2a:34:af:09:50:9a:70:bb:c4:34:58:3e:a0: e8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E8:D1:8A:54:D0:AB:47:85:C7:11:7D:50:DD:4E:2B:A4:3D:D3:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de129a61-130f-3c6a-a5f8-4e5cc77abb17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:94:ab:d0:87:ed:cd:b6:05:6f:bf:ad:fb:47:56:d4:a1:5c: 1c:45:83:8d:dc:6c:0d:a0:d3:a3:fa:f3:96:a3:74:68:b9:f9: 88:ff:5e:e1:5f:74:8c:78:9a:7b:98:9c:09:99:31:ef:fd:45: a9:f7:fd:e5:ea:b2:24:0a:7d:7b:b6:80:5d:c9:51:15:95:16: e3:35:f3:90:fc:1d:5d:60:b4:5a:99:05:28:c5:26:00:5c:aa: 56:f9:5a:bc:67:79:50:70:ea:93:96:75:e9:dc:09:80:5e:8b: 4c:32:76:be:e8:80:e4:3d:ef:0a:1c:f0:cb:72:60:ff:81:92: f2:3a:fd:26:c9:e7:4c:f1:62:46:2b:91:10:0f:4e:ba:fe:06: 11:48:4a:c9:49:3a:a8:c1:19:5b:8e:42:3a:ef:8c:3c:6b:9a: 5e:0d:04:72:5e:35:35:c0:9b:ff:39:8a:27:4b:0d:63:21:63: 2b:76:48:fc:d2:1d:16:5e:f6:fd:c8:4e:ff:9e:83:8c:5c:72: c5:65:84:68:72:e6:b4:5e:50:43:01:e5:c5:35:bb:a5:f4:a0: de:24:03:95:c5:e7:f0:d1:93:2f:99:ae:58:51:2a:24:9a:00: bf:a9:87:c5:08:7f:7d:77:fc:e9:24:ee:dd:cf:ce:1a:b5:41: 35:ba:88:53 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqeljsfuh2k6isn1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ZGNlOWNlNjMtYTVlMC00NWFmLWExYjktYzg0MTUzM2Q2NmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GWu2pnce8wbRf34LBXpxmD49TZpixHtV8KX 7gQ5zw6+RXqVt0jnIVo06s9WX/N4c6fOk57YqI0tTxKk0YuxhoSB+1Uyl4il2F82 uFq1G6vu8+2z2GJV2RbSHNfWy3c3ZBUmSBx2b4YhGa1WPREi8pazeWUEplHgy0JZ /f0UoW3fuo4IoUqf4YP2ZmkO9dLN1i/an5+EiCSbwV2weXiSBAMkbmDt8LFjsCdx FnMDlHk1EjhYAquf63LCrVNiMza5fPuf1E1reXzSnVQmYvrkGmqUc1+HgF3MtONh tEmgfYPDYPztKt2+GT8N+VWLg7kWzyo0rwlQmnC7xDRYPqDoWwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH3o0YpU0KtHhccRfVDdTiukPdOyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGUxMjlhNjEtMTMwZi0z YzZhLWE1ZjgtNGU1Y2M3N2FiYjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBblKvQh+3NtgVvv637R1bUoVwcRYON3GwNoNOj+vOWo3RoufmI/17h X3SMeJp7mJwJmTHv/UWp9/3l6rIkCn17toBdyVEVlRbjNfOQ/B1dYLRamQUoxSYA XKpW+Vq8Z3lQcOqTlnXp3AmAXotMMna+6IDkPe8KHPDLcmD/gZLyOv0myedM8WJG K5EQD066/gYRSErJSTqowRlbjkI674w8a5peDQRyXjU1wJv/OYonSw1jIWMrdkj8 0h0WXvb9yE7/noOMXHLFZYRocua0XlBDAeXFNbul9KDeJAOVxefw0ZMvma5YUSok mgC/qYfFCH99d/zpJO7dz84atUE1uohT -----END CERTIFICATE-----Generated at Mon Aug 4 16:13:34 2025 by rpki-client