$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfc98d87-51b3-3316-896f-e0a483a854c6.roa File: dfc98d87-51b3-3316-896f-e0a483a854c6.roa (raw, json) Hash identifier: vAfA2D4Tu5GbMdNzPwC/fBClWYPwp0MYNIpHxTr6Cv0= Subject key identifier: 6F:EC:E6:DE:F7:74:CC:20:CC:01:E4:69:31:9E:D9:6C:C4:5D:9E:24 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E9641E07EA9A4CF8DA02A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfc98d87-51b3-3316-896f-e0a483a854c6.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 397198 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:41:e0:7e:a9:a4:cf:8d:a0:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=2b813dae-7355-45b8-a2f9-d330be9846ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:da:b4:36:e6:ba:ee:61:b0:fe:d0:7d:4a:7b: 40:f1:4a:b9:36:f6:1c:d6:60:a9:c6:64:b9:f7:28: e0:76:c5:3b:08:de:a3:50:72:7f:89:6e:80:07:8c: 90:ef:99:6a:04:3c:d4:82:93:bf:f7:3b:66:5f:b5: d4:7c:db:4e:79:f4:96:d9:de:61:ba:51:92:ab:e7: 53:19:ca:1d:5a:24:cb:81:05:41:c7:59:81:05:a6: c9:b1:23:4f:2a:e0:94:27:51:7a:cb:cc:8b:0e:19: ec:83:ba:c5:dd:5e:96:01:d5:78:a3:f9:86:28:c6: ee:5d:eb:0e:9e:9d:1d:08:08:dd:b9:52:8b:f7:0b: d3:41:8c:2d:da:eb:51:98:12:69:42:db:e3:66:f8: 82:9e:88:17:51:86:c3:e7:63:9d:ad:7e:3c:ce:7f: 95:98:72:8f:04:a7:6b:f9:13:b4:45:c9:1d:cd:dd: ae:d3:ec:31:cd:42:6f:d2:a0:9b:69:fc:c2:0b:13: 8e:3c:4f:cb:ec:02:05:76:b8:d7:bd:12:11:e3:59: 19:26:ce:f8:cc:bd:0f:3f:37:63:f6:c6:11:3e:35: 16:f8:08:ee:26:63:4a:db:82:7b:6e:a0:4d:3b:56: 58:a3:17:48:0c:01:42:40:b9:84:0d:52:f8:c1:95: 54:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EC:E6:DE:F7:74:CC:20:CC:01:E4:69:31:9E:D9:6C:C4:5D:9E:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfc98d87-51b3-3316-896f-e0a483a854c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:97:a1:8a:96:2f:ce:14:6e:08:7d:c6:ed:f5:c6:e9:b5:66: 68:c0:1f:a5:d6:f5:6c:ff:d2:a5:65:f4:91:02:99:58:25:f4: 82:12:c6:9b:37:21:ac:37:28:b4:d4:3d:2a:0e:45:12:b4:c4: db:e0:02:f7:0f:79:92:40:b6:60:ee:7c:c6:6d:70:a8:8b:f1: 9e:96:51:05:7d:b4:c4:98:21:1c:d5:85:86:52:d2:14:e2:d4: 49:aa:17:44:2f:fb:e1:e3:81:bb:d0:52:85:33:9e:e0:1e:c9: 8e:87:a5:58:c3:31:a2:60:4f:8f:3c:ba:82:8b:fc:5b:f1:08: b2:d5:90:4b:29:d2:18:4e:5e:9f:77:33:ee:fb:df:88:60:9a: 8c:9e:80:b6:35:26:3f:d9:d1:fc:0e:a2:a6:88:d4:3a:f1:f3: 02:10:95:9f:71:5e:3d:92:51:6b:af:66:5a:dc:24:02:a5:19: 96:5b:ad:47:d3:c4:91:88:55:08:d1:e0:36:0c:c7:d5:dc:65: 13:d3:9f:6a:dc:2f:31:02:2a:90:5a:f9:61:2b:24:25:e4:8f: cc:11:51:44:1b:a5:f2:ac:92:5c:28:87:93:71:7b:c4:22:02: c5:b9:cb:e6:14:8c:06:97:f6:9e:02:32:e0:64:23:06:fe:45: 23:4a:6d:82 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelkHgfqmkz42gKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MmI4MTNkYWUtNzM1NS00NWI4LWEyZjktZDMzMGJlOTg0NmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9q0Nua67mGw/tB9SntA8Uq5NvYc1mCpxmS5 9yjgdsU7CN6jUHJ/iW6AB4yQ75lqBDzUgpO/9ztmX7XUfNtOefSW2d5hulGSq+dT GcodWiTLgQVBx1mBBabJsSNPKuCUJ1F6y8yLDhnsg7rF3V6WAdV4o/mGKMbuXesO np0dCAjduVKL9wvTQYwt2utRmBJpQtvjZviCnogXUYbD52OdrX48zn+VmHKPBKdr +RO0Rckdzd2u0+wxzUJv0qCbafzCCxOOPE/L7AIFdrjXvRIR41kZJs74zL0PPzdj 9sYRPjUW+AjuJmNK24J7bqBNO1ZYoxdIDAFCQLmEDVL4wZVUrwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFG/s5t73dMwgzAHkaTGe2WzEXZ4kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGZjOThkODctNTFiMy0z MzE2LTg5NmYtZTBhNDgzYTg1NGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBbl6GKli/OFG4Ifcbt9cbptWZowB+l1vVs/9KlZfSRAplYJfSCEsab NyGsNyi01D0qDkUStMTb4AL3D3mSQLZg7nzGbXCoi/GellEFfbTEmCEc1YWGUtIU 4tRJqhdEL/vh44G70FKFM57gHsmOh6VYwzGiYE+PPLqCi/xb8Qiy1ZBLKdIYTl6f dzPu+9+IYJqMnoC2NSY/2dH8DqKmiNQ68fMCEJWfcV49klFrr2Za3CQCpRmWW61H 08SRiFUI0eA2DMfV3GUT059q3C8xAiqQWvlhKyQl5I/MEVFEG6XyrJJcKIeTcXvE IgLFucvmFIwGl/aeAjLgZCMG/kUjSm2C -----END CERTIFICATE-----Generated at Wed Aug 6 05:25:57 2025 by rpki-client