$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19523cd6-18e4-370d-89bc-41844d5a5a37.roa File: 19523cd6-18e4-370d-89bc-41844d5a5a37.roa (raw, json) Hash identifier: hqCKOGxBV3j4M7Ww+DwTuXpNyPCxzUuVC9MrmOBXhuo= Subject key identifier: E5:08:BD:86:20:CC:EE:6C:74:48:06:AC:74:17:D9:05:FC:A8:70:A1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E9638F4A2590B176BB92680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19523cd6-18e4-370d-89bc-41844d5a5a37.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396576 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:38:f4:a2:59:0b:17:6b:b9:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=ce5332f8-f1a8-4261-a614-1c12966a2ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:76:7a:0e:bb:64:84:a2:da:f9:1a:7e:90:eb: 54:a3:f0:cf:87:f2:f6:3e:d2:b1:57:8d:7a:be:17: c3:58:eb:13:ac:5a:a4:ab:3e:75:06:2a:29:09:99: 29:28:7d:3b:aa:bf:eb:78:e6:6a:88:55:01:c6:6f: b3:fa:09:b9:bb:1f:76:1d:fb:2b:86:dd:ff:33:4e: 4d:81:f9:0d:a4:31:93:88:1f:e5:bd:a1:35:67:a8: 39:f8:4e:74:51:a7:92:5b:f7:40:da:82:d3:cd:0f: 73:47:b7:1e:7b:35:5b:55:a5:e1:9b:75:e0:35:d4: 37:01:03:01:05:10:79:37:b9:47:ec:93:3a:1f:b3: 5d:24:da:d3:bf:e2:55:4f:b2:b0:c5:f5:27:b6:92: fa:31:a5:a8:1c:73:f4:90:49:ec:5d:71:c9:e7:e6: 77:a5:97:1c:ad:0c:8c:5d:b1:ae:de:be:45:31:ed: 3a:b8:44:fd:64:f1:f2:4d:12:5d:49:8c:7e:80:da: bc:82:f8:66:53:46:61:35:37:54:96:0d:86:ac:56: d1:71:1c:df:e2:31:b7:d4:98:63:22:5f:19:46:76: 6e:96:64:b1:4e:4f:9e:9d:d2:78:02:c5:30:e6:28: 0e:6b:4e:11:b0:83:11:f0:0b:fa:dc:eb:0d:aa:48: 88:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:08:BD:86:20:CC:EE:6C:74:48:06:AC:74:17:D9:05:FC:A8:70:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19523cd6-18e4-370d-89bc-41844d5a5a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:6f:bf:38:60:0e:8f:3f:b1:15:c8:64:3d:5c:89:ee:7b:07: 79:39:b2:5d:75:60:15:5b:18:48:fd:34:80:e4:56:82:0e:ca: 42:4a:77:50:a7:be:81:07:75:ea:f6:bb:cd:48:a2:ab:fa:87: 8b:9f:bd:78:a6:b1:81:7c:4c:e4:a1:a5:f8:3c:e3:92:e1:7c: b4:4e:ad:ab:53:b8:09:70:dd:d3:9d:b1:f7:6d:2a:59:5a:7f: f2:9a:9a:d7:27:73:af:eb:4d:2f:c5:d6:73:08:3e:b2:5b:e5: 25:b7:af:20:8c:03:98:fc:18:07:33:10:64:49:66:ed:1c:64: ef:61:4f:1d:80:3a:99:3d:51:aa:3e:2b:aa:f8:35:98:4a:ba: ca:6c:fb:e3:7a:da:74:5c:05:31:4d:25:f3:b3:1b:0b:10:89: 58:4b:aa:7c:b8:eb:92:2c:a8:45:57:3c:90:0b:fc:73:bc:14: 85:a6:d4:b4:84:c0:2a:d0:50:94:b4:13:69:98:2b:aa:a6:7e: ea:32:d8:37:f5:0f:d9:28:38:17:85:31:d0:fa:4b:88:e3:00: 02:f1:e4:7d:f4:51:3c:68:7e:61:4b:11:d4:1e:b9:05:01:e5: cf:02:dc:b9:94:83:70:9f:d9:27:e3:58:87:38:2a:b3:34:d1: f7:e5:aa:9c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqeljj0olkLF2u5JoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk Y2U1MzMyZjgtZjFhOC00MjYxLWE2MTQtMWMxMjk2NmEyZmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3Z6DrtkhKLa+Rp+kOtUo/DPh/L2PtKxV416 vhfDWOsTrFqkqz51BiopCZkpKH07qr/reOZqiFUBxm+z+gm5ux92Hfsrht3/M05N gfkNpDGTiB/lvaE1Z6g5+E50UaeSW/dA2oLTzQ9zR7ceezVbVaXhm3XgNdQ3AQMB BRB5N7lH7JM6H7NdJNrTv+JVT7KwxfUntpL6MaWoHHP0kEnsXXHJ5+Z3pZccrQyM XbGu3r5FMe06uET9ZPHyTRJdSYx+gNq8gvhmU0ZhNTdUlg2GrFbRcRzf4jG31Jhj Il8ZRnZulmSxTk+endJ4AsUw5igOa04RsIMR8Av63OsNqkiIKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOUIvYYgzO5sdEgGrHQX2QX8qHChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTk1MjNjZDYtMThlNC0z NzBkLTg5YmMtNDE4NDRkNWE1YTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBGb784YA6PP7EVyGQ9XInuewd5ObJddWAVWxhI/TSA5FaCDspCSndQ p76BB3Xq9rvNSKKr+oeLn714prGBfEzkoaX4POOS4Xy0Tq2rU7gJcN3TnbH3bSpZ Wn/ymprXJ3Ov600vxdZzCD6yW+Ult68gjAOY/BgHMxBkSWbtHGTvYU8dgDqZPVGq Piuq+DWYSrrKbPvjetp0XAUxTSXzsxsLEIlYS6p8uOuSLKhFVzyQC/xzvBSFptS0 hMAq0FCUtBNpmCuqpn7qMtg39Q/ZKDgXhTHQ+kuI4wAC8eR99FE8aH5hSxHUHrkF AeXPAty5lINwn9kn41iHOCqzNNH35aqc -----END CERTIFICATE-----Generated at Wed Aug 6 11:16:33 2025 by rpki-client