$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a330572-11ec-38af-8cb4-336bebb4e3df.roa File: 1a330572-11ec-38af-8cb4-336bebb4e3df.roa (raw, json) Hash identifier: 8gIs/n+0w+nk+g1dpEo1xjDMQE4Hxptj/w+w9en+clo= Subject key identifier: 2C:FA:C5:2C:4B:6C:48:73:97:3C:6B:17:86:A1:D4:18:93:74:5A:61 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E96403CE6B27D50CCB72A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a330572-11ec-38af-8cb4-336bebb4e3df.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 36625 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:40:3c:e6:b2:7d:50:cc:b7:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=2357d493-14a5-4b92-b4ad-a7956b6a8989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:50:0c:81:0e:6c:87:73:07:ed:a0:2a:8d:dd: 9b:11:16:33:d9:ae:4d:38:47:ee:c5:e8:b4:ab:cf: 9d:8f:8c:f0:72:37:37:5a:11:65:7b:ac:5d:c9:de: b1:b8:91:89:aa:70:e8:a3:87:ab:9a:fe:97:91:ce: 6a:61:78:9b:29:36:6e:4e:de:40:31:67:49:51:3d: 68:da:06:9e:e9:a2:06:42:9d:92:d6:71:67:a7:c9: e2:e3:be:92:d7:3f:67:b5:77:65:3f:52:91:f9:ab: 43:f7:b2:f3:81:b3:ac:30:26:aa:46:3a:4b:09:3e: 64:e9:52:99:bd:74:bf:94:8f:6a:92:c1:54:a3:38: 76:ba:48:86:2e:ea:9e:f4:6e:6d:ca:d9:16:93:b3: 61:ed:0c:2f:d4:eb:6a:8b:da:cd:b7:8c:63:2d:8c: 52:50:81:73:38:60:5c:af:30:83:25:94:13:28:66: 12:dc:e8:04:8d:5f:3d:6d:f2:87:73:02:ce:97:40: c2:ab:c4:5b:02:8a:b1:03:2f:ad:2b:b3:e5:81:0c: cf:9c:27:b2:9e:05:91:53:08:3b:3b:f9:30:1c:c5: 1b:54:81:21:e7:07:b2:2d:5d:d0:f7:56:ca:07:2f: 66:b1:fe:95:ce:26:b1:61:26:13:af:57:7c:bd:02: 4c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:FA:C5:2C:4B:6C:48:73:97:3C:6B:17:86:A1:D4:18:93:74:5A:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a330572-11ec-38af-8cb4-336bebb4e3df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:06:b7:b1:cb:ae:be:f1:48:59:b8:6f:8f:db:41:a4:bc:3b: fe:52:75:38:22:09:05:1b:b5:03:4f:cc:78:6c:1a:4d:7a:ac: e2:1c:6d:77:c3:67:b6:54:7b:ca:07:72:0f:59:98:c8:e2:eb: f4:2a:0d:14:a3:58:71:53:f6:33:d7:7e:79:e8:3e:01:3b:3a: 96:cf:f7:8c:e0:ba:8a:74:35:42:15:76:81:b0:c1:3d:6a:aa: da:42:b3:8b:03:98:36:16:3c:57:bf:12:ff:32:f7:a4:2f:5c: cd:33:fb:57:ba:0a:0a:bb:e7:c3:78:a6:2a:f3:b3:95:19:e2: fe:87:5e:38:36:f6:f3:fe:6d:c0:2c:29:39:16:f2:ab:4c:8f: 28:0d:05:43:b0:52:f6:49:22:e8:c0:66:55:4d:cc:31:b0:a0: ff:39:80:cc:30:52:13:74:18:08:05:a6:41:dc:33:73:52:f6: 7c:17:b5:52:b8:7d:bb:aa:81:72:ce:2f:45:a6:af:52:94:55: c1:27:20:4e:e0:88:02:29:d7:fe:8e:42:8d:52:87:45:a2:81: a6:6e:8c:9f:04:d8:58:40:d1:37:d8:b0:fb:99:a0:f8:b6:2e: f0:7d:24:aa:18:6b:0f:54:2c:96:cc:76:0b:26:c9:83:d2:8d: 0a:83:e1:37 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelkA85rJ9UMy3KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MjM1N2Q0OTMtMTRhNS00YjkyLWI0YWQtYTc5NTZiNmE4OTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFAMgQ5sh3MH7aAqjd2bERYz2a5NOEfuxei0 q8+dj4zwcjc3WhFle6xdyd6xuJGJqnDoo4ermv6Xkc5qYXibKTZuTt5AMWdJUT1o 2gae6aIGQp2S1nFnp8ni476S1z9ntXdlP1KR+atD97LzgbOsMCaqRjpLCT5k6VKZ vXS/lI9qksFUozh2ukiGLuqe9G5tytkWk7Nh7Qwv1Otqi9rNt4xjLYxSUIFzOGBc rzCDJZQTKGYS3OgEjV89bfKHcwLOl0DCq8RbAoqxAy+tK7PlgQzPnCeyngWRUwg7 O/kwHMUbVIEh5weyLV3Q91bKBy9msf6VziaxYSYTr1d8vQJMhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCz6xSxLbEhzlzxrF4ah1BiTdFphMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWEzMzA1NzItMTFlYy0z OGFmLThjYjQtMzM2YmViYjRlM2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB1Brexy66+8UhZuG+P20GkvDv+UnU4IgkFG7UDT8x4bBpNeqziHG13 w2e2VHvKB3IPWZjI4uv0Kg0Uo1hxU/Yz13556D4BOzqWz/eM4LqKdDVCFXaBsME9 aqraQrOLA5g2FjxXvxL/MvekL1zNM/tXugoKu+fDeKYq87OVGeL+h144Nvbz/m3A LCk5FvKrTI8oDQVDsFL2SSLowGZVTcwxsKD/OYDMMFITdBgIBaZB3DNzUvZ8F7VS uH27qoFyzi9Fpq9SlFXBJyBO4IgCKdf+jkKNUodFooGmboyfBNhYQNE32LD7maD4 ti7wfSSqGGsPVCyWzHYLJsmD0o0Kg+E3 -----END CERTIFICATE-----Generated at Wed Aug 6 13:15:27 2025 by rpki-client