$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ea4ff8-a757-3282-be61-5854c9bdee32.roa File: 40ea4ff8-a757-3282-be61-5854c9bdee32.roa (raw, json) Hash identifier: c+PzItlmTTzR7Xh175EP6Q1P+1gveGoolcqF2Mg64Io= Subject key identifier: 42:7F:D1:00:32:01:11:AA:C1:ED:CF:F8:14:9D:2B:00:55:C0:18:3C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB22178122A1CFD8DAE808740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ea4ff8-a757-3282-be61-5854c9bdee32.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 0 IP address blocks: 209.112.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:78:12:2a:1c:fd:8d:ae:80:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=bef351c6-b3e0-4200-a620-a36c20c11234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:de:84:b5:9f:9d:a1:de:1a:b8:f8:28:76:30: 97:4d:d4:80:1f:c7:4d:5d:d4:f3:9c:d5:ea:d0:3f: a3:97:b1:81:98:18:d2:df:77:30:b1:f9:1a:55:74: b3:46:f4:fe:04:de:ab:b4:78:25:e1:ac:66:f5:92: 98:9f:78:eb:ae:5a:81:8c:d0:81:cf:3d:42:75:89: a1:f0:0b:88:9b:47:ba:3b:f2:09:80:d0:09:fd:0e: 4a:f8:32:b0:0f:3e:c3:42:1b:20:7e:64:03:a8:8f: 67:62:69:96:86:58:99:d3:e8:e8:eb:d6:0b:fb:2c: cb:e2:87:85:e5:ab:06:6e:b3:29:ef:32:e5:e1:2d: c6:8d:d4:20:a8:df:8e:20:ac:8e:62:a9:0b:00:da: 3c:b5:0c:14:c9:97:2a:4f:85:25:30:03:85:83:02: 8e:79:8f:60:24:a5:e0:f2:81:a3:de:5b:80:0b:12: f6:fc:19:1e:01:ad:37:e1:6c:45:88:d6:0b:d0:b1: ab:bc:e8:bc:c5:03:05:ea:fe:48:ee:ad:70:46:a6: f3:d4:09:2f:59:a5:e2:95:d7:20:97:14:6a:4c:36: 27:5e:c8:a9:51:9b:14:8d:7f:1b:44:d9:bd:2e:da: 41:87:e4:5f:0d:e9:92:f2:73:64:d8:a0:47:53:e6: 45:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7F:D1:00:32:01:11:AA:C1:ED:CF:F8:14:9D:2B:00:55:C0:18:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ea4ff8-a757-3282-be61-5854c9bdee32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:68:a3:1f:11:d3:4f:be:99:91:1e:9b:02:c2:7b:47:9a:33: 8c:3f:12:20:6d:f8:84:3c:23:c4:71:ea:23:7b:94:b4:70:60: fd:89:08:ab:e5:45:11:63:03:e7:59:20:d6:e1:5d:e4:e1:a2: 17:e9:09:58:ba:13:70:39:f9:17:e1:ef:39:f8:1d:68:bf:bc: 05:ec:ab:3b:24:e5:58:12:f7:f1:9f:26:fa:08:81:a4:b7:5a: bb:9a:58:71:e7:0c:09:a9:54:e2:a5:41:d2:d3:ab:70:61:ce: 1d:6c:cc:b5:cd:65:6c:90:7b:6a:7a:d6:aa:9e:19:77:c0:b9: 58:57:0d:0e:65:ff:7a:30:09:39:2f:ad:42:ed:e0:f4:9e:7a: 9e:e1:2a:8f:4e:87:b7:68:9d:d4:9e:2a:0b:ef:09:47:40:36: 41:2b:c6:17:91:48:f6:0f:66:9d:84:00:ae:86:bc:2a:6c:00: 94:ad:b0:31:89:10:a4:34:ad:4c:5e:61:26:ef:6f:e8:a7:61: 1e:8e:d0:c9:81:04:5c:2d:b2:11:81:11:68:13:a9:53:0d:2f: 3f:32:84:da:cc:cc:74:68:9e:fc:04:31:ea:8c:25:ca:e0:0d: ec:53:67:a1:a8:08:ef:45:da:fa:79:4b:a3:e9:f8:6a:be:ca: 31:a4:14:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIXgSKhz9ja6Ah0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk YmVmMzUxYzYtYjNlMC00MjAwLWE2MjAtYTM2YzIwYzExMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN6EtZ+dod4auPgodjCXTdSAH8dNXdTznNXq 0D+jl7GBmBjS33cwsfkaVXSzRvT+BN6rtHgl4axm9ZKYn3jrrlqBjNCBzz1CdYmh 8AuIm0e6O/IJgNAJ/Q5K+DKwDz7DQhsgfmQDqI9nYmmWhliZ0+jo69YL+yzL4oeF 5asGbrMp7zLl4S3GjdQgqN+OIKyOYqkLANo8tQwUyZcqT4UlMAOFgwKOeY9gJKXg 8oGj3luACxL2/BkeAa034WxFiNYL0LGrvOi8xQMF6v5I7q1wRqbz1AkvWaXildcg lxRqTDYnXsipUZsUjX8bRNm9LtpBh+RfDemS8nNk2KBHU+ZFnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ/0QAyARGqwe3P+BSdKwBVwBg8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDBlYTRmZjgtYTc1Ny0z MjgyLWJlNjEtNTg1NGM5YmRlZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZoox8R00++mZEemwLCe0eaM4w/EiBt+IQ8I8Rx6iN7lLRwYP2JCKvl RRFjA+dZINbhXeThohfpCVi6E3A5+Rfh7zn4HWi/vAXsqzsk5VgS9/GfJvoIgaS3 WruaWHHnDAmpVOKlQdLTq3Bhzh1szLXNZWyQe2p61qqeGXfAuVhXDQ5l/3owCTkv rULt4PSeep7hKo9Oh7dondSeKgvvCUdANkErxheRSPYPZp2EAK6GvCpsAJStsDGJ EKQ0rUxeYSbvb+inYR6O0MmBBFwtshGBEWgTqVMNLz8yhNrMzHRonvwEMeqMJcrg DexTZ6GoCO9F2vp5S6Pp+Gq+yjGkFL0= -----END CERTIFICATE-----Generated at Wed Aug 6 00:57:30 2025 by rpki-client