$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b721686-3bd0-30a8-abbb-e701f8eff2e1.roa File: 5b721686-3bd0-30a8-abbb-e701f8eff2e1.roa (raw, json) Hash identifier: UToOuVcDpBlYKDHsFO88GXRnCQPdYC83rLhssLBayyk= Subject key identifier: DC:79:1A:32:4E:57:A0:8A:05:23:59:4D:21:D2:DF:5E:21:22:59:61 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E9642206D677CE43DB3387C Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b721686-3bd0-30a8-abbb-e701f8eff2e1.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396554 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:42:20:6d:67:7c:e4:3d:b3:38:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=ec95b40d-90cf-43da-83da-bebfc80d4fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:07:a0:1d:fc:ea:3a:7f:1d:0e:17:56:85:a5: 5c:a3:9d:3c:e7:5e:03:e9:7c:d9:33:45:2b:3c:cb: da:74:48:e1:65:b1:84:71:e7:50:ed:d1:76:af:a4: eb:54:73:ae:db:7f:2d:fd:7d:06:88:d4:5d:71:6c: 30:90:c4:86:90:b6:b2:ff:85:3e:ec:d9:00:d6:f3: 2d:0d:d4:f7:af:fd:0b:19:4b:a7:4e:73:e1:e5:90: 74:94:ad:2f:33:bf:1a:f3:93:bf:63:5b:5d:91:09: 55:84:39:d0:3c:61:b4:1c:97:40:85:ac:e3:f8:8d: e0:28:2d:5b:d0:d0:bd:3f:37:e8:3b:73:b4:73:d9: f7:f1:e1:bc:27:7d:82:06:62:b4:09:a9:bc:00:57: a7:65:c0:9a:d9:12:9e:9a:67:83:b4:18:b6:2a:1f: 20:2c:69:e5:2f:5a:14:b8:1d:3c:8f:74:96:87:9c: 29:76:34:e2:02:a5:66:9a:bb:4c:28:22:2f:9d:21: b3:44:2c:5d:85:de:83:61:62:7d:89:e2:0e:d3:a1: e0:cf:82:12:c6:1f:5b:93:1c:05:6c:9d:c0:94:e4: 79:03:bb:6d:a5:a3:a3:18:78:68:a3:18:d1:29:ea: c6:29:93:b5:4e:75:99:78:6b:9f:76:9a:a0:1c:14: e6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:79:1A:32:4E:57:A0:8A:05:23:59:4D:21:D2:DF:5E:21:22:59:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b721686-3bd0-30a8-abbb-e701f8eff2e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:6b:c9:4c:b1:be:bf:15:09:b3:66:2b:09:92:fe:e5:0f:d8: 38:4a:3d:44:53:f1:bb:8e:84:f8:66:32:2c:33:7a:3e:3b:a4: 7f:8d:85:5a:8b:34:03:23:5e:b8:40:85:28:9b:a6:a0:1e:08: 1e:90:4d:97:8a:8b:6f:23:69:89:a0:84:e2:d5:1f:4e:16:a5: 04:72:4f:b9:5f:2f:ec:7f:b4:0c:b9:89:4e:68:d0:e5:f7:7c: 8c:1c:bf:4c:81:06:fa:25:fe:df:cc:ce:90:64:62:23:4e:98: f8:53:23:f9:ff:b1:bc:05:c4:99:c5:63:a7:39:e0:85:f4:bb: 37:16:30:90:72:2b:6c:8e:85:7c:86:88:1e:9a:39:3f:8c:e7: 6d:d8:c7:46:e2:da:e5:e6:4a:82:97:ee:1a:68:56:9b:4f:92: b0:1f:41:ae:a0:8a:bb:34:af:b2:8f:e3:38:96:6d:78:fb:ee: c1:79:67:67:1e:79:01:13:dd:67:01:91:3a:d0:dd:ef:c8:14: 92:e4:8f:81:41:70:92:5e:7f:a9:b0:e1:26:d5:6a:b6:a0:df: d1:d6:0e:1a:42:28:87:bf:0d:08:8d:63:86:f0:bb:14:80:3c: 6e:84:aa:0b:29:7b:a9:d1:f5:2e:29:23:3b:49:e3:48:14:20: c0:75:d1:f8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelkIgbWd85D2zOHwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ZWM5NWI0MGQtOTBjZi00M2RhLTgzZGEtYmViZmM4MGQ0ZmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQegHfzqOn8dDhdWhaVco508514D6XzZM0Ur PMvadEjhZbGEcedQ7dF2r6TrVHOu238t/X0GiNRdcWwwkMSGkLay/4U+7NkA1vMt DdT3r/0LGUunTnPh5ZB0lK0vM78a85O/Y1tdkQlVhDnQPGG0HJdAhazj+I3gKC1b 0NC9PzfoO3O0c9n38eG8J32CBmK0Cam8AFenZcCa2RKemmeDtBi2Kh8gLGnlL1oU uB08j3SWh5wpdjTiAqVmmrtMKCIvnSGzRCxdhd6DYWJ9ieIO06Hgz4ISxh9bkxwF bJ3AlOR5A7ttpaOjGHhooxjRKerGKZO1TnWZeGufdpqgHBTm9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNx5GjJOV6CKBSNZTSHS314hIllhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWI3MjE2ODYtM2JkMC0z MGE4LWFiYmItZTcwMWY4ZWZmMmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBba8lMsb6/FQmzZisJkv7lD9g4Sj1EU/G7joT4ZjIsM3o+O6R/jYVa izQDI164QIUom6agHggekE2XiotvI2mJoITi1R9OFqUEck+5Xy/sf7QMuYlOaNDl 93yMHL9MgQb6Jf7fzM6QZGIjTpj4UyP5/7G8BcSZxWOnOeCF9Ls3FjCQcitsjoV8 hogemjk/jOdt2MdG4trl5kqCl+4aaFabT5KwH0GuoIq7NK+yj+M4lm14++7BeWdn HnkBE91nAZE60N3vyBSS5I+BQXCSXn+psOEm1Wq2oN/R1g4aQiiHvw0IjWOG8LsU gDxuhKoLKXup0fUuKSM7SeNIFCDAddH4 -----END CERTIFICATE-----Generated at Mon Aug 4 16:09:22 2025 by rpki-client