$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/628ecc28-b0d6-3862-a0f0-386f97e93f6f.roa File: 628ecc28-b0d6-3862-a0f0-386f97e93f6f.roa (raw, json) Hash identifier: 70Xj+nw0F1p0Lhl/fFd37fdfI+s1HHvlSLufAQbco78= Subject key identifier: 68:DF:FD:82:9D:C6:13:EA:CF:87:C4:60:DB:F0:6A:EA:F5:B4:36:B4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E9644DDEA7477E842052D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/628ecc28-b0d6-3862-a0f0-386f97e93f6f.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 25485 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:44:dd:ea:74:77:e8:42:05:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=108fe9f6-33d9-4d77-98d0-2054ad1cb74f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:de:f0:0e:a2:a6:2c:88:8d:ed:ad:59:4e:d0: e7:38:38:9b:e1:2a:67:93:45:5c:db:db:c8:54:a7: 0e:21:81:5f:e4:b1:ce:a1:b7:63:9d:fb:52:36:a7: 89:4a:38:6a:3b:f9:f6:bf:e4:fa:96:c6:ab:d8:2c: 77:3a:32:36:77:87:c9:8a:3d:a3:30:56:24:08:82: 62:94:4b:69:17:7a:54:c6:d0:de:89:6e:d3:99:c8: be:28:a7:2b:87:df:47:26:a8:c0:45:20:59:5a:97: c1:74:63:60:78:e0:92:d9:1d:cc:e1:dc:d9:b9:89: c0:61:c7:41:b3:1e:63:72:19:70:4e:53:ff:77:99: 00:f6:c4:a5:35:02:b4:40:db:3f:4a:4a:9d:f9:07: bf:db:cb:d3:37:d3:bc:9b:6c:d0:7c:0d:b6:43:f7: 99:42:14:ac:1a:eb:b9:2d:2b:2d:57:0b:41:09:86: 1e:75:a6:32:27:c0:67:df:d4:d1:7d:bc:a6:e6:29: f9:33:fe:ad:0e:22:ce:fd:f2:e0:06:91:33:ae:a2: 55:3f:fc:29:20:47:fb:78:7f:8f:84:74:a8:17:74: 7e:83:69:3f:22:08:cc:2e:48:38:a5:75:dc:e3:63: 6d:62:dd:ab:04:77:bf:f6:c0:3b:b0:91:ca:7d:89: eb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:DF:FD:82:9D:C6:13:EA:CF:87:C4:60:DB:F0:6A:EA:F5:B4:36:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/628ecc28-b0d6-3862-a0f0-386f97e93f6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:6f:16:a4:fd:7c:aa:b0:a3:cd:00:4d:6e:6a:6b:11:c6:f3: e9:f5:5f:92:99:9f:4e:de:84:8f:4e:cf:7f:1d:25:e8:2b:fe: 3a:fc:63:0a:b8:4a:a3:e5:81:fd:31:dc:d2:fa:7a:08:9d:05: 64:ed:0c:72:72:79:8c:d9:7b:41:31:94:45:ae:e8:a3:72:92: ae:67:24:21:e9:23:6f:c6:16:f0:4a:a5:b6:4e:f2:6d:e5:e4: 8f:0f:c6:3c:1a:e8:f4:64:ee:6e:c8:eb:a1:13:29:fe:68:fe: 3c:03:16:30:96:a3:8d:f0:13:fe:37:fc:5f:0b:94:21:0c:f6: 10:48:fc:f0:5e:33:d8:b6:36:36:8c:e1:09:48:9c:e9:12:89: f8:4d:b2:e4:76:d9:ff:87:fc:9f:8c:ef:d6:5e:df:68:53:b3: 91:f6:a8:36:cc:be:2f:b5:3b:d8:e1:43:bc:1d:8c:66:4f:8f: 76:4e:46:72:1a:b1:1a:a3:7f:d3:42:35:33:7a:c9:80:84:9f: 54:e1:a5:0e:26:96:45:56:6b:be:9e:4d:8f:9a:f5:95:28:5a: 4b:93:09:54:a4:dc:94:d7:cb:03:89:aa:51:1c:da:71:9e:69: fe:4d:1d:e4:aa:77:5c:09:cb:45:f8:f0:51:33:23:23:58:3d: 96:06:b3:e6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelkTd6nR36EIFLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MTA4ZmU5ZjYtMzNkOS00ZDc3LTk4ZDAtMjA1NGFkMWNiNzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd7wDqKmLIiN7a1ZTtDnODib4Spnk0Vc29vI VKcOIYFf5LHOobdjnftSNqeJSjhqO/n2v+T6lsar2Cx3OjI2d4fJij2jMFYkCIJi lEtpF3pUxtDeiW7Tmci+KKcrh99HJqjARSBZWpfBdGNgeOCS2R3M4dzZuYnAYcdB sx5jchlwTlP/d5kA9sSlNQK0QNs/Skqd+Qe/28vTN9O8m2zQfA22Q/eZQhSsGuu5 LSstVwtBCYYedaYyJ8Bn39TRfbym5in5M/6tDiLO/fLgBpEzrqJVP/wpIEf7eH+P hHSoF3R+g2k/IgjMLkg4pXXc42NtYt2rBHe/9sA7sJHKfYnrswIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGjf/YKdxhPqz4fEYNvwaur1tDa0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjI4ZWNjMjgtYjBkNi0z ODYyLWEwZjAtMzg2Zjk3ZTkzZjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBxbxak/XyqsKPNAE1uamsRxvPp9V+SmZ9O3oSPTs9/HSXoK/46/GMK uEqj5YH9MdzS+noInQVk7QxycnmM2XtBMZRFruijcpKuZyQh6SNvxhbwSqW2TvJt 5eSPD8Y8Guj0ZO5uyOuhEyn+aP48AxYwlqON8BP+N/xfC5QhDPYQSPzwXjPYtjY2 jOEJSJzpEon4TbLkdtn/h/yfjO/WXt9oU7OR9qg2zL4vtTvY4UO8HYxmT492TkZy GrEao3/TQjUzesmAhJ9U4aUOJpZFVmu+nk2PmvWVKFpLkwlUpNyU18sDiapRHNpx nmn+TR3kqndcCctF+PBRMyMjWD2WBrPm -----END CERTIFICATE-----Generated at Mon Aug 4 16:14:05 2025 by rpki-client