$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c1de249-6f5e-33a2-940f-7fff57d77838.roa File: 6c1de249-6f5e-33a2-940f-7fff57d77838.roa (raw, json) Hash identifier: 6Apb9K7w3vMeDBC2fGMRrnNg4rk1sNIwYkyFh/8M5NM= Subject key identifier: C8:88:0F:69:C3:4B:F2:77:A5:60:16:C8:40:7D:FD:54:BF:21:01:0A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963D774B52705EE32DAA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c1de249-6f5e-33a2-940f-7fff57d77838.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396580 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:3d:77:4b:52:70:5e:e3:2d:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=14a0b08a-ce26-4aab-90ff-904463c61296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:67:23:4f:f2:27:95:20:90:25:5f:7f:c7:0d: 8b:7c:fb:04:eb:54:fa:a8:ee:a9:33:ce:d9:53:ba: 75:45:e0:b7:2e:c2:91:90:74:39:b8:f4:74:65:c8: f2:1c:9e:c6:81:7b:57:6c:65:c8:ab:52:8a:9a:64: c3:f0:24:f1:bd:d8:ac:ab:b4:1f:ef:ea:b4:e1:9f: 3c:a1:fb:5d:ba:c3:59:a0:24:ee:68:22:cd:6f:40: fe:29:c6:ed:ae:19:0f:0c:94:95:1e:5e:b6:cf:0a: ae:09:7e:5e:58:87:5d:ee:16:ab:58:20:1e:5f:c4: 80:bc:0d:8e:25:c6:2a:3c:55:72:98:7e:8f:f5:1e: 8a:e6:fc:9d:a9:91:5b:44:7b:91:f4:fa:d3:bb:ab: 5d:cd:69:99:e0:50:ac:a9:3b:3e:f3:b2:38:9d:ac: a4:1d:3d:c0:08:77:e8:23:73:b4:8d:3e:b0:38:89: 1d:67:e3:83:5b:ea:f5:d7:25:aa:bc:15:f8:4d:4f: 59:ba:9a:49:c6:60:20:4b:22:bf:61:76:97:2f:b4: 76:ba:c1:c3:81:6d:6e:25:6f:48:41:0b:14:2d:46: 8a:82:97:c6:64:8d:43:2e:c9:fa:86:a6:f5:2b:52: 3d:c6:c8:61:54:bb:78:42:c8:26:46:6b:97:42:97: 28:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:88:0F:69:C3:4B:F2:77:A5:60:16:C8:40:7D:FD:54:BF:21:01:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c1de249-6f5e-33a2-940f-7fff57d77838.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:8b:77:ab:48:66:9f:14:ce:ac:d5:98:a4:e4:0d:a9:44:59: 79:18:30:2e:16:c3:b9:b9:fa:62:42:39:84:1b:e4:7d:80:d0: 96:ad:25:00:4a:3a:1a:b5:db:95:52:d9:c5:12:51:db:66:12: a6:80:c7:4e:3c:03:2a:d5:6d:b9:6a:3c:d0:4f:a3:fa:f0:1a: 6f:60:f4:aa:1a:08:fb:a5:65:20:05:74:9a:c3:93:79:4c:b6: ff:0a:97:41:e8:86:b7:ce:55:82:ac:15:2e:16:a5:cb:3b:f4: 14:85:aa:30:d7:62:ab:84:4e:4c:37:ef:ab:46:d1:be:8e:2b: fa:d6:35:12:7f:0d:d3:ea:18:8a:86:90:42:c7:cf:bc:6b:35: ac:6f:54:c7:66:f7:e1:1f:6d:98:4b:a9:69:f5:94:de:63:17: 1f:40:b5:c9:3b:e2:ef:16:b0:ef:20:b7:94:90:b0:42:d7:66: 95:9e:88:fc:df:0d:07:cb:51:21:26:0a:00:98:cf:45:e9:2b: e9:2c:c1:1c:f0:dc:4a:da:d7:8f:58:18:a0:c4:8f:56:b0:a6: 50:a1:20:ea:79:96:8b:c3:63:4a:2a:0f:57:87:50:a7:e2:aa: aa:84:cc:05:87:56:d3:19:b2:ac:02:48:78:16:a9:7b:2c:d7: 80:59:2a:6a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelj13S1JwXuMtqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MTRhMGIwOGEtY2UyNi00YWFiLTkwZmYtOTA0NDYzYzYxMjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWcjT/InlSCQJV9/xw2LfPsE61T6qO6pM87Z U7p1ReC3LsKRkHQ5uPR0ZcjyHJ7GgXtXbGXIq1KKmmTD8CTxvdisq7Qf7+q04Z88 oftdusNZoCTuaCLNb0D+KcbtrhkPDJSVHl62zwquCX5eWIdd7harWCAeX8SAvA2O JcYqPFVymH6P9R6K5vydqZFbRHuR9PrTu6tdzWmZ4FCsqTs+87I4naykHT3ACHfo I3O0jT6wOIkdZ+ODW+r11yWqvBX4TU9ZuppJxmAgSyK/YXaXL7R2usHDgW1uJW9I QQsULUaKgpfGZI1DLsn6hqb1K1I9xshhVLt4QsgmRmuXQpcoNwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMiID2nDS/J3pWAWyEB9/VS/IQEKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmMxZGUyNDktNmY1ZS0z M2EyLTk0MGYtN2ZmZjU3ZDc3ODM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA1i3erSGafFM6s1Zik5A2pRFl5GDAuFsO5ufpiQjmEG+R9gNCWrSUA SjoatduVUtnFElHbZhKmgMdOPAMq1W25ajzQT6P68BpvYPSqGgj7pWUgBXSaw5N5 TLb/CpdB6Ia3zlWCrBUuFqXLO/QUhaow12KrhE5MN++rRtG+jiv61jUSfw3T6hiK hpBCx8+8azWsb1THZvfhH22YS6lp9ZTeYxcfQLXJO+LvFrDvILeUkLBC12aVnoj8 3w0Hy1EhJgoAmM9F6SvpLMEc8NxK2tePWBigxI9WsKZQoSDqeZaLw2NKKg9Xh1Cn 4qqqhMwFh1bTGbKsAkh4Fql7LNeAWSpq -----END CERTIFICATE-----Generated at Wed Aug 6 05:11:54 2025 by rpki-client