$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ad446f0-b57c-3d91-b50a-27c5c39f3623.roa File: 8ad446f0-b57c-3d91-b50a-27c5c39f3623.roa (raw, json) Hash identifier: ZJZHJujWdY/rw6VlSlC1nl2MkHNpBGSUd3Bnu6aBQiI= Subject key identifier: 5F:24:D0:09:78:3F:75:08:02:74:56:80:59:4C:2E:78:D4:60:F2:26 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E96425F5404DC8A67E1D040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ad446f0-b57c-3d91-b50a-27c5c39f3623.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 36627 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:42:5f:54:04:dc:8a:67:e1:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=50837ead-91d4-4666-b5ae-a2a0b14c82fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:56:c3:1a:14:1b:8c:4b:44:f2:ba:a6:ee:7e: df:3f:45:90:87:1f:6d:77:6b:fb:3e:8a:fa:0f:9b: 55:c5:4b:dd:c2:f3:66:c6:31:51:a1:97:f7:82:b9: 8e:bb:0b:d3:f3:70:20:a5:89:79:bd:88:51:00:51: e5:87:34:92:b8:e5:8a:82:b2:1e:5e:b0:bf:72:5f: e8:57:90:d9:c0:53:cc:87:47:c4:5e:4d:cb:01:09: 61:17:2c:36:fa:63:3b:6c:1c:09:eb:fb:7e:32:72: e5:e8:dd:1f:92:36:6a:92:9d:b3:16:5c:e4:ce:ac: c1:18:fe:39:f2:58:b9:eb:2f:41:68:bd:d6:2f:ec: de:fc:e4:25:51:45:c1:37:9c:66:82:1f:e5:6f:75: 76:39:20:ff:b6:fa:67:37:5e:00:89:87:37:da:2c: f9:4b:b4:50:27:6a:6e:95:45:a4:b8:af:35:c3:b0: 61:4a:0b:26:4f:69:89:65:0f:61:02:77:07:3b:d7: f8:53:65:a3:ad:68:ad:c9:7f:44:71:26:26:f1:3c: 9b:ad:b5:bf:aa:46:24:cb:0a:63:58:c5:d2:16:4d: 96:64:ad:2c:d9:de:04:43:61:79:6d:8a:f6:3d:94: f6:05:2c:6f:23:c4:cd:de:a2:bc:a3:d8:8f:60:be: b3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:24:D0:09:78:3F:75:08:02:74:56:80:59:4C:2E:78:D4:60:F2:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ad446f0-b57c-3d91-b50a-27c5c39f3623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:db:26:76:73:be:1b:fa:0a:c1:9d:22:a3:4a:64:2b:c1:4d: f5:8c:ce:fd:0f:82:8d:5d:52:50:63:5e:49:de:9a:2c:5b:85: c8:57:58:6c:76:f8:f9:83:f2:1b:12:89:f8:1b:02:e4:47:66: 24:99:3c:71:26:95:6f:db:24:50:db:23:4c:4b:e2:af:4c:0a: 90:b0:28:0d:78:ca:b1:9e:45:58:4d:54:ec:ce:4a:3b:27:14: cf:51:7b:49:de:40:65:c3:8f:80:be:91:f8:c6:6f:44:4b:74: 53:b5:0e:e7:0c:6c:1f:82:32:ce:ae:e9:7c:46:fc:8f:91:9c: ff:bb:17:0d:a3:7c:f7:3d:6f:b3:88:eb:b8:e3:4b:86:57:14: d4:c5:02:71:4e:a2:dd:bd:35:ce:cf:23:48:67:ac:c8:f0:fe: 5d:b4:47:3a:4d:13:a8:11:66:ef:45:84:8d:a9:02:b5:d6:78: 44:3c:48:27:9a:8e:15:34:2a:a2:f2:58:54:d9:1a:6c:dc:91: dc:8f:3f:34:b5:cb:55:e9:7a:68:93:cd:bd:cb:b0:b9:83:57: ef:0b:ca:21:24:36:f5:2e:cc:6e:07:50:1a:48:ce:03:03:14: 06:12:6e:9f:bf:df:a5:1f:b9:df:6f:69:1a:68:34:e0:cb:52: 5a:da:9a:13 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelkJfVATcimfh0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NTA4MzdlYWQtOTFkNC00NjY2LWI1YWUtYTJhMGIxNGM4MmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVbDGhQbjEtE8rqm7n7fP0WQhx9td2v7Por6 D5tVxUvdwvNmxjFRoZf3grmOuwvT83AgpYl5vYhRAFHlhzSSuOWKgrIeXrC/cl/o V5DZwFPMh0fEXk3LAQlhFyw2+mM7bBwJ6/t+MnLl6N0fkjZqkp2zFlzkzqzBGP45 8li56y9BaL3WL+ze/OQlUUXBN5xmgh/lb3V2OSD/tvpnN14AiYc32iz5S7RQJ2pu lUWkuK81w7BhSgsmT2mJZQ9hAncHO9f4U2WjrWityX9EcSYm8TybrbW/qkYkywpj WMXSFk2WZK0s2d4EQ2F5bYr2PZT2BSxvI8TN3qK8o9iPYL6zOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF8k0Al4P3UIAnRWgFlMLnjUYPImMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGFkNDQ2ZjAtYjU3Yy0z ZDkxLWI1MGEtMjdjNWMzOWYzNjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAL2yZ2c74b+grBnSKjSmQrwU31jM79D4KNXVJQY15J3posW4XIV1hs dvj5g/IbEon4GwLkR2YkmTxxJpVv2yRQ2yNMS+KvTAqQsCgNeMqxnkVYTVTszko7 JxTPUXtJ3kBlw4+AvpH4xm9ES3RTtQ7nDGwfgjLOrul8RvyPkZz/uxcNo3z3PW+z iOu440uGVxTUxQJxTqLdvTXOzyNIZ6zI8P5dtEc6TROoEWbvRYSNqQK11nhEPEgn mo4VNCqi8lhU2Rps3JHcjz80tctV6Xpok829y7C5g1fvC8ohJDb1LsxuB1AaSM4D AxQGEm6fv9+lH7nfb2kaaDTgy1Ja2poT -----END CERTIFICATE-----Generated at Mon Aug 4 16:13:06 2025 by rpki-client