$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/94bc1598-7bff-3c82-b444-2ffd14588c6a.roa File: 94bc1598-7bff-3c82-b444-2ffd14588c6a.roa (raw, json) Hash identifier: gnApG/zjRNYZDNZfmhphvAknk/bezk+VIjH7e8BXZ+o= Subject key identifier: CF:51:E5:85:30:65:7F:80:3A:6F:81:4F:3E:83:FA:C8:FA:A9:7B:72 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963EBF426CAC6BB6EA73C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/94bc1598-7bff-3c82-b444-2ffd14588c6a.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 397210 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:3e:bf:42:6c:ac:6b:b6:ea:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=fb28df1f-63c8-4922-a67c-ff29d4d11aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e1:8b:3b:72:28:36:87:b7:05:a4:56:22:4a: 98:93:88:ac:8c:42:9a:a3:eb:74:8c:50:1c:3d:79: f4:9e:e4:1a:e8:5f:e6:5e:fb:4a:3c:8f:95:5d:2c: 0e:e1:db:8d:bc:e7:93:b0:8c:f9:40:34:30:d4:6e: 76:ce:2a:24:71:8c:b5:9c:34:72:e7:d0:4e:9e:74: e0:6a:ed:e2:95:a2:a5:89:76:e0:af:42:2c:bb:4a: 83:ec:3c:0a:6d:48:8f:d1:f5:bf:f6:3c:4d:f6:ae: 99:8c:06:49:73:6e:93:e8:1e:7a:95:70:37:6e:45: 38:15:d1:42:7f:4c:7b:02:b9:ef:41:ac:f9:19:24: e3:15:66:1a:f8:63:fe:97:91:14:a7:79:e8:8b:67: 39:9a:ae:ae:13:e1:aa:f9:1b:d4:9a:a8:b5:8c:ac: fd:48:b0:d2:df:ba:bd:0c:c9:79:a2:05:95:a9:56: a1:79:5f:85:f7:d7:96:35:88:2c:c4:d3:15:f3:6f: 81:91:1b:9d:30:3e:4c:2a:24:ad:1d:09:92:1a:39: 44:27:95:ec:4b:b4:a0:1d:26:cd:6f:b0:c3:a2:ee: 92:13:8e:c0:4c:1d:51:ac:ef:61:c9:a2:00:d2:c5: 17:e6:99:e6:a5:f6:03:c7:4c:81:c1:87:2c:7b:97: dc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:51:E5:85:30:65:7F:80:3A:6F:81:4F:3E:83:FA:C8:FA:A9:7B:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/94bc1598-7bff-3c82-b444-2ffd14588c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:71:44:cf:21:20:c8:90:ac:24:57:c2:5f:47:a2:0f:b5:e4: a0:45:ec:6a:6c:c8:47:d8:14:3a:38:55:b3:2c:56:f5:43:fc: 87:40:ae:04:3e:2d:ff:4d:80:97:da:fe:26:37:2e:a1:72:c8: 18:72:ee:d0:d1:4f:3a:a7:3e:00:ee:d1:9b:cb:ab:f3:2a:94: 2c:ce:f5:19:8f:6a:0b:cd:0c:7d:34:53:4f:81:4b:f4:5b:ce: 78:ff:53:fd:13:27:22:82:fc:82:7b:da:5b:2f:70:c6:ca:f2: 59:be:c6:85:ad:09:6a:1e:fc:76:f1:44:14:01:73:d8:b9:c9: df:6e:e4:d8:a8:12:d0:fe:b1:b2:1f:02:b1:56:2f:7e:40:68: 0b:a9:0e:ce:9c:83:e6:99:12:94:34:71:01:79:2d:e0:fe:10: 93:1b:7d:cf:98:c4:c5:85:a1:44:ab:b2:c2:8b:3c:79:e4:03: f5:ac:f0:fb:02:3f:d9:bd:2b:52:0d:bb:e6:71:ff:65:c1:eb: 16:05:b5:f9:2a:fe:17:bc:04:1c:c8:bb:64:70:1f:b3:91:2a: 03:e1:e7:8b:0e:43:04:b2:bc:78:89:f1:81:d5:db:ca:e1:81: 70:4d:69:a4:6f:23:09:9f:41:a4:5b:55:f0:dd:59:8b:c0:fd: d1:de:98:65 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelj6/Qmysa7bqc8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ZmIyOGRmMWYtNjNjOC00OTIyLWE2N2MtZmYyOWQ0ZDExYWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOGLO3IoNoe3BaRWIkqYk4isjEKao+t0jFAc PXn0nuQa6F/mXvtKPI+VXSwO4duNvOeTsIz5QDQw1G52ziokcYy1nDRy59BOnnTg au3ilaKliXbgr0Isu0qD7DwKbUiP0fW/9jxN9q6ZjAZJc26T6B56lXA3bkU4FdFC f0x7ArnvQaz5GSTjFWYa+GP+l5EUp3noi2c5mq6uE+Gq+RvUmqi1jKz9SLDS37q9 DMl5ogWVqVaheV+F99eWNYgsxNMV82+BkRudMD5MKiStHQmSGjlEJ5XsS7SgHSbN b7DDou6SE47ATB1RrO9hyaIA0sUX5pnmpfYDx0yBwYcse5fc0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM9R5YUwZX+AOm+BTz6D+sj6qXtyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTRiYzE1OTgtN2JmZi0z YzgyLWI0NDQtMmZmZDE0NTg4YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAWcUTPISDIkKwkV8JfR6IPteSgRexqbMhH2BQ6OFWzLFb1Q/yHQK4E Pi3/TYCX2v4mNy6hcsgYcu7Q0U86pz4A7tGby6vzKpQszvUZj2oLzQx9NFNPgUv0 W854/1P9EycigvyCe9pbL3DGyvJZvsaFrQlqHvx28UQUAXPYucnfbuTYqBLQ/rGy HwKxVi9+QGgLqQ7OnIPmmRKUNHEBeS3g/hCTG33PmMTFhaFEq7LCizx55AP1rPD7 Aj/ZvStSDbvmcf9lwesWBbX5Kv4XvAQcyLtkcB+zkSoD4eeLDkMEsrx4ifGB1dvK 4YFwTWmkbyMJn0GkW1Xw3VmLwP3R3phl -----END CERTIFICATE-----Generated at Wed Aug 6 13:14:56 2025 by rpki-client