$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95a5a1eb-38c8-3cd5-abcc-7390677a5bc7.roa File: 95a5a1eb-38c8-3cd5-abcc-7390677a5bc7.roa (raw, json) Hash identifier: 51LqEiP/3x3O3mxTFnyF6IMCDLmSmij6jaRYwZXfe7A= Subject key identifier: 2A:F4:93:20:1C:A0:BC:F0:95:16:A5:64:6E:FD:D3:8E:88:5E:7C:DD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E9640F39A99495F330E8A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95a5a1eb-38c8-3cd5-abcc-7390677a5bc7.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396585 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:40:f3:9a:99:49:5f:33:0e:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=3bb28ceb-5788-4159-bc64-0dc2f6dc2f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e6:27:b9:91:a1:f0:e1:53:aa:27:fa:1e:57: fe:70:ad:74:d2:3a:c3:82:20:c2:fd:ef:1d:e0:7e: 4a:66:be:c2:d3:45:86:85:44:67:37:64:29:e4:30: 45:c8:1b:eb:63:aa:6b:33:bf:1a:bf:53:68:7a:00: 42:34:54:89:95:91:b0:3a:30:91:bf:ac:3b:cc:42: a7:22:83:3c:8d:ad:00:31:21:5d:06:49:ed:44:33: 0b:c1:d1:70:15:f4:fe:b6:15:e9:51:d8:49:9a:9a: 00:24:52:60:2b:4a:9b:7e:e9:37:64:1e:88:f5:1e: f2:83:9b:0f:4d:fd:72:7f:ea:01:8c:a7:24:f6:95: 09:2f:41:4b:49:73:37:ed:33:a5:89:6a:bf:7d:ce: 76:1c:bc:9b:c4:09:c7:22:7c:1c:43:bb:62:e7:12: 0b:77:37:28:0b:ce:e6:49:27:78:07:15:2c:f6:bf: 40:5a:a5:be:06:c4:11:d6:67:6f:e0:cb:a7:bf:c9: 9b:6b:33:51:e0:8b:84:3c:01:b9:8b:f5:40:d0:7b: 6d:d7:a5:b8:79:75:ca:c6:e5:ee:fd:0a:f8:11:89: d4:f3:c8:0d:1b:b7:74:02:f1:ae:58:74:6a:00:d8: 1f:ef:90:01:9a:5b:92:4d:cf:01:55:7e:e9:95:72: 16:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F4:93:20:1C:A0:BC:F0:95:16:A5:64:6E:FD:D3:8E:88:5E:7C:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95a5a1eb-38c8-3cd5-abcc-7390677a5bc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:6f:e0:91:bd:ba:f0:0a:2a:35:cd:0a:10:9c:c6:b4:2a:06: f5:fc:15:21:d3:93:f1:cb:10:21:51:16:c6:a7:56:7a:42:9e: ea:8d:c7:fd:e9:e4:46:8f:86:2e:fd:1c:8e:a5:b3:1d:57:41: 37:1d:2a:89:b7:ae:45:aa:3e:6d:43:dd:14:a0:98:6f:9e:95: 7a:96:4b:50:e5:bc:90:66:16:bc:3f:91:d7:6a:1a:95:0d:78: 98:2a:00:28:82:e7:fa:40:34:e4:0f:9c:b5:69:28:85:0b:77: 00:86:16:03:25:18:dc:5c:93:16:01:f7:d4:19:fc:66:53:51: 23:1b:92:8c:e0:38:3a:0c:09:ef:74:62:55:15:e6:a0:ff:49: 94:ee:ce:d3:df:5b:8d:a4:f6:17:78:27:0a:8c:3d:3d:3b:97: 8d:3f:e0:20:27:23:cc:df:c3:18:b5:89:fa:e7:5d:b0:56:04: dc:3b:8d:6c:8f:df:cb:6c:b0:e5:0f:41:33:eb:18:4e:21:fd: 78:2d:3a:5c:a2:76:74:09:5f:b3:20:90:84:3e:ab:2a:93:7e: 80:af:f9:60:87:a4:ed:a9:53:7a:0b:2d:6b:70:c3:ec:b3:8e: 5d:ee:fb:79:c9:42:1b:a2:7e:e1:15:55:7e:14:0a:c4:b8:0c: 0b:fc:33:15 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelkDzmplJXzMOioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk M2JiMjhjZWItNTc4OC00MTU5LWJjNjQtMGRjMmY2ZGMyZjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOYnuZGh8OFTqif6Hlf+cK100jrDgiDC/e8d 4H5KZr7C00WGhURnN2Qp5DBFyBvrY6prM78av1NoegBCNFSJlZGwOjCRv6w7zEKn IoM8ja0AMSFdBkntRDMLwdFwFfT+thXpUdhJmpoAJFJgK0qbfuk3ZB6I9R7yg5sP Tf1yf+oBjKck9pUJL0FLSXM37TOliWq/fc52HLybxAnHInwcQ7ti5xILdzcoC87m SSd4BxUs9r9AWqW+BsQR1mdv4Munv8mbazNR4IuEPAG5i/VA0Htt16W4eXXKxuXu /Qr4EYnU88gNG7d0AvGuWHRqANgf75ABmluSTc8BVX7plXIWfQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCr0kyAcoLzwlRalZG79046IXnzdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTVhNWExZWItMzhjOC0z Y2Q1LWFiY2MtNzM5MDY3N2E1YmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAhb+CRvbrwCio1zQoQnMa0Kgb1/BUh05PxyxAhURbGp1Z6Qp7qjcf9 6eRGj4Yu/RyOpbMdV0E3HSqJt65Fqj5tQ90UoJhvnpV6lktQ5byQZha8P5HXahqV DXiYKgAoguf6QDTkD5y1aSiFC3cAhhYDJRjcXJMWAffUGfxmU1EjG5KM4Dg6DAnv dGJVFeag/0mU7s7T31uNpPYXeCcKjD09O5eNP+AgJyPM38MYtYn6512wVgTcO41s j9/LbLDlD0Ez6xhOIf14LTpconZ0CV+zIJCEPqsqk36Ar/lgh6TtqVN6Cy1rcMPs s45d7vt5yUIbon7hFVV+FArEuAwL/DMV -----END CERTIFICATE-----Generated at Wed Aug 6 00:36:08 2025 by rpki-client