$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a168bf01-0c8b-3b5a-b925-ac31a99e6dae.roa File: a168bf01-0c8b-3b5a-b925-ac31a99e6dae.roa (raw, json) Hash identifier: L1AzLnOjCqBFb8oLG1kQKI81eJcZOSfFQHMpOdTXevE= Subject key identifier: 72:54:89:E2:FC:E9:A6:16:15:38:44:50:A3:FF:11:18:EA:14:09:BE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963959FA86DCEE75D62580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a168bf01-0c8b-3b5a-b925-ac31a99e6dae.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 20362 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:39:59:fa:86:dc:ee:75:d6:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=2cd23ca2-7ef4-4d58-bb6b-b58d1ce79d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3e:06:0f:8f:36:ab:74:04:f5:ce:ac:63:a2: d5:7f:24:97:e4:24:93:af:67:0f:db:c4:25:d9:80: bb:48:69:2e:04:c0:e1:ed:d2:32:cf:0f:62:0e:0c: 63:58:86:ba:d6:1a:9e:61:c6:62:66:98:81:c4:a4: b8:f6:1f:07:17:c8:76:3c:f9:2f:fd:a8:6a:47:e3: e0:ac:16:ca:3e:ef:de:66:e7:ca:ea:4a:26:5e:4c: 38:77:9d:b4:3d:2f:d2:87:2c:24:ca:ad:2f:4f:db: a7:d0:d6:8c:19:48:72:05:37:d5:43:63:cc:a9:3a: 44:3d:06:43:be:a7:4d:b5:4d:76:2a:f4:47:e1:9b: 47:fc:3c:4a:fc:3f:60:f8:f5:2f:f7:bf:8b:f8:3d: 5e:4e:67:cd:39:26:4e:eb:b1:ae:5c:d6:1e:3d:07: 4f:39:a3:a9:a5:19:f0:b9:a5:51:40:5a:6b:c5:bd: 3d:f6:da:ad:6a:68:fa:54:23:5f:b5:82:bd:19:da: 3f:04:b5:1a:3e:3a:9c:e5:df:7c:9d:ce:b9:13:61: e5:33:49:95:84:f8:fb:54:73:6d:c8:c3:d5:59:69: b2:37:f1:bf:77:82:d8:88:52:b0:ca:21:9c:8b:ec: 35:75:f5:fd:b9:0a:37:23:c9:04:58:a8:b9:90:32: c9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:54:89:E2:FC:E9:A6:16:15:38:44:50:A3:FF:11:18:EA:14:09:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a168bf01-0c8b-3b5a-b925-ac31a99e6dae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:1e:a7:e0:2c:51:15:35:af:0c:28:f0:57:c1:28:67:7a:18: 7e:97:d8:1e:7c:7b:90:6f:34:cd:d5:34:95:af:3b:bd:be:08: f1:33:6e:59:51:5d:44:23:63:42:73:13:96:dd:58:f5:57:e9: 62:33:ef:4a:4d:99:27:cf:4b:53:1d:12:67:63:ee:ea:75:40: be:2b:91:7f:fc:82:08:d5:7a:e3:27:1a:0d:35:9b:58:5b:89: 7e:63:96:14:19:6a:5d:6a:73:48:59:f6:2d:68:0f:f4:05:ea: c0:b2:06:c9:76:bd:4a:91:3a:8f:13:cd:f7:ef:13:15:cd:ed: 80:03:bc:b8:ba:ab:7f:5f:c0:61:c9:f7:d2:06:f5:08:ed:46: ef:40:60:95:41:f1:01:6c:9d:17:db:37:c0:d0:53:a1:b8:45: ba:86:8e:02:d9:6e:2e:9d:b3:6d:e0:9d:a6:2e:ac:1a:74:dd: 12:7c:28:19:66:7c:f2:2d:62:a9:dd:76:c4:65:5e:32:f5:54: f9:0c:2a:67:fa:f5:28:3e:2e:77:9f:95:1a:49:4b:bc:87:c2: 47:a2:d7:c8:39:ac:b5:a4:ea:52:26:a9:e4:98:c7:b6:56:00: 90:75:71:30:e3:8f:e2:c3:c2:36:37:4a:bc:d1:31:a0:5f:ff: 36:d1:74:b5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqeljlZ+obc7nXWJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MmNkMjNjYTItN2VmNC00ZDU4LWJiNmItYjU4ZDFjZTc5ZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj4GD482q3QE9c6sY6LVfySX5CSTr2cP28Ql 2YC7SGkuBMDh7dIyzw9iDgxjWIa61hqeYcZiZpiBxKS49h8HF8h2PPkv/ahqR+Pg rBbKPu/eZufK6komXkw4d520PS/Shywkyq0vT9un0NaMGUhyBTfVQ2PMqTpEPQZD vqdNtU12KvRH4ZtH/DxK/D9g+PUv97+L+D1eTmfNOSZO67GuXNYePQdPOaOppRnw uaVRQFprxb099tqtamj6VCNftYK9Gdo/BLUaPjqc5d98nc65E2HlM0mVhPj7VHNt yMPVWWmyN/G/d4LYiFKwyiGci+w1dfX9uQo3I8kEWKi5kDLJBwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHJUieL86aYWFThEUKP/ERjqFAm+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTE2OGJmMDEtMGM4Yi0z YjVhLWI5MjUtYWMzMWE5OWU2ZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+HqfgLFEVNa8MKPBXwShnehh+l9gefHuQbzTN1TSVrzu9vgjxM25Z UV1EI2NCcxOW3Vj1V+liM+9KTZknz0tTHRJnY+7qdUC+K5F//III1XrjJxoNNZtY W4l+Y5YUGWpdanNIWfYtaA/0BerAsgbJdr1KkTqPE8337xMVze2AA7y4uqt/X8Bh yffSBvUI7UbvQGCVQfEBbJ0X2zfA0FOhuEW6ho4C2W4unbNt4J2mLqwadN0SfCgZ ZnzyLWKp3XbEZV4y9VT5DCpn+vUoPi53n5UaSUu8h8JHotfIOay1pOpSJqnkmMe2 VgCQdXEw44/iw8I2N0q80TGgX/820XS1 -----END CERTIFICATE-----Generated at Mon Aug 4 15:37:52 2025 by rpki-client