$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9fbb6c1-a6be-3366-abe7-c752cb2ec528.roa File: a9fbb6c1-a6be-3366-abe7-c752cb2ec528.roa (raw, json) Hash identifier: BdVYf+iKpm9zSyqzoPA+fDwMsZrnPIQ/ODzWEr3qpEc= Subject key identifier: DE:34:2C:B8:3C:9B:FD:72:F9:E7:56:8C:F3:99:10:C7:1F:DE:19:6E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E96429DAB1D39EC9C0F8C40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9fbb6c1-a6be-3366-abe7-c752cb2ec528.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396590 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:42:9d:ab:1d:39:ec:9c:0f:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=92cc160a-d139-42b9-9ad5-c6cf0e5b08d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2a:93:82:48:e6:a7:c9:a6:c3:75:d3:90:e4: 06:87:86:45:ea:ab:30:14:b0:ca:a3:07:b7:b6:cc: 1a:84:64:ac:1c:2c:a6:43:9b:5e:94:6a:4c:97:d9: 29:f2:ce:5f:71:7d:4c:86:2c:3b:4e:be:e1:8f:ea: 6b:06:d4:ba:ba:be:38:b6:32:71:5a:7d:a5:7e:1a: df:94:34:9c:9b:e9:7e:a3:3e:e6:1d:e0:65:ca:54: 0e:0a:38:9b:e1:60:bb:4c:d6:03:3e:5d:28:19:1c: 90:0c:b4:c4:c1:27:67:77:77:d1:87:c2:cf:92:fe: 0c:21:b8:60:78:e3:5b:5e:0a:bc:e4:2b:f0:78:48: 6c:c1:25:15:00:31:90:7e:f5:a8:0f:b6:79:ac:41: 17:13:14:e0:ad:72:31:5c:a0:e0:a5:d6:ac:6c:6e: 5b:29:7b:02:0c:74:f1:91:32:c5:2d:11:26:6b:2c: 69:02:bd:0b:bb:a5:a7:98:8d:df:6f:cd:18:2c:94: 3b:43:54:dd:eb:80:9a:be:49:9d:d2:d7:24:cf:8e: 8d:64:6f:2d:3e:e3:5f:b3:9b:bf:a2:49:33:5f:66: 0b:0e:65:c6:b9:bd:20:ae:2c:b3:6e:d3:3b:c5:50: 98:aa:69:3b:dd:42:2c:ac:10:1d:73:25:17:4e:64: 94:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:34:2C:B8:3C:9B:FD:72:F9:E7:56:8C:F3:99:10:C7:1F:DE:19:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9fbb6c1-a6be-3366-abe7-c752cb2ec528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:4c:00:e5:f3:1b:cb:8f:de:28:ee:31:b5:7f:18:3a:90:6c: 06:2f:41:90:38:7c:24:f0:33:02:07:0d:d6:73:94:95:9e:5f: 82:3e:21:15:0e:22:98:96:27:62:1f:73:88:62:d8:73:d0:e4: 82:5c:f0:f7:b6:67:db:1c:40:22:8b:95:e8:5e:ea:bd:f1:b9: 2c:20:1e:38:19:58:f6:ee:43:6c:f7:76:25:49:1c:78:02:3f: 51:90:71:7a:06:1a:eb:e5:0a:f9:6a:ee:6a:c7:a1:32:43:60: 7a:e2:62:84:ed:c4:97:3b:5d:95:8d:fa:fd:4a:a4:e2:16:a8: 98:0b:e4:7f:d2:f0:2c:ef:30:32:96:a3:e4:b0:70:60:e1:cf: 4f:54:9f:d3:97:ac:ff:37:80:84:ae:1c:bc:6d:0e:b4:dc:3a: 74:c9:a8:59:c8:3e:66:9d:44:f2:16:ca:ec:0f:a5:b2:de:1e: 6d:a3:95:4e:51:eb:f2:40:e5:d2:b2:4d:cd:a1:43:c1:7e:f4: 57:77:e6:ea:02:2e:ed:59:ef:8b:8c:77:da:97:dd:58:8d:49: 44:59:88:ff:f2:93:88:2a:5d:5f:31:a4:22:ea:25:30:75:9b: 63:00:3a:14:fc:0b:ee:83:1e:bc:eb:1d:e4:04:b2:db:78:83: d9:ac:07:64 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelkKdqx057JwPjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk OTJjYzE2MGEtZDEzOS00MmI5LTlhZDUtYzZjZjBlNWIwOGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCqTgkjmp8mmw3XTkOQGh4ZF6qswFLDKowe3 tswahGSsHCymQ5telGpMl9kp8s5fcX1Mhiw7Tr7hj+prBtS6ur44tjJxWn2lfhrf lDScm+l+oz7mHeBlylQOCjib4WC7TNYDPl0oGRyQDLTEwSdnd3fRh8LPkv4MIbhg eONbXgq85CvweEhswSUVADGQfvWoD7Z5rEEXExTgrXIxXKDgpdasbG5bKXsCDHTx kTLFLREmayxpAr0Lu6WnmI3fb80YLJQ7Q1Td64Cavkmd0tckz46NZG8tPuNfs5u/ okkzX2YLDmXGub0griyzbtM7xVCYqmk73UIsrBAdcyUXTmSUMQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN40LLg8m/1y+edWjPOZEMcf3hluMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTlmYmI2YzEtYTZiZS0z MzY2LWFiZTctYzc1MmNiMmVjNTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAyTADl8xvLj94o7jG1fxg6kGwGL0GQOHwk8DMCBw3Wc5SVnl+CPiEV DiKYlidiH3OIYthz0OSCXPD3tmfbHEAii5XoXuq98bksIB44GVj27kNs93YlSRx4 Aj9RkHF6Bhrr5Qr5au5qx6EyQ2B64mKE7cSXO12Vjfr9SqTiFqiYC+R/0vAs7zAy lqPksHBg4c9PVJ/Tl6z/N4CErhy8bQ603Dp0yahZyD5mnUTyFsrsD6Wy3h5to5VO UevyQOXSsk3NoUPBfvRXd+bqAi7tWe+LjHfal91YjUlEWYj/8pOIKl1fMaQi6iUw dZtjADoU/Avugx686x3kBLLbeIPZrAdk -----END CERTIFICATE-----Generated at Mon Aug 4 15:07:09 2025 by rpki-client