$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b55e7539-f45f-3711-ab81-a8b46cc7925d.roa File: b55e7539-f45f-3711-ab81-a8b46cc7925d.roa (raw, json) Hash identifier: y2naXJlJ1MwtGinR8tZRnWLsb6nf6TFH8XTCC3yFG0k= Subject key identifier: 2A:2D:97:03:B0:43:46:D3:57:D8:B9:4F:2B:32:DD:68:74:34:36:38 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963EAEF947274CC944BE40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b55e7539-f45f-3711-ab81-a8b46cc7925d.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 397196 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:3e:ae:f9:47:27:4c:c9:44:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=65942b6b-2d9c-43c9-80b2-7c40b6b0acfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:41:03:dc:a1:af:1f:b3:6d:43:96:06:e0:b8: 70:34:a2:1e:02:c9:3d:cb:92:1c:73:4b:a0:d1:91: f1:39:79:d8:86:3e:a9:f8:12:e6:7a:f3:87:84:34: c9:a6:00:0e:fa:9f:80:12:68:a4:34:e4:21:5d:24: b0:f3:90:0e:f7:51:73:bf:db:7f:3c:91:5b:10:dc: 41:12:2b:75:6a:e5:d5:ff:5d:60:62:a6:fe:e1:c0: 9f:99:d5:0c:b8:67:bd:60:4e:e5:13:1e:e4:21:e1: 1c:05:89:21:9c:f4:fc:46:f3:1c:32:91:c0:be:a8: 36:1c:73:f1:76:ad:90:1e:55:a9:f8:9c:ef:8c:4d: 17:f0:bd:15:7c:f8:14:2a:64:e2:aa:e9:4d:28:cf: 7b:75:4d:89:c7:fc:ac:f9:0c:a4:77:b0:b9:72:18: 91:c3:11:e1:30:48:c4:02:89:c8:c5:7c:b8:cd:e2: 0a:2a:1d:58:8b:f6:6a:c5:2a:be:f4:cc:68:d1:8c: 0a:ec:3b:e3:37:c1:78:cd:f2:6c:b8:57:e3:b9:ac: a3:9a:af:a7:37:15:65:bd:31:9f:d3:d1:77:56:f8: 8b:07:13:69:1c:bd:be:2a:5d:48:54:35:64:6f:14: e9:3e:a6:91:89:2f:b4:22:28:cc:f4:b5:bb:ac:cb: e1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2D:97:03:B0:43:46:D3:57:D8:B9:4F:2B:32:DD:68:74:34:36:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b55e7539-f45f-3711-ab81-a8b46cc7925d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:25:01:07:8f:5d:3d:72:f5:54:b4:57:98:f9:1c:db:86:9c: 90:5f:a9:97:2b:4e:fe:b3:e8:da:5a:36:c6:60:33:8d:22:78: f3:9c:09:ca:d0:89:20:d8:d4:47:af:bc:0f:51:93:c3:70:d8: d9:68:6b:f0:ed:a2:54:47:f2:8b:b9:b9:0b:df:cf:b2:cc:dc: b7:53:13:b1:f5:66:b2:02:54:be:d9:0a:8e:59:e2:8f:ca:9c: d2:be:c7:6d:23:3b:b5:3e:c9:2b:03:61:ac:f4:cd:8f:42:64: a1:ad:ce:2b:6b:6e:de:ef:f8:a8:8e:5a:1f:52:bf:1b:2e:9c: 9e:4b:d8:ac:26:a0:24:65:d6:57:05:84:dd:8c:d5:bc:f9:38: 78:48:3c:5d:58:2d:3b:c1:40:41:73:32:94:99:a9:37:39:79: bd:ad:a4:74:e8:a4:65:65:34:97:d0:f8:74:04:4b:c8:31:6b: 1c:3d:46:59:97:ab:27:dd:c5:21:9d:4a:06:18:67:2d:63:ef: 24:c1:2d:33:07:de:7a:19:b9:03:5e:42:c4:94:e1:f4:d0:45: 4e:17:f7:af:10:5f:14:b9:8b:64:f7:69:7d:66:05:41:17:4f: 45:9c:9e:33:5c:66:c4:71:ea:fd:91:b2:8b:21:5c:3b:64:fd: d3:31:6d:00 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelj6u+UcnTMlEvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NjU5NDJiNmItMmQ5Yy00M2M5LTgwYjItN2M0MGI2YjBhY2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UED3KGvH7NtQ5YG4LhwNKIeAsk9y5Icc0ug 0ZHxOXnYhj6p+BLmevOHhDTJpgAO+p+AEmikNOQhXSSw85AO91Fzv9t/PJFbENxB Eit1auXV/11gYqb+4cCfmdUMuGe9YE7lEx7kIeEcBYkhnPT8RvMcMpHAvqg2HHPx dq2QHlWp+JzvjE0X8L0VfPgUKmTiqulNKM97dU2Jx/ys+Qykd7C5chiRwxHhMEjE AonIxXy4zeIKKh1Yi/ZqxSq+9Mxo0YwK7DvjN8F4zfJsuFfjuayjmq+nNxVlvTGf 09F3VviLBxNpHL2+Kl1IVDVkbxTpPqaRiS+0IijM9LW7rMvh+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCotlwOwQ0bTV9i5Tysy3Wh0NDY4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjU1ZTc1MzktZjQ1Zi0z NzExLWFiODEtYThiNDZjYzc5MjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCCJQEHj109cvVUtFeY+RzbhpyQX6mXK07+s+jaWjbGYDONInjznAnK 0Ikg2NRHr7wPUZPDcNjZaGvw7aJUR/KLubkL38+yzNy3UxOx9WayAlS+2QqOWeKP ypzSvsdtIzu1PskrA2Gs9M2PQmShrc4ra27e7/iojlofUr8bLpyeS9isJqAkZdZX BYTdjNW8+Th4SDxdWC07wUBBczKUmak3OXm9raR06KRlZTSX0Ph0BEvIMWscPUZZ l6sn3cUhnUoGGGctY+8kwS0zB956GbkDXkLElOH00EVOF/evEF8UuYtk92l9ZgVB F09FnJ4zXGbEcer9kbKLIVw7ZP3TMW0A -----END CERTIFICATE-----Generated at Mon Aug 4 14:56:42 2025 by rpki-client