$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bdd59c0a-40f9-33b1-ab40-59821cf79c54.roa File: bdd59c0a-40f9-33b1-ab40-59821cf79c54.roa (raw, json) Hash identifier: ydYU+YTjDduWAkVt5Yg1kXnkZZSX0C2NwhBVUPC5D9c= Subject key identifier: 37:5B:05:F3:9A:C1:12:16:87:F1:35:96:66:02:3F:5F:50:E8:13:A1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E9642F4F70A6E98C3328380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bdd59c0a-40f9-33b1-ab40-59821cf79c54.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 22547 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:42:f4:f7:0a:6e:98:c3:32:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=0e0fdb68-cd97-4d36-87d8-271800f0784c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bd:2c:51:cb:0a:8b:94:d1:73:ca:50:21:9c: 08:b3:1c:9d:d7:22:22:b5:7e:a2:de:74:7d:24:56: 31:c5:9a:48:05:4c:ed:b8:81:72:8e:4f:47:90:50: 40:51:bb:96:56:25:33:83:5d:fd:0c:cd:e8:f3:93: 39:39:20:0d:97:69:79:ae:8c:12:9f:26:0b:f2:65: 43:68:d5:81:48:92:89:24:e4:67:57:91:0a:43:ad: 0a:9d:19:bd:df:19:db:c3:0c:45:4a:da:1e:31:cb: d4:c2:16:d6:a7:47:4c:41:0f:f3:e5:94:ad:bf:68: d1:98:f2:48:5e:dc:d7:34:f5:79:aa:d7:01:4b:ce: 69:fc:2e:fc:af:dc:7d:33:d9:b4:42:5f:8d:73:86: 68:6b:10:50:bb:76:f8:ac:8d:b4:a1:aa:1c:57:d2: 2f:35:1f:2b:4d:64:b6:40:75:4b:e5:5b:87:0a:48: 82:9e:b3:44:18:60:e5:35:14:5a:84:96:08:e1:a8: f4:2b:94:97:0b:08:96:b2:c9:f6:1b:95:16:1b:e3: 39:b5:38:4b:c4:7e:f5:db:08:8b:16:b6:db:7e:49: cc:21:d8:39:9f:ba:d0:68:30:40:7d:d6:1c:26:bc: 5b:18:e2:8a:22:67:3e:fd:49:c2:d3:1b:70:06:a0: 1a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5B:05:F3:9A:C1:12:16:87:F1:35:96:66:02:3F:5F:50:E8:13:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bdd59c0a-40f9-33b1-ab40-59821cf79c54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:06:3a:2e:22:0e:8d:fc:38:d5:33:59:a5:7f:fb:54:b3:c2: 18:1f:90:06:9b:47:a1:d8:cf:1c:cf:dd:c1:ab:af:a1:fa:bd: e0:c1:86:9a:26:9b:ff:6e:8a:48:9d:82:f5:0e:27:85:b3:26: de:e2:c8:8b:23:5c:76:ad:c8:a4:59:0a:30:5d:d8:14:83:58: d6:eb:d1:bb:ec:20:4e:84:95:b2:10:ed:24:31:bd:9e:4c:48: c7:c5:cf:75:d0:a3:9e:1b:ea:14:46:d1:41:57:24:3a:e6:99: c3:06:7b:b2:4f:eb:50:32:b7:15:53:ed:8c:8b:cb:77:d4:b5: c5:6f:98:57:23:8f:cb:4e:c6:ab:05:6a:f9:ed:d5:50:57:5f: dc:44:b9:a1:8c:5b:45:e2:94:97:8a:8a:e2:3e:34:05:99:60: 72:1f:64:e7:ba:f1:18:1e:50:01:1f:94:d9:2c:af:6b:fc:ff: c9:de:21:25:d8:c6:6a:8b:f3:68:07:87:15:c0:4f:5f:66:1e: 04:31:c2:7d:e9:54:5f:79:85:f3:77:88:2f:61:b2:d8:40:6a: 29:3b:16:78:ca:02:b3:d9:ee:be:3d:14:d8:d0:f2:63:96:cd: 76:3a:e1:dd:04:b9:0e:b9:7c:0b:3a:20:1a:79:59:44:32:1d: 0b:a9:0a:f7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelkL09wpumMMyg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MGUwZmRiNjgtY2Q5Ny00ZDM2LTg3ZDgtMjcxODAwZjA3ODRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb0sUcsKi5TRc8pQIZwIsxyd1yIitX6i3nR9 JFYxxZpIBUztuIFyjk9HkFBAUbuWViUzg139DM3o85M5OSANl2l5rowSnyYL8mVD aNWBSJKJJORnV5EKQ60KnRm93xnbwwxFStoeMcvUwhbWp0dMQQ/z5ZStv2jRmPJI XtzXNPV5qtcBS85p/C78r9x9M9m0Ql+Nc4ZoaxBQu3b4rI20oaocV9IvNR8rTWS2 QHVL5VuHCkiCnrNEGGDlNRRahJYI4aj0K5SXCwiWssn2G5UWG+M5tThLxH712wiL FrbbfknMIdg5n7rQaDBAfdYcJrxbGOKKImc+/UnC0xtwBqAaVQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDdbBfOawRIWh/E1lmYCP19Q6BOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmRkNTljMGEtNDBmOS0z M2IxLWFiNDAtNTk4MjFjZjc5YzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCCBjouIg6N/DjVM1mlf/tUs8IYH5AGm0eh2M8cz93Bq6+h+r3gwYaa Jpv/bopInYL1DieFsybe4siLI1x2rcikWQowXdgUg1jW69G77CBOhJWyEO0kMb2e TEjHxc910KOeG+oURtFBVyQ65pnDBnuyT+tQMrcVU+2Mi8t31LXFb5hXI4/LTsar BWr57dVQV1/cRLmhjFtF4pSXioriPjQFmWByH2TnuvEYHlABH5TZLK9r/P/J3iEl 2MZqi/NoB4cVwE9fZh4EMcJ96VRfeYXzd4gvYbLYQGopOxZ4ygKz2e6+PRTY0PJj ls12OuHdBLkOuXwLOiAaeVlEMh0LqQr3 -----END CERTIFICATE-----Generated at Wed Aug 6 07:52:16 2025 by rpki-client