$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2229a3c-837f-3b08-b528-2fd0158fc8c2.roa File: c2229a3c-837f-3b08-b528-2fd0158fc8c2.roa (raw, json) Hash identifier: 7oBax9gYtAqFxJqH/mSVH6DFJ5W7tIlCymCGbTA3H80= Subject key identifier: 65:F5:03:0D:80:EF:2B:03:32:A4:F2:7B:B9:39:3C:F0:2F:B4:B3:D7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963B05ADA6F73116CA32E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2229a3c-837f-3b08-b528-2fd0158fc8c2.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396547 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:3b:05:ad:a6:f7:31:16:ca:32:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=962da623-d31b-4098-93da-07dcdfcb274b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f4:a8:18:44:41:a7:af:9e:0e:b5:3d:d9:f6: 19:ca:23:4d:33:b0:80:e2:6e:0e:e7:64:48:85:12: 7b:9d:ba:54:82:23:9f:24:6d:d3:81:25:64:f1:4e: 92:0a:6b:d3:63:d7:22:4d:7a:7c:36:25:51:5c:84: c6:ee:5a:a4:f8:f2:2c:d3:8d:8e:be:03:68:b4:75: 0e:f2:d7:93:e4:68:84:0a:5d:40:16:4a:d7:2b:2a: c2:d9:77:01:59:e2:9d:e9:96:14:1f:56:22:f7:53: 33:b0:37:c1:54:65:ed:48:bf:53:81:92:c7:cf:68: 02:24:26:f5:26:39:5e:09:78:8c:e8:e1:69:bb:8e: fd:a1:98:c9:d5:19:03:66:c2:be:14:79:1e:0a:44: 68:e1:68:68:be:cd:28:7d:aa:b0:c9:ac:2c:23:e7: 9f:55:7f:c7:60:72:da:14:6a:2b:91:31:91:8d:25: 89:f1:d6:87:8a:7c:96:dd:5e:82:35:47:ca:fa:da: 78:a1:e7:c3:c9:8e:1d:81:26:69:d5:f2:22:00:81: b0:f3:aa:f0:2b:33:26:6c:8a:2e:86:29:00:fa:c5: b6:e6:02:74:59:81:13:19:60:46:be:4c:e7:7c:64: e5:fe:fb:47:81:0e:39:be:6f:54:58:71:22:c4:bb: fe:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F5:03:0D:80:EF:2B:03:32:A4:F2:7B:B9:39:3C:F0:2F:B4:B3:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2229a3c-837f-3b08-b528-2fd0158fc8c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:3b:29:fd:84:b8:34:31:e5:17:f8:f4:83:b4:56:18:a4:6d: c7:92:2f:63:2c:c9:5c:d0:ef:e7:81:0a:39:a9:9c:82:67:74: a5:69:04:ac:82:5a:a4:09:64:5e:68:7e:15:35:0f:b3:45:69: 37:51:23:5c:bc:f9:4c:04:a1:4f:9a:a5:0a:1f:c6:6e:d4:36: 0e:3f:bf:a6:c7:84:96:45:a3:1a:67:4e:72:b3:43:79:9c:8d: a0:4d:8a:ab:a3:81:e6:83:17:7e:80:f5:2b:91:e0:64:38:ae: 0d:94:eb:72:e9:82:4c:79:db:1b:ef:ef:aa:53:80:a7:17:bf: 9f:98:14:6b:d8:d5:60:53:37:40:ec:c7:87:be:e0:8e:19:85: a3:6b:4c:a7:d3:66:e1:0f:fd:a6:24:17:3f:c1:96:bb:a1:a6: e4:57:6a:2d:38:2a:1e:d7:63:c1:f5:e1:49:13:47:de:52:4c: 58:e9:fe:f8:5d:f2:51:dd:92:18:3a:97:e0:84:20:82:82:9f: c6:8d:d5:e7:12:3b:fc:03:c4:b0:ac:02:df:31:42:1d:c9:a9: b3:4d:a2:ff:1a:76:82:5d:5b:82:f6:29:b6:87:e9:45:78:7b: 2d:f8:dc:94:a6:f8:71:1c:ba:77:e5:a9:a5:c3:f0:51:5e:8f: b6:2d:37:c6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqeljsFrab3MRbKMuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk OTYyZGE2MjMtZDMxYi00MDk4LTkzZGEtMDdkY2RmY2IyNzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/SoGERBp6+eDrU92fYZyiNNM7CA4m4O52RI hRJ7nbpUgiOfJG3TgSVk8U6SCmvTY9ciTXp8NiVRXITG7lqk+PIs042OvgNotHUO 8teT5GiECl1AFkrXKyrC2XcBWeKd6ZYUH1Yi91MzsDfBVGXtSL9TgZLHz2gCJCb1 JjleCXiM6OFpu479oZjJ1RkDZsK+FHkeCkRo4Whovs0ofaqwyawsI+efVX/HYHLa FGorkTGRjSWJ8daHinyW3V6CNUfK+tp4oefDyY4dgSZp1fIiAIGw86rwKzMmbIou hikA+sW25gJ0WYETGWBGvkznfGTl/vtHgQ45vm9UWHEixLv+iwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGX1Aw2A7ysDMqTye7k5PPAvtLPXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzIyMjlhM2MtODM3Zi0z YjA4LWI1MjgtMmZkMDE1OGZjOGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAyOyn9hLg0MeUX+PSDtFYYpG3Hki9jLMlc0O/ngQo5qZyCZ3SlaQSs glqkCWReaH4VNQ+zRWk3USNcvPlMBKFPmqUKH8Zu1DYOP7+mx4SWRaMaZ05ys0N5 nI2gTYqro4Hmgxd+gPUrkeBkOK4NlOty6YJMedsb7++qU4CnF7+fmBRr2NVgUzdA 7MeHvuCOGYWja0yn02bhD/2mJBc/wZa7oabkV2otOCoe12PB9eFJE0feUkxY6f74 XfJR3ZIYOpfghCCCgp/GjdXnEjv8A8SwrALfMUIdyamzTaL/GnaCXVuC9im2h+lF eHst+NyUpvhxHLp35amlw/BRXo+2LTfG -----END CERTIFICATE-----Generated at Mon Aug 4 14:44:46 2025 by rpki-client