$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3bc1ea9-3bab-3964-9f59-3032a4c3cdf4.roa File: c3bc1ea9-3bab-3964-9f59-3032a4c3cdf4.roa (raw, json) Hash identifier: KjTQn9V+0RLCH5XxJV4tVJ/y39iRLideNfiT2wcMhBs= Subject key identifier: E1:91:4B:CB:51:35:2E:61:B3:13:65:59:D0:23:F1:74:73:B1:6B:05 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E964300DB5CDFB9F0A92BA4 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3bc1ea9-3bab-3964-9f59-3032a4c3cdf4.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 397204 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:43:00:db:5c:df:b9:f0:a9:2b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=893b5260-d7f9-4c7d-bf9e-c4ffbafcfba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4c:5f:d8:d1:4a:65:8a:6e:90:ff:63:c3:cb: fe:3c:ad:6a:89:3e:07:5c:4f:3e:8c:ff:37:d0:11: 7d:af:54:4a:5e:27:91:7f:e4:04:d2:b8:06:09:1d: d8:8a:fc:1f:f6:46:49:02:17:cc:bb:4d:9b:5b:ce: 72:40:8e:5f:26:31:aa:d4:b2:ee:d7:a3:ca:7e:89: 64:47:64:0c:71:22:43:70:7a:23:e1:eb:c0:6b:c0: 3e:2d:e8:84:58:91:52:d9:75:44:32:71:fe:27:6f: 02:f8:69:03:37:2a:f9:ef:31:3c:49:27:66:ed:11: 92:f7:09:f3:ca:78:0a:5e:d1:cf:45:4c:03:9a:57: 49:66:9a:ec:24:07:d2:b4:67:4e:0c:61:f2:95:4e: a6:a2:ee:16:4f:61:54:16:05:c8:79:00:6d:c1:db: e0:da:d2:d5:74:60:49:c3:20:89:cc:bc:52:90:1b: e9:01:7d:47:33:ae:b2:bb:2c:aa:cd:89:5a:44:53: 7d:e6:f8:b3:21:5e:79:58:2d:c3:a3:7b:0b:a9:96: 1a:f6:92:59:a3:44:a1:b1:71:68:be:55:a0:f0:1b: cd:25:86:88:ee:f5:dc:81:af:4a:be:1a:20:e6:6b: ea:d9:a1:3e:fd:3e:e4:af:6b:6a:df:49:4d:61:64: 5e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:91:4B:CB:51:35:2E:61:B3:13:65:59:D0:23:F1:74:73:B1:6B:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3bc1ea9-3bab-3964-9f59-3032a4c3cdf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:70:0d:06:90:d5:0d:00:15:64:cb:26:b6:ff:e7:01:3c:20: 47:8e:12:c1:97:ce:41:0d:bc:38:30:f1:d2:30:8b:f7:90:ce: 67:12:7f:36:2d:ee:66:50:d2:ee:e9:89:3e:d1:d7:9e:f7:a9: ae:55:f3:3b:fa:7a:cb:bd:73:b3:ab:0d:7d:c8:de:15:cc:f1: 36:eb:17:c9:13:d8:e1:0a:70:0a:bf:0f:05:c2:79:ca:99:e6: 30:43:55:e6:ed:b1:fd:16:c2:2d:e4:cd:dc:9e:87:1f:93:ac: cd:d2:d6:72:fc:47:a9:a8:b4:ee:d4:b8:ad:3a:d8:05:cd:61: 25:73:00:14:a7:93:28:12:b1:8d:17:e0:4d:be:b8:42:08:81: 70:04:fa:0f:d0:ef:d9:bc:32:f2:78:24:37:45:54:69:d6:5a: 9f:61:b9:d2:8b:7a:18:65:43:30:56:ea:7a:4b:16:b0:67:10: a4:6b:e9:7f:86:02:07:03:eb:d9:11:23:b1:0b:09:dc:4b:a9: 07:98:3a:9d:5c:cd:c7:0d:58:04:9c:fd:b4:6c:05:9b:43:26: a7:76:dd:06:61:a8:df:5d:83:14:52:68:28:d0:ba:c5:51:b3: 24:9d:d2:14:62:5a:e3:12:53:af:7e:89:67:ea:3c:28:df:34: 78:d7:25:c9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelkMA21zfufCpK6QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ODkzYjUyNjAtZDdmOS00YzdkLWJmOWUtYzRmZmJhZmNmYmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0xf2NFKZYpukP9jw8v+PK1qiT4HXE8+jP83 0BF9r1RKXieRf+QE0rgGCR3Yivwf9kZJAhfMu02bW85yQI5fJjGq1LLu16PKfolk R2QMcSJDcHoj4evAa8A+LeiEWJFS2XVEMnH+J28C+GkDNyr57zE8SSdm7RGS9wnz yngKXtHPRUwDmldJZprsJAfStGdODGHylU6mou4WT2FUFgXIeQBtwdvg2tLVdGBJ wyCJzLxSkBvpAX1HM66yuyyqzYlaRFN95vizIV55WC3Do3sLqZYa9pJZo0ShsXFo vlWg8BvNJYaI7vXcga9Kvhog5mvq2aE+/T7kr2tq30lNYWRe0QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOGRS8tRNS5hsxNlWdAj8XRzsWsFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzNiYzFlYTktM2JhYi0z OTY0LTlmNTktMzAzMmE0YzNjZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAKcA0GkNUNABVkyya2/+cBPCBHjhLBl85BDbw4MPHSMIv3kM5nEn82 Le5mUNLu6Yk+0dee96muVfM7+nrLvXOzqw19yN4VzPE26xfJE9jhCnAKvw8FwnnK meYwQ1Xm7bH9FsIt5M3cnocfk6zN0tZy/EepqLTu1LitOtgFzWElcwAUp5MoErGN F+BNvrhCCIFwBPoP0O/ZvDLyeCQ3RVRp1lqfYbnSi3oYZUMwVup6SxawZxCka+l/ hgIHA+vZESOxCwncS6kHmDqdXM3HDVgEnP20bAWbQyandt0GYajfXYMUUmgo0LrF UbMkndIUYlrjElOvfoln6jwo3zR41yXJ -----END CERTIFICATE-----Generated at Wed Aug 6 04:10:18 2025 by rpki-client