$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1b95b7d-ad09-3d7e-b7cf-af67bb04a901.roa File: d1b95b7d-ad09-3d7e-b7cf-af67bb04a901.roa (raw, json) Hash identifier: Ml11vIjJL9cAkTFD6RWDgCzF8e4ZwZyAAKRpiUdkjBc= Subject key identifier: 86:A5:D9:AB:F3:C9:51:C2:39:5B:F9:9E:99:C6:1F:49:AC:AE:DF:B3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E9638D866751AFEA3B731D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1b95b7d-ad09-3d7e-b7cf-af67bb04a901.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 36630 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:38:d8:66:75:1a:fe:a3:b7:31:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=f298666b-50bd-4ea3-aff9-bbd2d78652d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f3:0b:b4:e8:92:d3:44:e4:8b:43:14:e7:b0: cc:13:72:bd:1b:2f:a9:46:d6:ac:1c:93:c3:d9:00: 45:d1:3a:c7:41:bd:a8:6f:39:5f:eb:8a:50:f9:38: 95:75:19:22:73:19:09:6e:96:9c:ad:b7:f0:57:b1: 61:6f:1c:1e:b8:a0:6c:4c:75:b2:33:39:86:88:0c: e9:bb:34:c2:19:1f:d9:72:f2:de:c9:0e:36:c9:15: 1c:32:06:f4:ba:59:e4:76:ae:a4:e6:54:72:4d:9d: f1:53:06:e2:78:e0:8f:1c:bb:a2:73:09:26:12:93: b7:de:82:e4:a6:4e:1a:7b:b8:67:e4:aa:ca:5f:02: 87:22:df:47:fe:38:a2:ef:b5:c6:9c:c1:a6:4b:91: 5a:28:ef:5c:e2:28:d4:65:57:58:0d:ac:b0:16:ae: 18:ca:0d:9c:b8:de:e8:1a:61:8d:9d:b0:5a:98:20: 41:17:a7:88:5f:87:ef:29:60:8a:5c:ed:dd:0c:d5: c8:5c:12:54:b3:5a:a3:bd:4a:4a:8e:be:1e:7f:b5: 99:00:a8:d2:27:83:18:61:e2:05:6d:88:ae:80:de: f2:99:31:0e:15:ab:08:09:a5:5a:12:b2:51:55:ee: 9b:ae:f3:26:cb:02:35:35:9d:25:99:09:fc:0e:46: 47:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A5:D9:AB:F3:C9:51:C2:39:5B:F9:9E:99:C6:1F:49:AC:AE:DF:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1b95b7d-ad09-3d7e-b7cf-af67bb04a901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:7a:34:11:55:fe:1d:4a:a7:b7:e1:72:2d:c0:9b:ad:6f:66: b5:c4:44:7f:a7:46:2a:ad:0e:dc:21:01:d1:a1:83:f1:cb:51: 2f:a4:e1:3c:12:ff:77:d9:cb:b5:fb:70:7c:50:ea:16:29:18: 1f:9b:ea:6b:0d:d1:37:23:cc:6d:fe:61:20:40:38:bb:f3:da: 42:f1:e6:fa:ad:e0:26:10:06:c5:44:39:db:33:d2:b1:0a:c2: 61:0d:f5:6a:8a:97:1d:6a:a0:c3:b9:d2:e3:85:1c:95:92:27: af:3f:23:16:17:a3:ac:95:ed:93:50:54:66:1f:60:a2:04:e9: 30:b0:ef:0e:fc:e7:50:99:0c:2c:27:39:68:a5:de:30:77:75: da:bf:44:2c:74:d2:22:37:ac:ae:3a:f6:5b:5d:c5:60:f6:fd: 83:f8:28:c2:d0:0d:bb:3c:ad:14:06:99:89:b6:62:d3:d8:62: e8:d7:f9:6a:5a:ed:fa:09:c5:ed:f4:e2:2f:11:2d:11:c7:d9: df:c8:52:cb:d9:15:c3:d1:d4:e9:7b:03:40:0d:79:c9:ad:09: 32:e9:3b:3b:6f:ae:df:6b:38:7d:f9:54:87:c5:72:98:36:73: c0:43:ce:51:16:b9:31:f2:da:8b:44:95:23:37:9a:b7:01:12: 03:75:14:b4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqeljjYZnUa/qO3MdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ZjI5ODY2NmItNTBiZC00ZWEzLWFmZjktYmJkMmQ3ODY1MmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPMLtOiS00Tki0MU57DME3K9Gy+pRtasHJPD 2QBF0TrHQb2obzlf64pQ+TiVdRkicxkJbpacrbfwV7FhbxweuKBsTHWyMzmGiAzp uzTCGR/ZcvLeyQ42yRUcMgb0ulnkdq6k5lRyTZ3xUwbieOCPHLuicwkmEpO33oLk pk4ae7hn5KrKXwKHIt9H/jii77XGnMGmS5FaKO9c4ijUZVdYDaywFq4Yyg2cuN7o GmGNnbBamCBBF6eIX4fvKWCKXO3dDNXIXBJUs1qjvUpKjr4ef7WZAKjSJ4MYYeIF bYiugN7ymTEOFasICaVaErJRVe6brvMmywI1NZ0lmQn8DkZHzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIal2avzyVHCOVv5npnGH0msrt+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDFiOTViN2QtYWQwOS0z ZDdlLWI3Y2YtYWY2N2JiMDRhOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBnejQRVf4dSqe34XItwJutb2a1xER/p0YqrQ7cIQHRoYPxy1EvpOE8 Ev932cu1+3B8UOoWKRgfm+prDdE3I8xt/mEgQDi789pC8eb6reAmEAbFRDnbM9Kx CsJhDfVqipcdaqDDudLjhRyVkievPyMWF6Osle2TUFRmH2CiBOkwsO8O/OdQmQws Jzlopd4wd3Xav0QsdNIiN6yuOvZbXcVg9v2D+CjC0A27PK0UBpmJtmLT2GLo1/lq Wu36CcXt9OIvES0Rx9nfyFLL2RXD0dTpewNADXnJrQky6Ts7b67fazh9+VSHxXKY NnPAQ85RFrkx8tqLRJUjN5q3ARIDdRS0 -----END CERTIFICATE-----Generated at Mon Aug 4 14:42:39 2025 by rpki-client