$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec280705-c7b3-339c-8b74-41412840f8bb.roa File: ec280705-c7b3-339c-8b74-41412840f8bb.roa (raw, json) Hash identifier: KPylk7CW9nemXoiVHZV9lA715bbgL03wcAkkasEdPDs= Subject key identifier: 9B:12:BC:5F:1A:02:DE:3D:B3:01:87:C9:38:40:CE:21:17:B8:00:32 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963F967968F72DCB4CAD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec280705-c7b3-339c-8b74-41412840f8bb.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396578 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:3f:96:79:68:f7:2d:cb:4c:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=5101c9f6-0286-473b-ba59-da1c6fdb3906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c7:75:a0:83:f1:e3:52:83:92:eb:f4:c5:03: b3:fb:b3:07:8d:7f:1c:1d:f9:8a:8b:cf:e1:2b:61: 53:05:94:bc:81:56:25:97:0e:a6:48:65:3e:b4:fa: 9b:25:1a:45:fc:97:fb:aa:8c:3a:a4:8a:9a:70:55: 2c:4f:b5:15:3c:a7:a9:f9:4d:7d:93:22:6a:66:84: 97:5a:9b:b9:54:cc:71:47:2e:9c:8d:c5:21:40:a4: d9:4b:44:fc:c3:52:35:b0:b3:7d:35:03:f0:19:2a: a7:d4:47:0b:7d:85:a9:1a:4c:ac:83:ac:de:cb:48: bb:d9:d0:8a:80:99:02:1b:ce:a3:c7:0a:bf:54:d0: 92:6c:b7:5a:3a:c8:ba:3f:85:3d:31:b6:b3:b8:1d: cc:f4:19:25:bb:cf:1e:f7:2f:7c:23:cb:74:91:27: 95:51:bc:d8:25:ff:ff:01:90:c1:cc:1a:f6:5f:6f: e8:45:d7:80:c4:a6:03:92:0d:c6:c7:e7:51:c0:ff: f2:30:3f:1c:de:02:b1:d1:23:50:39:2c:95:13:54: 63:51:a7:99:80:05:c7:e1:e9:80:f3:f1:30:43:ec: 3c:00:1a:03:e0:8f:19:20:33:2f:54:69:4e:ff:cc: 7a:c1:78:dd:56:57:ad:7b:b1:92:6d:85:e5:fe:bf: 81:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:12:BC:5F:1A:02:DE:3D:B3:01:87:C9:38:40:CE:21:17:B8:00:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec280705-c7b3-339c-8b74-41412840f8bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:53:80:5c:47:7c:a6:93:41:02:66:e2:8a:49:18:74:ce:f2: 6f:7e:08:d4:31:f1:c4:0c:d4:0b:cf:26:cd:fa:88:89:11:3c: ee:d3:5a:fb:bc:e5:8f:18:bc:e9:f4:a4:5f:b8:46:18:6e:a9: 66:c0:c3:42:c0:b9:48:d3:e5:0e:9b:7e:ad:34:48:37:21:96: 87:9c:e8:8c:11:6e:66:8c:7c:f0:a5:80:a0:ad:d3:4d:77:cd: d0:e7:76:40:e6:f9:56:2c:a5:c5:79:53:06:51:2b:1b:1b:fc: ef:2d:07:16:21:d1:37:23:2b:12:54:50:cf:ea:c8:f7:fd:92: 69:1c:cb:84:d1:ab:51:8f:b5:45:15:2b:b8:19:0e:a3:ad:83: 23:e6:c0:61:e2:4d:99:82:ba:e9:e3:1b:35:ae:e2:c2:a3:10: 1a:b6:26:80:28:92:a6:6f:3d:e9:20:9c:45:5a:75:47:16:bf: 63:0d:a4:fd:b3:83:56:9c:b1:22:e1:17:20:ba:a2:04:5f:22: 87:f6:2a:d7:4b:03:46:bd:f4:b1:82:6c:b0:ca:a0:9b:2c:3b: 08:f7:36:a6:7e:95:53:16:ce:b6:bc:6c:0e:52:f4:d8:c1:e9: 74:01:12:e9:18:3b:03:a0:1a:99:df:1a:f9:37:61:63:16:09: 7e:ad:6f:b4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelj+WeWj3LctMrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NTEwMWM5ZjYtMDI4Ni00NzNiLWJhNTktZGExYzZmZGIzOTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8d1oIPx41KDkuv0xQOz+7MHjX8cHfmKi8/h K2FTBZS8gVYllw6mSGU+tPqbJRpF/Jf7qow6pIqacFUsT7UVPKep+U19kyJqZoSX Wpu5VMxxRy6cjcUhQKTZS0T8w1I1sLN9NQPwGSqn1EcLfYWpGkysg6zey0i72dCK gJkCG86jxwq/VNCSbLdaOsi6P4U9MbazuB3M9Bklu88e9y98I8t0kSeVUbzYJf// AZDBzBr2X2/oRdeAxKYDkg3Gx+dRwP/yMD8c3gKx0SNQOSyVE1RjUaeZgAXH4emA 8/EwQ+w8ABoD4I8ZIDMvVGlO/8x6wXjdVlete7GSbYXl/r+BnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJsSvF8aAt49swGHyThAziEXuAAyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWMyODA3MDUtYzdiMy0z MzljLThiNzQtNDE0MTI4NDBmOGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAKU4BcR3ymk0ECZuKKSRh0zvJvfgjUMfHEDNQLzybN+oiJETzu01r7 vOWPGLzp9KRfuEYYbqlmwMNCwLlI0+UOm36tNEg3IZaHnOiMEW5mjHzwpYCgrdNN d83Q53ZA5vlWLKXFeVMGUSsbG/zvLQcWIdE3IysSVFDP6sj3/ZJpHMuE0atRj7VF FSu4GQ6jrYMj5sBh4k2Zgrrp4xs1ruLCoxAatiaAKJKmbz3pIJxFWnVHFr9jDaT9 s4NWnLEi4RcguqIEXyKH9irXSwNGvfSxgmywyqCbLDsI9zamfpVTFs62vGwOUvTY wel0ARLpGDsDoBqZ3xr5N2FjFgl+rW+0 -----END CERTIFICATE-----Generated at Tue Aug 5 20:08:47 2025 by rpki-client