$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f20ab0a5-f910-3ea8-a01e-bcb09ea221a3.roa File: f20ab0a5-f910-3ea8-a01e-bcb09ea221a3.roa (raw, json) Hash identifier: 5Zkvv2VCkjSQKzVrP/+nWsPwGQfVDLvY14/g4jQn5ec= Subject key identifier: D0:75:15:42:7C:D0:B0:8F:7A:2C:5E:DC:EE:91:EA:BA:9A:E0:F7:3A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E9640E71C6B3E9715DDCC80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f20ab0a5-f910-3ea8-a01e-bcb09ea221a3.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 396588 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:40:e7:1c:6b:3e:97:15:dd:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=88a7d93b-772d-4404-b430-46e49348191a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:67:d4:26:f5:3f:c1:a7:92:2c:c5:af:f7:90: 35:f8:6f:bc:db:c1:33:ec:dc:86:ad:3d:8b:de:02: c9:85:ec:7c:4f:ce:e3:fc:86:94:97:0f:cf:15:1d: f6:72:d4:35:b2:f2:fc:d6:f6:73:b2:da:35:72:d5: e4:b7:62:65:63:8f:81:59:01:17:ac:67:b4:43:7f: 24:ef:21:e1:ba:92:74:ae:a5:2a:9a:23:4f:e1:14: c9:67:13:d5:40:50:48:b8:b9:9c:5c:85:7c:d7:63: c4:c9:61:8e:a1:97:93:85:25:55:f9:19:8c:48:a3: 63:8e:8d:c7:59:a0:91:96:27:4e:c1:ed:7a:13:45: c0:91:88:75:99:e1:83:c4:e5:d8:eb:7d:1f:18:07: 92:e8:29:0e:01:08:bf:9a:6d:f1:27:5c:b6:15:74: fa:53:c1:9b:83:d5:4b:f9:03:5a:ab:82:a9:6e:1b: 0f:68:ae:79:5a:1c:ab:10:eb:bf:d1:2a:43:53:3b: 2b:63:90:90:9f:5f:0a:6b:7b:cb:66:94:9d:f5:e2: 9a:d7:60:1a:66:66:a7:c2:44:cb:7f:b3:47:c2:d3: 18:40:67:bc:a6:11:92:e0:81:bd:52:ac:88:2c:53: 3f:59:24:d9:6c:d5:12:de:77:03:fe:83:7f:7a:52: 6c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:75:15:42:7C:D0:B0:8F:7A:2C:5E:DC:EE:91:EA:BA:9A:E0:F7:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f20ab0a5-f910-3ea8-a01e-bcb09ea221a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:57:5a:3e:6a:90:2e:92:c1:f0:78:5e:21:72:88:f6:1d:9e: 47:48:8e:d5:a0:ab:7b:50:b8:cf:ae:40:26:52:7b:b3:66:9e: 79:74:a1:fc:ea:89:99:db:06:aa:15:05:62:e5:7b:fc:6f:df: b1:5f:68:c1:22:8d:b4:e3:63:49:1c:f7:d2:6d:55:01:a1:97: 32:7b:76:b0:72:59:51:8d:e6:79:af:d9:62:c1:c7:91:23:23: 5d:e7:79:4f:06:81:24:96:ca:d0:60:c7:3e:d9:9a:b8:69:01: b6:9a:ee:d1:7b:44:dc:cb:69:63:4c:63:43:7f:7d:36:3d:5a: d3:2e:3e:df:7d:51:cb:14:44:9c:be:06:7d:88:b3:26:12:6d: 4c:63:f5:c4:90:61:87:10:c7:c9:10:36:31:27:67:5a:a8:8a: 90:91:40:dd:34:37:7e:dd:55:a6:8f:fb:8d:7d:b2:85:c0:dd: fa:85:cc:1b:63:f8:49:a7:53:be:31:81:dd:33:65:09:e8:90: 3f:c9:08:ec:b6:74:1f:e4:7d:35:ab:bc:f9:bb:0a:b2:5f:b3: 96:8e:07:8b:ca:7c:9b:6d:31:a3:e8:90:17:2d:bc:82:e6:08: a9:7e:10:93:3e:db:1e:9f:29:92:ac:e0:6f:c7:ce:f3:50:ce: fa:9c:5f:cb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqelkDnHGs+lxXdzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ODhhN2Q5M2ItNzcyZC00NDA0LWI0MzAtNDZlNDkzNDgxOTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA92fUJvU/waeSLMWv95A1+G+828Ez7NyGrT2L 3gLJhex8T87j/IaUlw/PFR32ctQ1svL81vZzsto1ctXkt2JlY4+BWQEXrGe0Q38k 7yHhupJ0rqUqmiNP4RTJZxPVQFBIuLmcXIV812PEyWGOoZeThSVV+RmMSKNjjo3H WaCRlidOwe16E0XAkYh1meGDxOXY630fGAeS6CkOAQi/mm3xJ1y2FXT6U8Gbg9VL +QNaq4KpbhsPaK55WhyrEOu/0SpDUzsrY5CQn18Ka3vLZpSd9eKa12AaZmanwkTL f7NHwtMYQGe8phGS4IG9UqyILFM/WSTZbNUS3ncD/oN/elJsvwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNB1FUJ80LCPeixe3O6R6rqa4Pc6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjIwYWIwYTUtZjkxMC0z ZWE4LWEwMWUtYmNiMDllYTIyMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAzV1o+apAuksHweF4hcoj2HZ5HSI7VoKt7ULjPrkAmUnuzZp55dKH8 6omZ2waqFQVi5Xv8b9+xX2jBIo2042NJHPfSbVUBoZcye3awcllRjeZ5r9liwceR IyNd53lPBoEklsrQYMc+2Zq4aQG2mu7Re0Tcy2ljTGNDf302PVrTLj7ffVHLFESc vgZ9iLMmEm1MY/XEkGGHEMfJEDYxJ2daqIqQkUDdNDd+3VWmj/uNfbKFwN36hcwb Y/hJp1O+MYHdM2UJ6JA/yQjstnQf5H01q7z5uwqyX7OWjgeLynybbTGj6JAXLbyC 5gipfhCTPtsenymSrOBvx87zUM76nF/L -----END CERTIFICATE-----Generated at Mon Aug 4 14:18:43 2025 by rpki-client