$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb1eec45-973c-3753-886a-eb35a4c92628.roa File: fb1eec45-973c-3753-886a-eb35a4c92628.roa (raw, json) Hash identifier: XLm87iG7APpcQbtcDhe4CMHmSX27V1DES3rH+iF8yN8= Subject key identifier: 5A:76:23:86:85:19:E8:49:EF:7D:3D:60:09:81:57:AD:AE:16:E2:88 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9E963A6056DC0B12B3F01850 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb1eec45-973c-3753-886a-eb35a4c92628.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 36618 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:3a:60:56:dc:0b:12:b3:f0:18:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=6128dea1-712e-4560-b3fc-bd02139bb837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e4:65:dc:f8:95:66:4c:a6:6a:71:3b:b3:0a: e0:8f:1e:78:94:77:93:93:3f:4d:8b:f7:6c:2d:91: 6a:97:47:b2:98:fe:dc:5e:6b:8a:30:5c:37:17:64: 01:fe:22:fd:23:a9:76:f9:52:c8:48:40:4f:62:19: 03:63:fb:9e:86:d2:a2:f1:02:73:ed:a4:ef:22:21: fc:3a:25:14:64:58:7a:07:0c:2f:a7:60:14:50:98: 4d:39:b8:4e:f0:96:4a:bd:03:28:fd:56:55:87:43: 67:4b:43:99:76:b1:12:05:d8:57:ab:38:e3:a3:96: 85:35:1c:e0:61:6c:6d:08:2e:6b:e7:7f:98:4a:66: 7a:ff:b8:10:0a:49:58:81:18:5b:b8:55:07:17:74: ac:3c:70:ba:ab:41:09:53:e3:be:ee:c5:e3:64:24: 04:e8:65:cf:e7:a7:e4:bc:28:d6:6d:e2:e7:23:e9: b1:6b:76:43:dc:b6:2f:ad:3f:df:33:b1:3c:4e:63: e4:1a:40:07:9a:2e:e9:b1:16:ba:51:00:b0:15:bd: db:ec:73:b5:4d:84:bb:f3:1b:c2:94:ee:fd:04:23: 0f:38:c7:36:cc:a3:a4:e3:a0:81:ae:2a:9c:06:c5: 77:7c:bc:29:dd:40:97:f0:95:58:e6:da:cc:db:0d: 71:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:76:23:86:85:19:E8:49:EF:7D:3D:60:09:81:57:AD:AE:16:E2:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb1eec45-973c-3753-886a-eb35a4c92628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:01:6f:e5:00:f4:3b:e2:1c:f6:43:2d:41:a7:46:58:5d:11: db:9d:ff:1e:d0:b6:57:45:6e:6d:26:7a:f3:fe:72:90:5c:a2: 9a:f6:74:7f:e4:9a:b8:9a:2b:e9:0d:1c:43:4d:fc:d4:28:30: 64:79:d4:e9:8f:27:0e:dd:c3:df:86:c7:a8:3d:10:67:29:75: 60:25:b3:ee:97:0f:74:d8:51:18:e6:fb:69:67:f3:d8:42:b6: ae:79:82:33:9c:cf:49:43:9d:df:05:38:54:95:57:ae:65:14: 5e:92:12:1b:19:98:e1:d2:70:41:41:8a:2c:89:dd:e1:a3:a5: d4:1f:14:14:07:9c:3c:9a:3e:15:7d:ba:11:34:6b:2f:26:1c: d2:b4:d8:65:1c:dd:d0:d1:db:59:07:cf:0a:1a:70:f6:85:08: 82:d2:64:86:54:47:2e:a1:87:2b:76:96:9c:6b:eb:e3:d3:2d: 85:8d:03:d1:36:83:ee:58:37:77:ed:71:b2:8d:db:d1:29:3c: 1b:ab:48:0e:9a:55:95:b1:4e:1a:cc:57:e4:25:d3:f2:f0:d5: ad:90:11:98:25:1b:fc:68:41:44:2f:11:72:e0:e2:49:7e:5c: 0b:64:46:f0:d2:29:0e:7c:a6:49:09:a8:73:58:10:a2:8d:7f: c3:e4:7e:cb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqeljpgVtwLErPwGFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NjEyOGRlYTEtNzEyZS00NTYwLWIzZmMtYmQwMjEzOWJiODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeRl3PiVZkymanE7swrgjx54lHeTkz9Ni/ds LZFql0eymP7cXmuKMFw3F2QB/iL9I6l2+VLISEBPYhkDY/uehtKi8QJz7aTvIiH8 OiUUZFh6Bwwvp2AUUJhNObhO8JZKvQMo/VZVh0NnS0OZdrESBdhXqzjjo5aFNRzg YWxtCC5r53+YSmZ6/7gQCklYgRhbuFUHF3SsPHC6q0EJU+O+7sXjZCQE6GXP56fk vCjWbeLnI+mxa3ZD3LYvrT/fM7E8TmPkGkAHmi7psRa6UQCwFb3b7HO1TYS78xvC lO79BCMPOMc2zKOk46CBriqcBsV3fLwp3UCX8JVY5trM2w1xewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFp2I4aFGehJ7309YAmBV62uFuKIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmIxZWVjNDUtOTczYy0z NzUzLTg4NmEtZWIzNWE0YzkyNjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBrAW/lAPQ74hz2Qy1Bp0ZYXRHbnf8e0LZXRW5tJnrz/nKQXKKa9nR/ 5Jq4mivpDRxDTfzUKDBkedTpjycO3cPfhseoPRBnKXVgJbPulw902FEY5vtpZ/PY QraueYIznM9JQ53fBThUlVeuZRRekhIbGZjh0nBBQYosid3ho6XUHxQUB5w8mj4V fboRNGsvJhzStNhlHN3Q0dtZB88KGnD2hQiC0mSGVEcuoYcrdpaca+vj0y2FjQPR NoPuWDd37XGyjdvRKTwbq0gOmlWVsU4azFfkJdPy8NWtkBGYJRv8aEFELxFy4OJJ flwLZEbw0ikOfKZJCahzWBCijX/D5H7L -----END CERTIFICATE-----Generated at Wed Aug 6 12:39:44 2025 by rpki-client