$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41d6c4b2-405b-4755-a8cd-19bdcef56730/29195d4c-acf3-319e-a81a-b46be44cbaf0.roa File: 29195d4c-acf3-319e-a81a-b46be44cbaf0.roa (raw, json) Hash identifier: yGbZP2Nb/3Lnya1cSXJx/X+m001cj18a8Oh49ACjqRs= Subject key identifier: A0:E3:4A:BE:AD:4E:89:D2:C1:FD:BD:3B:EF:C9:11:42:B6:17:44:39 Certificate issuer: /CN=41d6c4b2-405b-4755-a8cd-19bdcef56730 Certificate serial: 010D0C9F4328584A612B1387984F031773080240 Authority key identifier: 3C:99:62:9F:41:7F:52:B7:0E:1B:3A:D4:6E:87:0A:F8:E1:4B:36:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41d6c4b2-405b-4755-a8cd-19bdcef56730.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41d6c4b2-405b-4755-a8cd-19bdcef56730/29195d4c-acf3-319e-a81a-b46be44cbaf0.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 14618 IP address blocks: 209.127.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41d6c4b2-405b-4755-a8cd-19bdcef56730/41d6c4b2-405b-4755-a8cd-19bdcef56730.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41d6c4b2-405b-4755-a8cd-19bdcef56730/41d6c4b2-405b-4755-a8cd-19bdcef56730.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41d6c4b2-405b-4755-a8cd-19bdcef56730.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:13:87:98:4f:03:17:73:08:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41d6c4b2-405b-4755-a8cd-19bdcef56730 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=5a11aae8-cf7e-4e11-bd0e-52560cb39f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b6:7f:78:ab:c7:db:1c:d2:01:4e:df:e6:e0: 2c:2c:c8:e4:79:3f:51:70:a3:79:20:4d:4a:ba:45: b5:5b:30:2d:b3:ea:40:1a:fa:85:92:e0:14:24:af: ce:df:57:66:82:37:87:7e:c1:9b:fa:63:36:d5:23: 25:72:ff:c3:59:21:5e:f0:1b:f9:a4:43:90:5b:f2: 56:0f:49:89:ae:34:10:62:6e:e6:8c:7e:93:b1:5f: 45:24:5e:94:f8:1e:72:d1:9a:3f:85:95:d3:da:6e: f7:2d:88:31:81:eb:ba:fe:2c:bd:f1:8b:2d:8d:36: 66:f0:67:8d:9b:fb:f9:87:85:68:44:72:ea:8c:45: b0:52:6e:71:29:6a:20:2c:20:ac:f6:f2:8d:2f:57: 6a:72:d3:dd:4e:6f:28:29:84:0b:49:f7:5b:0c:42: 41:ae:ae:c8:bc:41:2b:13:ba:03:e3:c3:e4:67:a8: 59:32:56:8b:2e:47:c4:24:21:6c:8e:6b:11:d3:9f: fe:e2:52:73:d4:7e:34:0c:89:fe:78:3b:f7:0a:48: 9f:67:a3:03:59:b9:ce:15:89:72:b6:97:d2:8a:8d: b4:b3:12:35:8b:24:1d:31:01:ed:78:aa:97:45:86: 6c:a7:42:5a:8e:6f:48:06:ac:89:e0:34:a3:20:24: 06:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E3:4A:BE:AD:4E:89:D2:C1:FD:BD:3B:EF:C9:11:42:B6:17:44:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41d6c4b2-405b-4755-a8cd-19bdcef56730/29195d4c-acf3-319e-a81a-b46be44cbaf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41d6c4b2-405b-4755-a8cd-19bdcef56730/41d6c4b2-405b-4755-a8cd-19bdcef56730.crl X509v3 Authority Key Identifier: keyid:3C:99:62:9F:41:7F:52:B7:0E:1B:3A:D4:6E:87:0A:F8:E1:4B:36:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41d6c4b2-405b-4755-a8cd-19bdcef56730.cer sbgp-ipAddrBlock: critical IPv4: 209.127.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:2e:69:e2:3e:2e:4a:63:f3:4f:2b:5c:fd:85:ff:72:25:9b: f8:dd:9c:68:68:2a:8f:12:4b:e8:d4:28:36:48:0b:c9:16:79: d9:f8:47:eb:62:33:21:e5:6f:f7:ba:c2:9e:ad:b1:af:1c:a0: c5:e2:e4:61:43:e3:69:51:ff:4e:d4:70:e0:9f:c1:f3:ab:98: b6:cc:fc:e1:86:93:a6:4e:b2:65:9a:52:99:2b:b7:e0:7b:0d: c4:75:6a:84:fa:dd:da:8e:96:b2:69:dd:fc:5a:92:0c:4b:06: 48:31:87:2c:3f:dd:88:5a:07:9d:99:f5:bd:07:87:ff:c7:96: 99:48:9a:ab:c4:6f:9a:0a:0c:a4:14:33:ed:ee:0c:b8:24:65: 1c:92:02:94:5c:11:cd:87:a6:4a:72:a3:2f:a7:77:8c:8c:47: b1:1e:b3:1d:07:57:6b:b4:d5:ca:4e:81:92:5d:cf:9f:29:6b: 6a:fe:82:f6:40:3e:fc:8a:66:00:51:1b:55:7b:14:e7:0c:ed: 4d:b0:26:9b:1d:18:e5:11:d3:6d:4e:62:1b:7f:15:82:81:0e: 79:07:48:44:12:00:0c:38:94:5c:df:5e:2b:d7:7c:ea:51:92: fb:e2:2b:d4:70:5c:e5:a6:29:1a:1a:80:53:69:e3:19:5a:a8: d4:7c:7b:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxOHmE8DF3MIAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkNmM0YjItNDA1Yi00NzU1LWE4Y2QtMTliZGNlZjU2 NzMwMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk NWExMWFhZTgtY2Y3ZS00ZTExLWJkMGUtNTI1NjBjYjM5ZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbZ/eKvH2xzSAU7f5uAsLMjkeT9RcKN5IE1K ukW1WzAts+pAGvqFkuAUJK/O31dmgjeHfsGb+mM21SMlcv/DWSFe8Bv5pEOQW/JW D0mJrjQQYm7mjH6TsV9FJF6U+B5y0Zo/hZXT2m73LYgxgeu6/iy98YstjTZm8GeN m/v5h4VoRHLqjEWwUm5xKWogLCCs9vKNL1dqctPdTm8oKYQLSfdbDEJBrq7IvEEr E7oD48PkZ6hZMlaLLkfEJCFsjmsR05/+4lJz1H40DIn+eDv3CkifZ6MDWbnOFYly tpfSio20sxI1iyQdMQHteKqXRYZsp0Jajm9IBqyJ4DSjICQGuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDjSr6tTonSwf29O+/JEUK2F0Q5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MWQ2 YzRiMi00MDViLTQ3NTUtYThjZC0xOWJkY2VmNTY3MzAvMjkxOTVkNGMtYWNmMy0z MTllLWE4MWEtYjQ2YmU0NGNiYWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDFkNmM0YjItNDA1Yi00NzU1LWE4 Y2QtMTliZGNlZjU2NzMwLzQxZDZjNGIyLTQwNWItNDc1NS1hOGNkLTE5YmRjZWY1 NjczMC5jcmwwHwYDVR0jBBgwFoAUPJlin0F/UrcOGzrUbocK+OFLNsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MWQ2YzRiMi00MDViLTQ3NTUtYThjZC0xOWJk Y2VmNTY3MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsuaeI+Lkpj808rXP2F/3Ilm/jdnGhoKo8SS+jUKDZIC8kWedn4R+ti MyHlb/e6wp6tsa8coMXi5GFD42lR/07UcOCfwfOrmLbM/OGGk6ZOsmWaUpkrt+B7 DcR1aoT63dqOlrJp3fxakgxLBkgxhyw/3YhaB52Z9b0Hh//HlplImqvEb5oKDKQU M+3uDLgkZRySApRcEc2Hpkpyoy+nd4yMR7Eesx0HV2u01cpOgZJdz58pa2r+gvZA PvyKZgBRG1V7FOcM7U2wJpsdGOUR021OYht/FYKBDnkHSEQSAAw4lFzfXivXfOpR kvviK9RwXOWmKRoagFNp4xlaqNR8e3A= -----END CERTIFICATE-----Generated at Mon Aug 4 14:10:38 2025 by rpki-client