$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95e11abb-54c7-3934-90d1-fdd8904d9ee3.roa File: 95e11abb-54c7-3934-90d1-fdd8904d9ee3.roa (raw, json) Hash identifier: P2EXO/BCDmQkkez3SH49XDD244ll6GU3Ui5Poo375yo= Subject key identifier: 33:2D:E4:10:B6:07:74:3F:D5:A2:A5:10:4D:B2:03:89:46:42:E5:52 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A07D53C5F5D62B400B019B440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95e11abb-54c7-3934-90d1-fdd8904d9ee3.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 396828 IP address blocks: 209.112.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:3c:5f:5d:62:b4:00:b0:19:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=d39fd9c5-279d-4f11-9cbf-2c6a6072c3a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c7:1c:e7:1e:d6:32:0c:27:be:f3:e6:6c:61: c0:4e:02:3c:cf:7d:94:11:a3:20:4f:87:68:f8:1b: 80:03:41:3a:fc:fd:f7:bf:78:8b:f0:d9:5a:bc:78: 1c:77:1f:0e:99:f5:16:15:92:f6:5c:84:1c:1e:02: 8c:2f:ee:23:ba:e2:67:3f:7e:32:ef:72:7b:d2:23: 74:21:ce:f9:a8:3a:4d:d0:72:69:99:29:81:09:ba: 37:3f:6f:bb:6b:04:8f:4c:e7:c0:2b:e8:6f:eb:cc: 3f:05:6e:79:cb:31:fe:ed:2c:a1:99:72:a1:89:cb: 18:2f:62:9e:c1:8e:81:f8:3d:80:3d:bc:a8:d6:54: ca:e0:81:fd:53:a0:39:6b:ef:55:34:d1:09:0b:0b: 33:fa:27:87:e5:ed:16:49:b1:33:29:5b:03:69:f5: e2:55:3d:bc:67:0b:a6:45:63:84:dc:82:9f:30:90: ce:9a:0a:09:c4:c3:97:59:ea:64:81:65:6d:55:20: 16:3c:e2:73:bb:f5:af:88:bd:f4:1b:fa:36:1a:52: 10:27:d1:93:82:ab:f8:a9:b8:ce:c7:33:55:cf:ac: f4:54:31:8f:5e:0b:ff:c3:eb:f4:b0:1c:1b:6d:b2: 1b:3d:0e:79:26:34:66:73:c9:12:c9:2f:10:57:09: d2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2D:E4:10:B6:07:74:3F:D5:A2:A5:10:4D:B2:03:89:46:42:E5:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95e11abb-54c7-3934-90d1-fdd8904d9ee3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:26:2b:c2:72:10:c2:15:61:99:9c:db:8b:e2:8d:9a:28:62: 17:60:99:09:75:74:fb:a3:bc:43:10:5d:4f:48:f7:c0:8a:64: 9a:34:5f:c2:c0:c0:b0:8e:cc:8f:5f:af:74:12:34:e7:e4:47: 8e:08:93:48:e7:c9:1d:1d:47:54:a7:6e:53:e3:72:98:2e:da: 96:8b:21:3e:a1:c6:51:0f:eb:4a:36:94:40:4c:3b:bd:6e:2b: a2:71:9a:ff:05:27:b8:63:ff:b7:73:63:20:8b:ae:c1:72:7b: 70:ea:d1:2d:48:4a:96:22:ed:02:62:04:f1:c1:bc:5e:80:d5: 10:7a:80:2e:a7:ea:3b:f6:26:46:c4:bb:3a:f2:8d:fb:8a:ab: 70:08:81:93:2e:07:9b:af:1c:33:90:60:a2:29:60:1f:7f:27: 9b:dc:13:e3:ba:c6:fc:f0:0b:53:46:2d:71:10:c6:7d:02:53: 30:ce:ad:8a:ff:d0:a4:1b:b5:67:07:2a:a4:a6:9b:ac:47:e6: 3f:e4:e7:7a:e1:d3:19:95:9e:bc:d4:72:95:89:85:11:06:58: c6:04:07:2a:ea:fd:fe:1f:54:8f:5f:e5:e4:45:a2:a9:54:c7: f1:c2:b7:97:45:63:99:b9:36:bb:a2:ba:5c:64:b6:a7:fb:07: c4:fa:f7:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1TxfXWK0ALAZtEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk ZDM5ZmQ5YzUtMjc5ZC00ZjExLTljYmYtMmM2YTYwNzJjM2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3scc5x7WMgwnvvPmbGHATgI8z32UEaMgT4do +BuAA0E6/P33v3iL8NlavHgcdx8OmfUWFZL2XIQcHgKML+4juuJnP34y73J70iN0 Ic75qDpN0HJpmSmBCbo3P2+7awSPTOfAK+hv68w/BW55yzH+7SyhmXKhicsYL2Ke wY6B+D2APbyo1lTK4IH9U6A5a+9VNNEJCwsz+ieH5e0WSbEzKVsDafXiVT28Zwum RWOE3IKfMJDOmgoJxMOXWepkgWVtVSAWPOJzu/WviL30G/o2GlIQJ9GTgqv4qbjO xzNVz6z0VDGPXgv/w+v0sBwbbbIbPQ55JjRmc8kSyS8QVwnSXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMt5BC2B3Q/1aKlEE2yA4lGQuVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTVlMTFhYmItNTRjNy0z OTM0LTkwZDEtZmRkODkwNGQ5ZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcmK8JyEMIVYZmc24vijZooYhdgmQl1dPujvEMQXU9I98CKZJo0X8LA wLCOzI9fr3QSNOfkR44Ik0jnyR0dR1SnblPjcpgu2paLIT6hxlEP60o2lEBMO71u K6Jxmv8FJ7hj/7dzYyCLrsFye3Dq0S1ISpYi7QJiBPHBvF6A1RB6gC6n6jv2JkbE uzryjfuKq3AIgZMuB5uvHDOQYKIpYB9/J5vcE+O6xvzwC1NGLXEQxn0CUzDOrYr/ 0KQbtWcHKqSmm6xH5j/k53rh0xmVnrzUcpWJhREGWMYEByrq/f4fVI9f5eRFoqlU x/HCt5dFY5m5Nruiulxktqf7B8T69xk= -----END CERTIFICATE-----Generated at Fri Jun 6 19:29:45 2025 by rpki-client