$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95e11abb-54c7-3934-90d1-fdd8904d9ee3.roa File: 95e11abb-54c7-3934-90d1-fdd8904d9ee3.roa (raw, json) Hash identifier: C/CRFReS6x3EcZ2CpFjtBoZ8qTU/gbHcwy9hBisC0vc= Subject key identifier: 4A:50:22:36:04:3C:9E:3A:31:B9:28:0B:27:2A:D7:19:5B:6A:FF:D5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AE891394AF12DA79CF466A600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95e11abb-54c7-3934-90d1-fdd8904d9ee3.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 396828 IP address blocks: 209.112.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:39:4a:f1:2d:a7:9c:f4:66:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=40d231c1-1a87-4e94-b9ee-40b0791a45f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:55:18:42:79:b7:f9:53:fd:89:83:31:04:12: a4:9d:35:c0:f5:8f:52:61:93:ec:72:6f:09:d2:fd: b6:ba:86:75:cf:6a:6e:e3:a0:db:ce:d7:ba:cc:51: 17:c7:01:68:e5:f9:c4:08:fc:b8:0f:d8:d2:2c:b7: 29:4d:f4:1f:f9:9d:c3:8b:07:58:a4:5d:a0:88:be: 3f:81:27:4f:be:4c:dd:8a:5c:0e:29:3f:c5:60:32: c9:98:a3:42:68:8f:03:ec:17:12:19:1f:82:70:41: a6:4f:10:37:86:b5:8a:b8:70:b4:5e:ce:06:46:af: 13:5e:01:8d:60:8e:a9:94:26:4d:e8:c5:1d:d3:7d: c7:3e:37:fd:dc:91:31:bb:2d:01:cb:ec:e4:65:a4: 47:5a:93:47:ea:07:60:35:29:41:a3:e1:0c:03:45: be:f3:ab:a6:bb:73:75:b2:e8:be:4a:d5:f0:0a:25: 3a:d1:2e:ff:5c:ef:bf:a0:c0:1d:d8:7e:34:be:68: 49:57:0f:c5:74:01:5f:f6:2b:b6:01:fe:90:8b:60: 27:85:ff:8b:19:10:ad:0d:f1:d8:cd:76:c6:10:36: aa:fc:f2:c7:98:be:0c:eb:af:99:59:a4:97:ab:3f: ae:32:40:68:77:33:27:7e:70:e1:dc:98:82:d2:f8: 4e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:50:22:36:04:3C:9E:3A:31:B9:28:0B:27:2A:D7:19:5B:6A:FF:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95e11abb-54c7-3934-90d1-fdd8904d9ee3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:2e:22:3a:61:1f:da:13:0d:ed:7a:88:b1:63:cf:9b:bf:42: a1:b5:3c:c4:dd:84:73:d2:9c:05:98:37:06:04:c3:41:24:1e: cd:07:86:b6:b5:75:38:36:6a:6f:da:04:13:c4:ec:c5:2c:d2: 12:7e:6a:9a:ed:62:a3:3b:7f:3f:8c:da:23:63:8f:1b:26:61: bf:bd:7d:5b:05:a9:73:94:93:be:e7:01:4c:6d:f2:15:dd:2d: cc:50:cb:ab:66:32:30:6c:a1:4a:17:a8:0b:d3:3a:be:59:62: 0a:6d:54:22:32:f0:07:70:3f:4d:5f:f5:03:c8:e3:bc:30:df: c4:d1:21:a1:da:7e:ec:cf:4b:33:c2:e0:86:58:3d:1d:82:14: c1:57:86:93:bd:ca:7c:d6:5a:58:4e:1e:55:4e:e3:d4:53:89: 21:49:c1:e2:73:45:a5:d5:bd:fc:d2:15:a3:db:09:92:fb:2d: 2c:da:12:df:b5:0c:a2:d0:66:76:2a:d6:6a:a7:38:1e:e1:36: ac:53:8e:d3:a3:3f:38:f0:52:8e:33:c8:0d:62:82:4d:3c:07: c3:ab:f0:cf:45:7e:1e:63:a8:9a:2f:ab:a9:b9:17:95:b0:8f: 43:84:b5:98:bd:00:ca:d9:5a:0b:6b:e9:63:76:d8:c6:d7:77: 1c:09:14:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokTlK8S2nnPRmpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NDBkMjMxYzEtMWE4Ny00ZTk0LWI5ZWUtNDBiMDc5MWE0NWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlUYQnm3+VP9iYMxBBKknTXA9Y9SYZPscm8J 0v22uoZ1z2pu46Dbzte6zFEXxwFo5fnECPy4D9jSLLcpTfQf+Z3DiwdYpF2giL4/ gSdPvkzdilwOKT/FYDLJmKNCaI8D7BcSGR+CcEGmTxA3hrWKuHC0Xs4GRq8TXgGN YI6plCZN6MUd033HPjf93JExuy0By+zkZaRHWpNH6gdgNSlBo+EMA0W+86umu3N1 sui+StXwCiU60S7/XO+/oMAd2H40vmhJVw/FdAFf9iu2Af6Qi2Anhf+LGRCtDfHY zXbGEDaq/PLHmL4M66+ZWaSXqz+uMkBodzMnfnDh3JiC0vhOyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpQIjYEPJ46MbkoCycq1xlbav/VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTVlMTFhYmItNTRjNy0z OTM0LTkwZDEtZmRkODkwNGQ5ZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcuIjphH9oTDe16iLFjz5u/QqG1PMTdhHPSnAWYNwYEw0EkHs0Hhra1 dTg2am/aBBPE7MUs0hJ+aprtYqM7fz+M2iNjjxsmYb+9fVsFqXOUk77nAUxt8hXd LcxQy6tmMjBsoUoXqAvTOr5ZYgptVCIy8AdwP01f9QPI47ww38TRIaHafuzPSzPC 4IZYPR2CFMFXhpO9ynzWWlhOHlVO49RTiSFJweJzRaXVvfzSFaPbCZL7LSzaEt+1 DKLQZnYq1mqnOB7hNqxTjtOjPzjwUo4zyA1igk08B8Or8M9Ffh5jqJovq6m5F5Ww j0OEtZi9AMrZWgtr6WN22MbXdxwJFNw= -----END CERTIFICATE-----Generated at Sat Aug 23 15:06:25 2025 by rpki-client