$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ef74e9c-a18b-3df6-bb81-58f9650aaba9.roa File: 0ef74e9c-a18b-3df6-bb81-58f9650aaba9.roa (raw, json) Hash identifier: cha5XX7Jh/7zEaYjz0jIPtfDL16gfM2LIRYN/TR/G6U= Subject key identifier: 8E:4D:97:53:DF:DD:22:06:38:72:38:80:47:63:8E:27:E8:CD:53:E1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F81DAD0A3AE2C706D4A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ef74e9c-a18b-3df6-bb81-58f9650aaba9.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 36621 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:81:da:d0:a3:ae:2c:70:6d:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=0b87e215-b7ff-414f-b309-67f24e79e506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:77:7f:6e:73:1d:82:ca:06:c0:90:f4:38:5f: 13:2d:f9:7a:14:77:e4:ef:2f:ec:d4:21:7b:ec:60: 6d:f5:84:0b:b7:05:4e:92:6c:f6:97:22:b7:43:1e: ad:60:bc:57:a2:48:ee:93:36:bd:2d:22:2b:b1:7c: 1b:ee:59:36:af:a7:41:37:a6:02:17:c6:7e:61:bf: 28:7c:78:3b:09:3b:21:f9:0e:ca:96:28:3d:fd:5e: 06:74:6d:c1:f9:16:91:5f:17:df:4c:0b:10:37:28: 11:70:c5:62:e4:9d:af:18:d2:a8:94:77:fc:95:78: ce:7b:e6:01:95:48:c2:0d:a1:f4:3b:29:01:2f:8a: 55:11:7b:17:80:a0:7f:60:a8:c8:b5:91:e0:02:74: fb:a3:e4:f3:e3:e6:62:35:a2:3f:b9:60:c4:77:eb: ab:1f:63:d1:33:7c:c9:57:8d:f0:76:20:ab:8f:57: d5:f7:b4:9e:b0:d4:e0:6c:51:5b:08:57:8a:34:2d: c1:18:74:d8:87:e2:78:c5:35:16:45:27:35:7c:da: e2:ee:2d:d6:12:1b:a6:ef:5a:f2:7b:4f:b2:66:0d: f3:ce:37:7e:0f:34:44:72:c0:50:b4:5a:e3:5f:8a: 99:08:0a:63:50:61:8d:7f:49:83:4e:02:96:14:d6: f8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4D:97:53:DF:DD:22:06:38:72:38:80:47:63:8E:27:E8:CD:53:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ef74e9c-a18b-3df6-bb81-58f9650aaba9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:09:c2:16:25:66:6c:19:d0:06:fa:93:f0:a4:7c:f5:78:f9: a4:c8:71:c0:17:be:6e:df:ac:b9:e1:fe:39:ae:30:2a:d8:fe: dc:35:cd:4c:25:c6:3c:da:85:46:ce:a1:bc:5c:71:7a:21:19: f7:01:58:fe:0c:d5:88:b1:84:44:3a:e6:af:4e:17:b0:f5:04: e9:7e:7a:94:1d:7e:d9:c5:ba:f9:d7:b4:cd:fc:1d:89:74:93: c9:c2:3b:20:50:09:d8:6e:00:20:83:bf:c0:15:96:47:03:42: a5:64:f3:10:6f:f3:6e:16:bb:0a:4e:93:3c:ea:dc:2f:71:e1: 24:1a:64:00:96:d9:f3:8e:ef:06:b6:fb:c7:67:a3:85:71:ba: 58:2d:25:b9:f1:05:eb:a2:f7:a0:61:56:8e:82:7e:4f:79:12: f2:1a:40:24:34:51:dc:53:70:b2:b2:44:17:1e:46:57:07:eb: a8:63:61:cc:19:ae:e1:5e:84:3a:22:1a:7f:10:cd:a6:c3:52: 8e:06:ba:db:51:ee:af:f1:11:e8:2c:04:4a:ba:ac:a0:9c:48: b0:c3:09:52:ff:2a:c4:8f:6b:dd:35:f6:0b:37:6e:f1:72:68: 53:a8:82:68:6d:91:7a:fd:58:12:4a:19:67:27:92:4e:92:f5: bf:b7:b8:f1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4Ha0KOuLHBtSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MGI4N2UyMTUtYjdmZi00MTRmLWIzMDktNjdmMjRlNzllNTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Hd/bnMdgsoGwJD0OF8TLfl6FHfk7y/s1CF7 7GBt9YQLtwVOkmz2lyK3Qx6tYLxXokjukza9LSIrsXwb7lk2r6dBN6YCF8Z+Yb8o fHg7CTsh+Q7Klig9/V4GdG3B+RaRXxffTAsQNygRcMVi5J2vGNKolHf8lXjOe+YB lUjCDaH0OykBL4pVEXsXgKB/YKjItZHgAnT7o+Tz4+ZiNaI/uWDEd+urH2PRM3zJ V43wdiCrj1fV97SesNTgbFFbCFeKNC3BGHTYh+J4xTUWRSc1fNri7i3WEhum71ry e0+yZg3zzjd+DzREcsBQtFrjX4qZCApjUGGNf0mDTgKWFNb45QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI5Nl1Pf3SIGOHI4gEdjjifozVPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGVmNzRlOWMtYTE4Yi0z ZGY2LWJiODEtNThmOTY1MGFhYmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBACcIWJWZsGdAG+pPwpHz1ePmkyHHAF75u36y54f45rjAq2P7cNc1M JcY82oVGzqG8XHF6IRn3AVj+DNWIsYREOuavThew9QTpfnqUHX7Zxbr517TN/B2J dJPJwjsgUAnYbgAgg7/AFZZHA0KlZPMQb/NuFrsKTpM86twvceEkGmQAltnzju8G tvvHZ6OFcbpYLSW58QXrovegYVaOgn5PeRLyGkAkNFHcU3CyskQXHkZXB+uoY2HM Ga7hXoQ6Ihp/EM2mw1KOBrrbUe6v8RHoLARKuqygnEiwwwlS/yrEj2vdNfYLN27x cmhTqIJobZF6/VgSShlnJ5JOkvW/t7jx -----END CERTIFICATE-----Generated at Sun May 11 08:16:57 2025 by rpki-client