$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/18b00075-3230-335e-9aae-6a305a9c5ebc.roa File: 18b00075-3230-335e-9aae-6a305a9c5ebc.roa (raw, json) Hash identifier: 5I5xK5Cl9sSot1ktcZyjCshIo2ktk1hxxwYFY70znl0= Subject key identifier: CA:4C:0C:77:51:E6:97:52:0F:9A:8B:8C:CD:80:50:FE:AC:D6:0A:3A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F899C882A8618CAD62180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/18b00075-3230-335e-9aae-6a305a9c5ebc.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396600 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:89:9c:88:2a:86:18:ca:d6:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=db8d3923-b4f9-4dc7-972e-5c6707a85bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:42:8a:be:cc:af:10:1b:13:d8:c3:5c:46:a1: 88:36:33:86:2d:72:6a:f1:df:96:a6:7d:2c:98:08: 60:51:51:60:5f:b8:bb:b6:47:91:e5:f2:80:a0:49: 19:7d:d6:a9:39:de:bd:21:59:80:48:cf:de:65:ab: d6:5b:d2:e4:cd:0c:bc:98:f4:70:b4:6e:76:52:da: 84:90:75:04:5d:09:cb:2f:60:fa:90:b4:c3:c9:40: 5b:6d:f9:1e:50:0d:1a:aa:ea:fc:0b:7a:13:43:ae: 03:2e:d6:cf:4f:31:4a:c5:29:14:28:87:31:1f:5a: 48:58:56:6f:b6:4a:03:a1:9e:a8:8e:1b:69:e2:dc: 8d:75:02:2c:d6:8a:ad:5e:ea:80:cd:ca:57:44:0e: 0d:8e:75:8f:35:03:36:f9:9c:9a:3e:a2:4e:bf:30: 2f:f6:50:b4:6c:ce:63:bf:7f:cb:33:11:f2:75:0d: 91:d7:02:0a:39:e3:e4:71:31:0d:0a:cc:37:fd:74: 4f:38:e8:e1:63:36:ec:e8:c3:69:8f:d8:9c:d8:f9: bc:41:a3:4c:fd:a0:98:3e:2c:05:3b:a6:dd:e7:be: 5b:59:f6:8e:16:59:2c:c5:06:b7:53:95:2b:1b:8e: a1:e0:c7:86:d9:b2:6a:18:73:f2:a8:c9:9d:3b:bf: 01:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4C:0C:77:51:E6:97:52:0F:9A:8B:8C:CD:80:50:FE:AC:D6:0A:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/18b00075-3230-335e-9aae-6a305a9c5ebc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:18:54:13:77:6f:69:0b:49:12:eb:88:9e:af:2b:6d:b0:4e: 02:3a:b5:a5:1c:5d:df:79:46:3d:be:b2:1f:50:ae:ee:dd:7e: 31:28:7f:87:88:4a:96:3e:0d:bf:94:16:6d:c7:94:56:8e:e4: ac:4e:70:0c:c6:f8:8c:8b:80:cb:c6:3f:ab:82:4b:d1:43:aa: 0b:a3:13:d9:61:e2:d6:3b:41:cc:f6:43:43:94:39:a3:6e:5d: 71:b0:80:e7:f5:bb:f5:88:85:d1:5e:d3:25:8b:e8:73:a0:5f: 65:a3:6b:4d:14:a4:09:38:3a:8f:a5:99:e9:9c:93:43:0f:d1: 7c:f2:f5:83:b8:47:c7:d8:08:ca:e6:36:00:38:d7:61:29:b6: c4:86:b6:8b:c1:46:ad:8a:b1:1f:a4:28:18:d1:8e:6e:78:ac: df:d4:7b:ec:88:53:e8:35:7b:74:c4:7b:18:26:c6:17:06:90: ad:5c:80:19:fd:a0:01:df:ec:0d:03:20:8f:fc:4d:14:69:47: 91:a9:6d:45:84:75:b4:9e:59:02:a9:d4:b9:a7:dd:13:ba:f1: f2:a4:2b:0c:fe:c5:e0:d6:a4:92:54:61:e2:0a:be:67:fe:21: 55:f1:ef:80:90:29:45:30:03:fa:5c:e2:9d:5c:3f:b9:de:c2: fb:af:c6:7e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4mciCqGGMrWIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZGI4ZDM5MjMtYjRmOS00ZGM3LTk3MmUtNWM2NzA3YTg1YmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkKKvsyvEBsT2MNcRqGINjOGLXJq8d+Wpn0s mAhgUVFgX7i7tkeR5fKAoEkZfdapOd69IVmASM/eZavWW9LkzQy8mPRwtG52UtqE kHUEXQnLL2D6kLTDyUBbbfkeUA0aqur8C3oTQ64DLtbPTzFKxSkUKIcxH1pIWFZv tkoDoZ6ojhtp4tyNdQIs1oqtXuqAzcpXRA4NjnWPNQM2+ZyaPqJOvzAv9lC0bM5j v3/LMxHydQ2R1wIKOePkcTENCsw3/XRPOOjhYzbs6MNpj9ic2Pm8QaNM/aCYPiwF O6bd575bWfaOFlksxQa3U5UrG46h4MeG2bJqGHPyqMmdO78BhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMpMDHdR5pdSD5qLjM2AUP6s1go6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMThiMDAwNzUtMzIzMC0z MzVlLTlhYWUtNmEzMDVhOWM1ZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRGFQTd29pC0kS64ieryttsE4COrWlHF3feUY9vrIfUK7u3X4xKH+H iEqWPg2/lBZtx5RWjuSsTnAMxviMi4DLxj+rgkvRQ6oLoxPZYeLWO0HM9kNDlDmj bl1xsIDn9bv1iIXRXtMli+hzoF9lo2tNFKQJODqPpZnpnJNDD9F88vWDuEfH2AjK 5jYAONdhKbbEhraLwUatirEfpCgY0Y5ueKzf1HvsiFPoNXt0xHsYJsYXBpCtXIAZ /aAB3+wNAyCP/E0UaUeRqW1FhHW0nlkCqdS5p90TuvHypCsM/sXg1qSSVGHiCr5n /iFV8e+AkClFMAP6XOKdXD+53sL7r8Z+ -----END CERTIFICATE-----Generated at Sun May 11 06:37:29 2025 by rpki-client