$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1aa06692-b809-3553-b7e5-2c7c80be727f.roa File: 1aa06692-b809-3553-b7e5-2c7c80be727f.roa (raw, json) Hash identifier: N7sRFAd7kMLJVEIqK3hss5KGbKNThU/wWmHseLeH0gw= Subject key identifier: 8C:6B:23:F0:66:0E:72:85:00:4A:BA:49:63:A4:DB:3A:66:03:6C:45 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F85C97D146A8F519A8D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1aa06692-b809-3553-b7e5-2c7c80be727f.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396555 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:85:c9:7d:14:6a:8f:51:9a:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=4ecdf858-e0fd-4942-8ef1-c1abef85f171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:17:3e:8e:31:84:94:54:96:bc:39:e2:42:08: 8d:62:0a:b5:32:4f:bf:56:f4:33:77:0c:45:b2:ce: 11:e4:03:47:17:38:4d:e1:fe:5b:a6:fb:ba:be:62: bc:92:05:e4:4d:1e:ad:48:e8:52:b2:05:ae:25:1d: 0d:dd:24:18:8d:7f:27:ec:c6:f9:21:ac:5b:93:7d: 60:89:44:3a:fe:00:84:57:07:68:2d:58:81:ad:a7: ad:63:d4:3f:7e:78:7d:87:f0:7c:e6:60:78:66:02: 00:9c:a9:f4:42:26:f0:84:9e:0e:f4:97:60:17:cb: 5b:a5:d3:bd:63:e8:fa:f0:38:27:1d:66:cc:ed:2a: 1d:2c:61:9a:5b:c7:8c:51:35:0e:c0:b5:4d:56:c1: 41:e2:bd:d0:5a:f5:76:23:7c:f5:5e:fb:76:2e:c8: c5:ab:1c:d0:d9:06:43:b8:06:01:41:54:f7:b9:0e: f3:67:4f:0e:04:75:b9:7d:a9:8e:6a:76:b1:3e:b7: dd:83:da:5f:5b:9c:04:6c:44:f3:0d:bc:14:e5:84: f2:7b:1f:fa:ec:4f:3c:38:94:81:36:e3:ae:8d:65: e6:68:1b:a7:d6:d2:00:3c:a0:74:ba:2d:37:72:08: 13:83:e8:00:38:5f:8a:1d:70:2a:2a:85:74:31:63: 40:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:6B:23:F0:66:0E:72:85:00:4A:BA:49:63:A4:DB:3A:66:03:6C:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1aa06692-b809-3553-b7e5-2c7c80be727f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:6f:e5:d7:e4:c4:fc:c5:d2:2e:48:3c:18:01:2d:07:a9:d8: 8e:ed:0d:65:fe:69:b7:98:bc:c0:c7:5a:23:81:91:4c:64:2f: bb:94:8e:24:8c:36:0c:b2:7a:69:39:b6:dc:cd:18:6c:b7:31: 4e:a3:59:44:dd:2e:89:03:da:d9:72:dc:40:c0:43:7c:41:08: fe:fa:14:06:34:5a:b2:9c:f2:08:11:c9:c3:28:0b:c1:e0:cb: be:ef:fa:f3:72:4d:5c:e9:2c:44:41:17:66:af:68:82:1d:b6: 1c:a6:78:4d:76:48:fb:0d:ac:30:64:54:33:89:d1:aa:0d:ad: 61:48:35:35:1c:c8:da:e4:03:57:b9:1b:d1:40:9a:45:3d:7d: 1e:05:ba:dd:13:bc:41:89:7b:ed:b4:3c:59:fb:18:0d:e2:9d: 37:78:1b:55:1a:25:b8:7b:99:d0:53:ac:ef:d7:70:44:24:6e: 36:66:94:f4:0f:11:3b:bd:4c:84:51:79:b7:af:90:a9:1b:37: d1:4e:a6:98:89:63:ae:86:f4:9c:19:16:59:eb:c7:e7:f6:6d: 5b:4f:80:06:43:ef:aa:31:5f:92:0a:18:ca:24:26:98:8f:f5: 6c:79:1e:89:74:6e:f5:d7:ee:eb:fb:0f:70:79:d4:99:a4:bd: e8:d7:7d:bc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4XJfRRqj1GajYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NGVjZGY4NTgtZTBmZC00OTQyLThlZjEtYzFhYmVmODVmMTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xc+jjGElFSWvDniQgiNYgq1Mk+/VvQzdwxF ss4R5ANHFzhN4f5bpvu6vmK8kgXkTR6tSOhSsgWuJR0N3SQYjX8n7Mb5Iaxbk31g iUQ6/gCEVwdoLViBraetY9Q/fnh9h/B85mB4ZgIAnKn0QibwhJ4O9JdgF8tbpdO9 Y+j68DgnHWbM7SodLGGaW8eMUTUOwLVNVsFB4r3QWvV2I3z1Xvt2LsjFqxzQ2QZD uAYBQVT3uQ7zZ08OBHW5famOanaxPrfdg9pfW5wEbETzDbwU5YTyex/67E88OJSB NuOujWXmaBun1tIAPKB0ui03cggTg+gAOF+KHXAqKoV0MWNAtQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIxrI/BmDnKFAEq6SWOk2zpmA2xFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWFhMDY2OTItYjgwOS0z NTUzLWI3ZTUtMmM3YzgwYmU3MjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCFb+XX5MT8xdIuSDwYAS0HqdiO7Q1l/mm3mLzAx1ojgZFMZC+7lI4k jDYMsnppObbczRhstzFOo1lE3S6JA9rZctxAwEN8QQj++hQGNFqynPIIEcnDKAvB 4Mu+7/rzck1c6SxEQRdmr2iCHbYcpnhNdkj7DawwZFQzidGqDa1hSDU1HMja5ANX uRvRQJpFPX0eBbrdE7xBiXvttDxZ+xgN4p03eBtVGiW4e5nQU6zv13BEJG42ZpT0 DxE7vUyEUXm3r5CpGzfRTqaYiWOuhvScGRZZ68fn9m1bT4AGQ++qMV+SChjKJCaY j/VseR6JdG711+7r+w9wedSZpL3o1328 -----END CERTIFICATE-----Generated at Sun May 11 08:29:46 2025 by rpki-client