$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e46f194-074e-3d01-9cd0-238dabe8cb09.roa File: 1e46f194-074e-3d01-9cd0-238dabe8cb09.roa (raw, json) Hash identifier: bT9kvAqx699HdkfUFP1XKOd1hQ2bSoKv8zROTWkF8HA= Subject key identifier: 86:98:A5:40:FE:9C:B7:16:5E:FA:B1:F6:E8:00:F8:18:C3:C4:F6:4A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F88A66A7DEEC688AC7A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e46f194-074e-3d01-9cd0-238dabe8cb09.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396565 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:88:a6:6a:7d:ee:c6:88:ac:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=f3665165-0a53-48f8-8c97-7fc74ed12164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4b:59:37:53:90:99:b7:d3:f6:3c:ba:98:f5: 03:56:c8:5e:cd:fd:f7:77:cc:26:8b:70:41:ec:fa: 9a:d5:5c:ce:21:e1:a9:81:ce:34:26:66:2f:77:83: 94:cd:10:f2:76:64:17:a5:c9:37:4b:ef:5e:97:b4: df:21:c4:0f:a2:8f:ac:f9:20:e5:14:c4:04:fe:d6: f0:1c:38:84:d9:ca:5d:23:c8:f8:b5:29:d0:9b:1f: 54:d1:bd:29:c4:44:b4:d6:9d:c5:9f:d0:3c:ef:fa: 13:62:6d:a7:fa:76:db:25:ab:3d:7c:46:bd:c3:0d: 7b:e9:3c:68:d2:29:7b:39:5b:35:24:6f:45:15:cb: ac:10:9a:81:91:3e:43:4f:a3:d2:5a:92:2b:7a:05: 49:83:95:4c:19:4a:e5:6f:a8:3d:d1:24:b9:c1:9c: cb:06:ed:73:e2:77:aa:e1:df:34:cf:cf:d1:c6:75: 1b:a0:a3:63:d3:7b:b0:34:c4:c1:fd:15:d4:c3:c6: 3e:e7:5b:2a:f6:b9:ee:37:33:35:6a:38:94:92:1b: 91:89:5d:68:bf:e2:c1:9b:bf:c7:df:9e:18:14:c8: 9e:36:5d:5b:d0:3c:f9:28:5c:14:49:ad:20:51:59: 03:2e:e4:c9:28:07:d3:5d:31:5d:2f:63:2c:f8:8d: fd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:98:A5:40:FE:9C:B7:16:5E:FA:B1:F6:E8:00:F8:18:C3:C4:F6:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e46f194-074e-3d01-9cd0-238dabe8cb09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:df:43:54:5c:d0:06:fc:4a:32:47:d5:63:fd:79:d6:14:65: 07:74:20:38:f3:aa:ff:02:bf:71:4b:69:33:84:6d:23:f0:bf: dc:db:b2:d8:f1:a4:45:55:92:30:0b:21:d5:1c:b9:ce:13:42: 31:be:cb:9f:0f:70:cd:2f:b2:e1:62:0e:69:95:32:1b:d7:81: 4c:35:d0:f4:67:cb:bd:73:a6:7a:ca:4d:03:70:28:1a:e3:72: d3:e8:93:95:cf:92:68:84:59:17:0b:5d:10:7d:22:6e:14:21: 6b:2e:e4:44:37:1c:b7:93:e4:60:af:9b:ce:07:8e:3c:03:e1: 3a:4e:1e:48:f0:31:c7:c9:20:5d:8d:3e:c0:a0:42:cc:04:a2: c0:f0:98:e0:3d:5f:db:cc:50:46:b2:72:dc:4d:b2:03:b0:a2: 51:cd:82:36:3e:d7:e9:f8:e8:44:91:dc:04:80:4f:0a:35:c5: df:7d:c8:08:c1:27:fd:7b:ee:6d:4a:b9:67:48:ec:b7:4a:92: be:9b:a5:27:63:18:f9:80:ef:89:e1:78:a3:58:38:2a:85:85: 06:2f:dd:af:bd:91:01:27:0c:4e:06:de:9b:66:76:18:ba:98: 6d:3b:d2:f7:ed:8a:26:a2:38:ba:5b:10:46:a3:21:03:1b:03: b4:86:ca:71 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4iman3uxoisegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZjM2NjUxNjUtMGE1My00OGY4LThjOTctN2ZjNzRlZDEyMTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0tZN1OQmbfT9jy6mPUDVshezf33d8wmi3BB 7Pqa1VzOIeGpgc40JmYvd4OUzRDydmQXpck3S+9el7TfIcQPoo+s+SDlFMQE/tbw HDiE2cpdI8j4tSnQmx9U0b0pxES01p3Fn9A87/oTYm2n+nbbJas9fEa9ww176Txo 0il7OVs1JG9FFcusEJqBkT5DT6PSWpIregVJg5VMGUrlb6g90SS5wZzLBu1z4neq 4d80z8/RxnUboKNj03uwNMTB/RXUw8Y+51sq9rnuNzM1ajiUkhuRiV1ov+LBm7/H 354YFMieNl1b0Dz5KFwUSa0gUVkDLuTJKAfTXTFdL2Ms+I39qwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIaYpUD+nLcWXvqx9ugA+BjDxPZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWU0NmYxOTQtMDc0ZS0z ZDAxLTljZDAtMjM4ZGFiZThjYjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCH30NUXNAG/EoyR9Vj/XnWFGUHdCA486r/Ar9xS2kzhG0j8L/c27LY 8aRFVZIwCyHVHLnOE0IxvsufD3DNL7LhYg5plTIb14FMNdD0Z8u9c6Z6yk0DcCga 43LT6JOVz5JohFkXC10QfSJuFCFrLuRENxy3k+Rgr5vOB448A+E6Th5I8DHHySBd jT7AoELMBKLA8JjgPV/bzFBGsnLcTbIDsKJRzYI2Ptfp+OhEkdwEgE8KNcXffcgI wSf9e+5tSrlnSOy3SpK+m6UnYxj5gO+J4XijWDgqhYUGL92vvZEBJwxOBt6bZnYY uphtO9L37Yomoji6WxBGoyEDGwO0hspx -----END CERTIFICATE-----Generated at Sun May 11 05:37:27 2025 by rpki-client