$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22b6330a-a303-3425-89a5-50a7a762ca1e.roa File: 22b6330a-a303-3425-89a5-50a7a762ca1e.roa (raw, json) Hash identifier: yql2ywRH2tg9rplTXAaHmpSpC3qTMwtDT0bc4cIP5vQ= Subject key identifier: F1:D9:30:C9:BF:08:94:26:B9:9D:FB:BB:58:F6:71:0B:85:42:D3:A1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F7FAA3BD8977472C0A5DF Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22b6330a-a303-3425-89a5-50a7a762ca1e.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396551 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:7f:aa:3b:d8:97:74:72:c0:a5:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=cb376a5e-beae-4ed0-a572-e95dfc9aa494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:54:0d:cf:da:10:c4:e5:db:07:29:50:9b:8b: c1:be:1f:8d:e7:79:64:eb:4f:1e:18:9b:5c:13:8a: 65:b3:b2:ad:40:c0:5a:0f:3e:63:db:94:f4:d7:5e: 65:52:fa:52:49:9f:d8:fa:d7:0d:2c:65:b1:1b:b7: 54:8f:67:f7:04:44:5e:24:44:e2:ea:92:91:19:10: b5:c0:c1:12:00:f5:fc:d2:a1:46:b1:b8:6c:a5:11: a5:e7:b8:02:a2:72:ae:a4:8f:55:58:5f:d3:61:e6: 1a:50:71:7a:9f:73:e7:30:5a:2f:5e:de:9c:4b:fa: 1f:04:b8:da:4c:20:fa:e5:8d:51:ac:b2:78:7c:49: ef:c9:4a:e7:c9:fc:74:67:7b:f0:74:f5:32:d0:3f: 50:7e:c5:ce:19:16:db:9a:a3:21:a9:ce:44:ca:47: f2:0c:d4:a1:69:1d:ca:46:97:ca:79:9f:57:ed:86: 8c:48:e5:5e:78:e2:4d:68:b8:72:8d:29:8c:7f:61: 40:8f:f8:c3:d6:71:bf:78:f0:30:49:10:b8:b5:d4: bb:5a:1e:d6:52:dd:08:33:54:f0:6e:1d:96:9e:90: fa:8d:80:78:c2:2e:61:01:65:95:f5:8f:d5:5e:6a: 6a:9a:be:49:0b:bf:47:b1:11:a3:70:75:81:4c:de: 20:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D9:30:C9:BF:08:94:26:B9:9D:FB:BB:58:F6:71:0B:85:42:D3:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22b6330a-a303-3425-89a5-50a7a762ca1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:2a:9a:80:18:f3:f3:45:44:98:e2:a3:42:40:b2:cd:18:65: 33:b1:ce:87:d3:d1:91:9d:6c:d0:93:e8:4d:66:4b:5d:8d:8b: 36:6c:b2:ae:23:d4:bc:f8:56:89:51:9f:63:5e:2f:63:73:b1: d0:58:b5:64:a5:43:c1:20:69:af:c0:73:d1:a8:27:74:f0:fc: b6:d3:48:77:3f:4c:bb:bb:fa:6f:12:13:d7:08:33:c5:5d:9e: 6d:ff:8d:37:a8:99:f5:2a:2c:d2:df:f4:86:92:33:a7:f8:2f: 66:ce:90:d8:78:30:9a:85:81:b3:42:53:6d:c4:4b:1d:f1:fa: 87:6a:c5:da:9b:cf:c5:fe:3a:56:24:5e:5e:fb:90:05:a9:0d: 7a:0f:4c:89:e0:a0:ae:86:ca:9e:cc:76:98:2f:1d:4b:36:37: ec:08:e5:d3:cb:a8:fc:21:83:2b:d6:9a:ac:bf:ab:ff:0c:bc: 4e:8d:2d:1c:de:65:a4:c2:07:aa:aa:c4:fd:c3:7b:bd:90:01: 20:41:ab:a2:5d:ae:88:d8:65:fc:5e:12:18:da:38:f8:5c:6f: 13:bb:7e:06:0c:d7:cc:7e:1c:be:ae:ff:80:b8:4b:02:9a:27: c1:b4:2b:3a:66:6d:11:0d:cf:06:e9:fa:b7:63:57:3c:ba:f8: 6a:83:fc:f6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P3+qO9iXdHLApd8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk Y2IzNzZhNWUtYmVhZS00ZWQwLWE1NzItZTk1ZGZjOWFhNDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVQNz9oQxOXbBylQm4vBvh+N53lk608eGJtc E4pls7KtQMBaDz5j25T0115lUvpSSZ/Y+tcNLGWxG7dUj2f3BEReJETi6pKRGRC1 wMESAPX80qFGsbhspRGl57gConKupI9VWF/TYeYaUHF6n3PnMFovXt6cS/ofBLja TCD65Y1RrLJ4fEnvyUrnyfx0Z3vwdPUy0D9QfsXOGRbbmqMhqc5EykfyDNShaR3K RpfKeZ9X7YaMSOVeeOJNaLhyjSmMf2FAj/jD1nG/ePAwSRC4tdS7Wh7WUt0IM1Tw bh2WnpD6jYB4wi5hAWWV9Y/VXmpqmr5JC79HsRGjcHWBTN4gVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPHZMMm/CJQmuZ37u1j2cQuFQtOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjJiNjMzMGEtYTMwMy0z NDI1LTg5YTUtNTBhN2E3NjJjYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAGKpqAGPPzRUSY4qNCQLLNGGUzsc6H09GRnWzQk+hNZktdjYs2bLKu I9S8+FaJUZ9jXi9jc7HQWLVkpUPBIGmvwHPRqCd08Py200h3P0y7u/pvEhPXCDPF XZ5t/403qJn1KizS3/SGkjOn+C9mzpDYeDCahYGzQlNtxEsd8fqHasXam8/F/jpW JF5e+5AFqQ16D0yJ4KCuhsqezHaYLx1LNjfsCOXTy6j8IYMr1pqsv6v/DLxOjS0c 3mWkwgeqqsT9w3u9kAEgQauiXa6I2GX8XhIY2jj4XG8Tu34GDNfMfhy+rv+AuEsC mifBtCs6Zm0RDc8G6fq3Y1c8uvhqg/z2 -----END CERTIFICATE-----Generated at Sun May 11 06:38:36 2025 by rpki-client