$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/364987c1-50f3-3a07-b441-05a88a10725a.roa File: 364987c1-50f3-3a07-b441-05a88a10725a.roa (raw, json) Hash identifier: HxpfFU4QbL4nwTz/gLxqrg/VSW31DGnfEOm1EPlhDJo= Subject key identifier: 8E:A6:D6:A0:02:71:57:03:DB:CC:A2:47:53:76:B3:D9:96:1F:D6:DB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8751F03CC21492936460 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/364987c1-50f3-3a07-b441-05a88a10725a.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396560 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:87:51:f0:3c:c2:14:92:93:64:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=f7a4b521-7555-414e-bf13-4b0013ae9693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6c:0f:33:b7:5a:16:b2:77:3b:cf:32:a0:68: 06:74:05:61:12:49:23:c7:89:7c:1b:19:81:64:e0: 0f:90:60:86:6d:18:48:3f:09:bb:05:5a:aa:87:ec: ef:5e:5b:cb:90:a9:96:05:43:18:e7:f4:2f:4b:93: 4c:9d:d9:36:ad:77:8d:e6:68:cf:ec:de:bb:7c:22: 59:52:f8:e5:2c:1b:f6:55:ad:53:2d:39:bc:8d:a7: 23:71:de:7b:67:34:ec:1d:2c:c5:1f:3d:6e:a8:28: c8:ec:3d:9f:19:e6:08:4e:14:31:70:2a:da:97:32: 22:d8:3f:8b:63:3d:98:b0:a2:1b:78:77:f9:20:51: 15:fe:36:81:95:ed:f7:f7:f3:0e:83:d4:fd:2c:cd: 26:da:5b:95:bd:a2:ca:1e:52:d9:48:48:61:69:00: d1:e0:d4:f1:9e:07:60:9a:ff:44:42:cf:97:0e:84: 3e:7e:2a:fb:8c:fc:d0:8c:a8:69:51:58:13:1b:34: c5:f4:b2:20:17:3f:0e:8d:f1:1e:13:ac:11:9d:c0: a8:36:dc:1a:45:12:dd:16:49:b9:eb:c7:98:99:28: 67:80:47:d0:3a:62:d9:ec:ac:a0:38:24:d6:00:da: 26:a2:b0:1e:5a:34:e3:56:ad:1c:cb:eb:e4:86:97: a4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A6:D6:A0:02:71:57:03:DB:CC:A2:47:53:76:B3:D9:96:1F:D6:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/364987c1-50f3-3a07-b441-05a88a10725a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:dd:f1:43:fa:d7:d2:88:53:4e:71:3f:9d:eb:86:a9:6b:32: e0:ca:a7:53:e8:b1:6a:ac:c7:46:c2:2c:5e:84:83:2d:b7:a4: 61:08:e1:a7:04:14:26:e4:cd:9f:13:78:1b:fc:32:ed:94:ae: 04:af:8b:82:2d:be:88:ea:78:1d:60:d3:ef:f3:72:33:f1:a7: 5a:89:55:f9:c7:d4:98:0b:2a:c7:7b:b0:80:77:09:76:2f:fe: 05:ae:6f:fa:1d:b5:32:5b:ff:0f:d6:19:41:38:73:e8:99:82: df:71:80:57:2e:84:1a:2a:85:81:f7:ad:9e:13:ab:e4:73:d8: 3e:b8:f4:87:7c:5e:db:6c:0c:4e:df:08:44:e9:94:10:d2:44: 7f:8d:dd:c6:28:20:3d:9b:7b:42:d5:63:7a:47:95:12:4d:0e: 71:69:ec:e9:f2:29:7d:19:c5:23:9c:33:7d:df:36:5d:7a:ed: 0e:23:66:0e:f7:88:58:e0:63:8b:1b:07:23:94:8b:25:dc:db: 2c:a7:5d:95:64:a0:8a:f9:33:f3:58:ac:98:77:f3:31:8e:06: 80:5a:81:ea:6e:9a:67:da:ee:7f:c7:88:36:a2:2c:a2:19:63: 6a:08:2e:fb:6d:cb:20:ae:04:b0:9f:fc:fb:df:b9:8f:20:e6: 14:3b:33:cb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4dR8DzCFJKTZGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZjdhNGI1MjEtNzU1NS00MTRlLWJmMTMtNGIwMDEzYWU5NjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGwPM7daFrJ3O88yoGgGdAVhEkkjx4l8GxmB ZOAPkGCGbRhIPwm7BVqqh+zvXlvLkKmWBUMY5/QvS5NMndk2rXeN5mjP7N67fCJZ UvjlLBv2Va1TLTm8jacjcd57ZzTsHSzFHz1uqCjI7D2fGeYIThQxcCralzIi2D+L Yz2YsKIbeHf5IFEV/jaBle339/MOg9T9LM0m2luVvaLKHlLZSEhhaQDR4NTxngdg mv9EQs+XDoQ+fir7jPzQjKhpUVgTGzTF9LIgFz8OjfEeE6wRncCoNtwaRRLdFkm5 68eYmShngEfQOmLZ7KygOCTWANomorAeWjTjVq0cy+vkhpekmQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI6m1qACcVcD28yiR1N2s9mWH9bbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzY0OTg3YzEtNTBmMy0z YTA3LWI0NDEtMDVhODhhMTA3MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAa3fFD+tfSiFNOcT+d64apazLgyqdT6LFqrMdGwixehIMtt6RhCOGn BBQm5M2fE3gb/DLtlK4Er4uCLb6I6ngdYNPv83Iz8adaiVX5x9SYCyrHe7CAdwl2 L/4Frm/6HbUyW/8P1hlBOHPomYLfcYBXLoQaKoWB962eE6vkc9g+uPSHfF7bbAxO 3whE6ZQQ0kR/jd3GKCA9m3tC1WN6R5USTQ5xaezp8il9GcUjnDN93zZdeu0OI2YO 94hY4GOLGwcjlIsl3Nssp12VZKCK+TPzWKyYd/MxjgaAWoHqbppn2u5/x4g2oiyi GWNqCC77bcsgrgSwn/z737mPIOYUOzPL -----END CERTIFICATE-----Generated at Sun May 11 05:29:29 2025 by rpki-client