$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3dc95ed3-1e40-32f1-a1e6-3033ff88e4ee.roa File: 3dc95ed3-1e40-32f1-a1e6-3033ff88e4ee.roa (raw, json) Hash identifier: X7T1JJNrqysqtCauuXxTipb0GWUrWmWSgmNvhMPObZc= Subject key identifier: C0:76:47:8D:1E:75:B0:32:18:0C:BC:4D:FF:03:06:34:CF:C0:BD:72 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F859FC096E3FF9C2CFD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3dc95ed3-1e40-32f1-a1e6-3033ff88e4ee.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396608 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:85:9f:c0:96:e3:ff:9c:2c:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=3499433f-1a24-4208-b364-6efcb9218e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:76:cb:38:a9:15:e9:16:b6:70:44:9b:5d:8b: 55:9c:e2:b0:29:0b:0d:74:53:18:eb:34:be:a0:68: c7:38:62:12:cb:af:6e:82:d5:17:59:e3:39:5e:25: fb:31:ae:bf:54:0b:ba:ba:78:94:d5:bc:2a:53:e7: 94:ad:77:17:e2:e5:de:8e:04:e0:76:09:42:a0:7d: f7:83:96:58:f3:44:4a:88:ba:02:90:7e:86:2c:a8: be:27:0d:d8:bc:d9:f9:cf:76:72:72:77:6b:89:83: e4:20:c9:2b:d8:70:fe:03:ad:a4:99:13:b0:5f:14: c3:43:71:2a:4f:d0:aa:e6:a3:f6:42:23:60:d7:39: 65:cf:b3:08:49:2f:f7:37:e9:a6:ea:71:06:ca:b5: 80:48:eb:f1:91:87:2f:7d:d7:1f:33:dc:f4:e2:35: 64:1a:59:40:c0:fa:be:9e:e3:c4:9d:b8:8e:0f:7e: 54:44:c0:3f:a3:1d:95:c9:36:3f:8a:95:00:c5:73: c3:8c:ad:ff:fc:86:65:53:91:31:a0:e3:db:ff:05: c1:92:cf:33:73:f2:48:88:4b:ca:d9:cb:63:62:a3: f3:83:af:59:6b:43:98:50:d4:f2:7f:2c:6a:96:a3: 81:c1:fc:06:92:92:5f:16:90:6f:19:9e:19:b7:1b: cf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:76:47:8D:1E:75:B0:32:18:0C:BC:4D:FF:03:06:34:CF:C0:BD:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3dc95ed3-1e40-32f1-a1e6-3033ff88e4ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b3:60:f1:83:14:b4:30:44:00:43:d5:83:cc:80:82:42:a8: 7a:73:32:0a:62:9d:98:83:c9:10:17:58:f3:ac:f5:92:74:cf: 59:07:84:d1:0a:07:06:e3:69:f3:d8:fb:e9:c2:de:8c:81:49: 67:54:13:49:8f:88:f1:11:b4:31:8d:51:95:63:c0:aa:9b:e8: df:17:5a:50:41:2d:bf:de:7a:df:7f:b1:cf:3c:99:c9:b8:6a: be:cb:6b:d1:5c:58:a0:cf:99:0b:21:11:d9:0d:e7:95:77:43: fe:ab:e7:40:41:be:04:b7:c8:8e:dc:f8:5c:fc:05:93:64:f1: 0c:a7:e6:7f:66:42:d7:9e:ae:92:06:2f:ad:e0:b7:d5:54:7a: 3f:3a:3f:64:fa:27:c0:89:07:13:e2:d1:9a:64:87:f0:23:5c: e6:e3:fa:51:86:49:df:d3:61:58:ee:4f:f4:74:e1:d5:95:88: e6:52:2e:58:93:4a:d9:b9:4a:49:aa:6d:25:dc:ec:47:e5:e0: 37:bc:69:c2:77:c2:ea:ae:69:63:c8:bc:23:94:8b:21:0b:53: b2:4f:10:71:ac:2d:2d:db:40:72:42:00:ed:40:ef:19:f7:a0: 72:5d:77:d0:01:5f:9c:ff:24:49:b9:96:ea:22:03:b0:e7:bb: da:90:96:a0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4WfwJbj/5ws/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MzQ5OTQzM2YtMWEyNC00MjA4LWIzNjQtNmVmY2I5MjE4ZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3bLOKkV6Ra2cESbXYtVnOKwKQsNdFMY6zS+ oGjHOGISy69ugtUXWeM5XiX7Ma6/VAu6uniU1bwqU+eUrXcX4uXejgTgdglCoH33 g5ZY80RKiLoCkH6GLKi+Jw3YvNn5z3ZycndriYPkIMkr2HD+A62kmROwXxTDQ3Eq T9Cq5qP2QiNg1zllz7MISS/3N+mm6nEGyrWASOvxkYcvfdcfM9z04jVkGllAwPq+ nuPEnbiOD35URMA/ox2VyTY/ipUAxXPDjK3//IZlU5ExoOPb/wXBks8zc/JIiEvK 2ctjYqPzg69Za0OYUNTyfyxqlqOBwfwGkpJfFpBvGZ4ZtxvPmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMB2R40edbAyGAy8Tf8DBjTPwL1yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2RjOTVlZDMtMWU0MC0z MmYxLWExZTYtMzAzM2ZmODhlNGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB0s2DxgxS0MEQAQ9WDzICCQqh6czIKYp2Yg8kQF1jzrPWSdM9ZB4TR CgcG42nz2Pvpwt6MgUlnVBNJj4jxEbQxjVGVY8Cqm+jfF1pQQS2/3nrff7HPPJnJ uGq+y2vRXFigz5kLIRHZDeeVd0P+q+dAQb4Et8iO3Phc/AWTZPEMp+Z/ZkLXnq6S Bi+t4LfVVHo/Oj9k+ifAiQcT4tGaZIfwI1zm4/pRhknf02FY7k/0dOHVlYjmUi5Y k0rZuUpJqm0l3OxH5eA3vGnCd8LqrmljyLwjlIshC1OyTxBxrC0t20ByQgDtQO8Z 96ByXXfQAV+c/yRJuZbqIgOw57vakJag -----END CERTIFICATE-----Generated at Sun May 11 05:29:43 2025 by rpki-client