$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ea4ff8-a757-3282-be61-5854c9bdee32.roa File: 40ea4ff8-a757-3282-be61-5854c9bdee32.roa (raw, json) Hash identifier: wL8V6Zor0/uMaaFSIYPErYIN+6H1ikQCIguhQDoruIQ= Subject key identifier: 42:D9:5F:7D:1C:74:E1:36:41:10:E9:22:B0:72:62:14:F9:92:B7:D2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D164FE7A6478848A07B58A60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ea4ff8-a757-3282-be61-5854c9bdee32.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 0 IP address blocks: 209.112.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:64:fe:7a:64:78:84:8a:07:b5:8a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=9924cd99-8844-4468-8cf7-a52e87ecefd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ab:3f:93:27:f6:9d:8e:6c:f7:40:d2:ee:bf: e3:a0:4d:cf:ea:ee:18:d7:72:ca:b8:a6:56:e8:58: 25:cd:e0:ee:77:6f:05:b5:7e:32:b9:44:27:58:26: d4:24:f1:a0:67:58:c7:96:79:7a:20:69:9a:a0:81: b1:79:42:2a:08:c5:43:92:16:4e:93:b9:b0:9a:7b: 9d:18:d7:ef:45:a6:f6:fb:f5:a3:76:cf:d9:40:f1: f5:da:8d:c8:40:53:c6:f8:49:d2:c4:77:5e:4a:09: 08:0f:c5:fc:13:74:e3:63:0c:71:1e:76:24:7c:37: e6:69:56:7a:f2:35:fc:3d:aa:2d:a5:f0:9f:01:50: 7a:a1:e1:39:46:76:d7:b6:f6:dd:64:17:d5:2d:2b: 55:aa:4c:63:8f:9a:55:d5:91:33:44:df:06:6c:57: 58:97:23:ce:7b:08:82:fb:6d:21:9d:e9:e7:74:a8: e3:a9:42:96:42:fc:3f:38:a9:02:9c:67:d7:52:d1: 70:e2:48:ef:78:6f:d0:8d:7a:52:d5:cf:56:44:f5: 28:15:e2:bf:1a:6c:0f:1f:f6:00:e7:81:78:fe:e8: 44:e6:f6:dd:ca:55:9e:ac:97:0d:14:ed:ba:8f:14: 11:a5:d3:6c:61:ea:36:61:79:cb:3f:9b:e8:e2:1d: 3f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D9:5F:7D:1C:74:E1:36:41:10:E9:22:B0:72:62:14:F9:92:B7:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ea4ff8-a757-3282-be61-5854c9bdee32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:39:fd:a0:be:fa:b2:3a:8c:1d:ca:51:74:fd:7d:87:54:2c: c0:29:4e:fe:8b:85:b5:0b:74:0f:75:72:98:66:84:cd:b4:59: 69:55:75:a6:b5:3f:2c:e1:34:ba:df:bd:ca:cb:6d:25:b4:fc: de:99:ba:e8:80:ba:c7:c6:e2:f3:2f:9f:b1:a7:50:7e:17:60: d7:ef:da:de:59:0e:e5:c2:e8:03:93:d7:9c:5b:0d:c6:08:72: b1:71:40:c7:f5:15:7d:13:e2:d5:e0:4b:47:4e:2f:0d:88:a6: ec:b5:e7:2d:94:75:eb:36:e8:d6:33:65:51:bd:fd:bc:13:88: c7:b6:4e:64:8a:3c:72:23:9b:5c:47:ee:0f:a8:71:d6:93:de: 8f:49:36:e9:ca:ff:4c:01:79:41:66:4c:96:91:28:fd:af:66: b1:25:19:2c:bb:f5:7d:c6:32:40:9d:83:19:db:73:d3:2a:d6: 7b:44:87:11:68:a6:03:ec:36:40:53:36:3c:98:12:a0:24:69: 25:18:95:2a:98:a3:f8:1b:f3:14:b4:71:1b:c7:23:62:4a:b6: 95:56:2b:20:fe:50:b5:df:77:24:a9:5f:9e:99:60:c2:6b:a3: 9e:bf:fc:af:c4:7f:fd:cf:b0:2e:4c:07:3d:4a:ce:31:e7:60: fb:e4:27:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZP56ZHiEige1imAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk OTkyNGNkOTktODg0NC00NDY4LThjZjctYTUyZTg3ZWNlZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6s/kyf2nY5s90DS7r/joE3P6u4Y13LKuKZW 6FglzeDud28FtX4yuUQnWCbUJPGgZ1jHlnl6IGmaoIGxeUIqCMVDkhZOk7mwmnud GNfvRab2+/Wjds/ZQPH12o3IQFPG+EnSxHdeSgkID8X8E3TjYwxxHnYkfDfmaVZ6 8jX8PaotpfCfAVB6oeE5RnbXtvbdZBfVLStVqkxjj5pV1ZEzRN8GbFdYlyPOewiC +20hnenndKjjqUKWQvw/OKkCnGfXUtFw4kjveG/QjXpS1c9WRPUoFeK/GmwPH/YA 54F4/uhE5vbdylWerJcNFO26jxQRpdNsYeo2YXnLP5vo4h0/BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELZX30cdOE2QRDpIrByYhT5krfSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDBlYTRmZjgtYTc1Ny0z MjgyLWJlNjEtNTg1NGM5YmRlZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM5/aC++rI6jB3KUXT9fYdULMApTv6LhbULdA91cphmhM20WWlVdaa1 PyzhNLrfvcrLbSW0/N6ZuuiAusfG4vMvn7GnUH4XYNfv2t5ZDuXC6AOT15xbDcYI crFxQMf1FX0T4tXgS0dOLw2Ipuy15y2Udes26NYzZVG9/bwTiMe2TmSKPHIjm1xH 7g+ocdaT3o9JNunK/0wBeUFmTJaRKP2vZrElGSy79X3GMkCdgxnbc9Mq1ntEhxFo pgPsNkBTNjyYEqAkaSUYlSqYo/gb8xS0cRvHI2JKtpVWKyD+ULXfdySpX56ZYMJr o56//K/Ef/3PsC5MBz1KzjHnYPvkJ9Y= -----END CERTIFICATE-----Generated at Mon May 12 02:33:01 2025 by rpki-client