$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47726de3-e3d9-30ae-85d4-452d8d428980.roa File: 47726de3-e3d9-30ae-85d4-452d8d428980.roa (raw, json) Hash identifier: m1f/e14Zi/A82V/A0IpS0pSHMnEsZqXl0ehTO+/+GWo= Subject key identifier: 6F:D8:16:C6:4D:CB:AA:A2:B7:01:64:6F:CF:15:4E:38:A9:CC:0B:A3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8483202C8F7DF0957040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47726de3-e3d9-30ae-85d4-452d8d428980.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396571 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:84:83:20:2c:8f:7d:f0:95:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=51b720f9-29bf-47a3-9bbf-8c632054aa91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:8f:66:35:58:27:41:df:bd:4c:ef:32:39: 1a:7b:9f:ea:cd:62:ee:b8:bb:db:1c:bc:f0:26:61: 7f:14:96:54:9f:7a:6d:04:db:fe:2e:7c:2e:b6:c2: c3:c4:21:2b:48:1b:66:56:f9:01:c4:1f:54:38:65: 7b:f4:dc:96:75:19:71:0d:02:1c:86:3f:91:90:d4: dd:5e:14:e7:52:47:86:76:e2:d6:26:24:04:92:80: 6e:40:6a:7c:cf:2a:09:b0:57:b6:35:19:71:96:6a: 06:f3:30:0c:f3:87:62:03:61:7d:18:5a:73:6b:82: 43:52:45:5c:5d:6c:35:29:9a:a7:00:4e:d1:f6:71: 3c:15:cc:a1:93:f5:1f:ca:83:aa:01:53:30:b2:f8: 05:65:be:2f:7a:54:f9:59:8c:cd:b8:d1:5d:6f:bf: ab:57:5d:ce:35:77:8a:bd:c1:73:74:d7:16:6e:46: c8:57:0f:94:39:e9:fd:16:5b:ee:56:63:3e:4e:a3: 61:40:85:88:fa:56:70:70:28:ff:be:7a:b5:34:10: db:fe:be:86:f2:bc:ac:19:32:65:79:c2:2c:ca:4b: 5d:c9:db:ad:26:7b:a0:e3:93:3b:7f:3d:73:8c:90: 9d:57:52:1f:16:9f:1b:61:e3:c5:91:16:88:5b:15: 2c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D8:16:C6:4D:CB:AA:A2:B7:01:64:6F:CF:15:4E:38:A9:CC:0B:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47726de3-e3d9-30ae-85d4-452d8d428980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:44:fb:76:4d:2d:9f:1a:7f:2e:2c:e3:e4:d7:b0:7e:bd:13: bc:1e:46:97:8e:aa:2c:1b:d2:b0:d2:8d:98:54:02:79:92:c6: e2:6b:a5:13:d4:40:75:7a:91:d9:13:56:0a:7f:cf:76:ca:9d: bf:76:77:26:aa:9e:a3:74:b3:4d:a8:28:c8:aa:6b:95:4a:25: af:57:45:6e:b8:71:e3:01:90:a2:fc:aa:88:0d:6a:7a:24:ad: d4:29:70:11:5f:8f:a2:45:d0:c3:48:33:f6:52:b7:04:d5:12: bd:ca:7c:cd:64:49:ca:96:cf:04:51:29:95:c3:9f:dd:67:67: b5:81:af:4f:36:10:68:ed:94:6b:3d:c7:59:a2:39:67:10:95: ab:cc:f4:40:4c:78:23:27:29:d9:96:d9:a4:0d:17:3a:9b:82: ab:e4:a1:2b:9b:55:b8:6f:35:21:4c:a7:1e:37:e1:f9:19:6f: 79:b4:f7:46:b7:9d:03:96:68:72:ae:2f:7d:c7:cd:fd:42:bd: 97:3d:2a:19:e3:12:5a:49:ee:78:2a:8e:04:7e:51:5f:f5:16: 80:eb:95:10:4d:34:b7:49:da:37:a9:e0:fc:2f:53:1b:3c:85: 7b:b0:4c:48:f5:b5:e0:71:2e:21:7b:23:3f:e0:8f:13:49:35: 6c:27:55:9d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4SDICyPffCVcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NTFiNzIwZjktMjliZi00N2EzLTliYmYtOGM2MzIwNTRhYTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNSPZjVYJ0HfvUzvMjkae5/qzWLuuLvbHLzw JmF/FJZUn3ptBNv+LnwutsLDxCErSBtmVvkBxB9UOGV79NyWdRlxDQIchj+RkNTd XhTnUkeGduLWJiQEkoBuQGp8zyoJsFe2NRlxlmoG8zAM84diA2F9GFpza4JDUkVc XWw1KZqnAE7R9nE8Fcyhk/UfyoOqAVMwsvgFZb4velT5WYzNuNFdb7+rV13ONXeK vcFzdNcWbkbIVw+UOen9FlvuVmM+TqNhQIWI+lZwcCj/vnq1NBDb/r6G8rysGTJl ecIsyktdydutJnug45M7fz1zjJCdV1IfFp8bYePFkRaIWxUsYwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFG/YFsZNy6qitwFkb88VTjipzAujMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDc3MjZkZTMtZTNkOS0z MGFlLTg1ZDQtNDUyZDhkNDI4OTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2RPt2TS2fGn8uLOPk17B+vRO8HkaXjqosG9Kw0o2YVAJ5ksbia6UT 1EB1epHZE1YKf892yp2/dncmqp6jdLNNqCjIqmuVSiWvV0VuuHHjAZCi/KqIDWp6 JK3UKXARX4+iRdDDSDP2UrcE1RK9ynzNZEnKls8EUSmVw5/dZ2e1ga9PNhBo7ZRr PcdZojlnEJWrzPRATHgjJynZltmkDRc6m4Kr5KErm1W4bzUhTKceN+H5GW95tPdG t50Dlmhyri99x839Qr2XPSoZ4xJaSe54Ko4EflFf9RaA65UQTTS3Sdo3qeD8L1Mb PIV7sExI9bXgcS4heyM/4I8TSTVsJ1Wd -----END CERTIFICATE-----Generated at Sun May 11 08:37:32 2025 by rpki-client