$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c9297fa-98b4-3381-9e3c-cd6e8b303481.roa File: 4c9297fa-98b4-3381-9e3c-cd6e8b303481.roa (raw, json) Hash identifier: 7jCGZOCVJ0pIjv/5mo81ZFYuRL8lRd9t5ttr9AaxjZU= Subject key identifier: 8A:88:B7:FF:F6:92:68:2E:AC:5F:DD:68:92:4E:AC:F1:23:54:D9:C3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8D23214C55111F258700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c9297fa-98b4-3381-9e3c-cd6e8b303481.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396564 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8d:23:21:4c:55:11:1f:25:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=d2de4074-e88c-40c9-ac9d-bd2aafd820e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4d:c6:39:24:75:6a:7a:3d:3a:ba:7a:1b:68: ef:f8:fc:ad:7e:f5:ae:f6:ef:b0:a8:a1:07:97:46: 09:e9:b6:03:47:44:cb:23:8c:5e:a2:14:04:ca:da: 9d:bb:21:5c:11:39:68:6b:70:a1:ea:bc:b4:38:98: 7b:27:a2:ec:ea:22:e7:33:de:80:24:cc:f5:4b:29: fb:bc:c0:6e:78:30:1d:90:cd:c6:d2:e4:12:cd:21: 4e:1a:79:b5:fe:06:40:1c:3c:2a:61:62:3d:ec:1c: 8c:e3:b2:35:93:56:23:fd:cb:49:f8:87:d1:e9:47: e4:92:f9:17:bf:71:5a:41:14:f5:28:4d:2e:42:07: e0:b8:d4:18:11:1d:eb:a6:44:bb:fc:b3:8e:82:29: 45:54:42:ad:70:58:6d:2a:56:91:00:d7:5f:9b:cf: fb:ac:27:f3:cd:5d:89:90:c2:38:76:b9:95:40:3a: 8f:38:d1:7b:d4:c4:30:8b:19:c0:b1:1d:e8:13:3e: 02:c0:f1:13:d4:0a:94:11:4c:55:66:b7:a0:00:f7: c3:a5:05:47:ba:64:b5:d6:cf:7b:19:78:bc:e3:39: d3:92:2b:d3:5c:69:8e:a3:74:0c:fb:6c:c8:1e:31: 61:db:87:70:27:65:8e:b7:05:8f:65:7a:b8:09:7a: df:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:88:B7:FF:F6:92:68:2E:AC:5F:DD:68:92:4E:AC:F1:23:54:D9:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c9297fa-98b4-3381-9e3c-cd6e8b303481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:4f:5d:be:f0:2d:0e:ca:12:db:d6:7b:e8:ba:67:85:20:12: 8c:7f:c7:4e:c1:d6:74:07:93:49:9e:5b:67:29:ef:14:a1:78: d8:a8:a6:31:71:a2:4e:a1:ae:06:b2:d4:d5:92:08:a9:8e:d6: df:8c:d0:c3:07:36:75:54:be:ef:4c:05:94:4e:be:19:7c:59: 38:ac:17:39:39:59:5f:98:1d:dc:7e:e1:af:cb:45:a0:76:9f: cc:cc:f5:25:91:d9:09:14:4d:6e:b3:e4:23:76:11:64:ad:b4: a4:00:9c:f2:9f:9b:30:03:3e:0e:39:a8:f9:04:f2:d1:56:ba: 57:e9:d3:e8:ac:89:cd:6e:22:c7:4b:84:16:6a:76:59:cb:ff: 1c:e9:36:80:29:99:c3:66:dd:16:95:4b:d2:01:1b:80:77:fe: 9c:c4:73:5d:65:e1:ed:d9:c3:b0:e8:5c:45:bd:50:ad:6e:41: b1:8c:02:a5:0d:6e:de:19:6c:56:20:10:7e:23:2e:60:9b:53: 6e:13:25:a5:29:fa:9d:e7:62:66:86:e5:f2:de:b2:95:76:45: 0f:2d:a5:36:81:88:ad:ac:9a:e6:c3:93:65:c0:c7:28:45:3a: fa:e1:6d:03:ae:53:b2:4d:cf:af:9c:e7:17:0c:48:d0:90:34: d2:0b:59:85 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P40jIUxVER8lhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZDJkZTQwNzQtZTg4Yy00MGM5LWFjOWQtYmQyYWFmZDgyMGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE3GOSR1ano9Orp6G2jv+PytfvWu9u+wqKEH l0YJ6bYDR0TLI4xeohQEytqduyFcETloa3Ch6ry0OJh7J6Ls6iLnM96AJMz1Syn7 vMBueDAdkM3G0uQSzSFOGnm1/gZAHDwqYWI97ByM47I1k1Yj/ctJ+IfR6UfkkvkX v3FaQRT1KE0uQgfguNQYER3rpkS7/LOOgilFVEKtcFhtKlaRANdfm8/7rCfzzV2J kMI4drmVQDqPONF71MQwixnAsR3oEz4CwPET1AqUEUxVZregAPfDpQVHumS11s97 GXi84znTkivTXGmOo3QM+2zIHjFh24dwJ2WOtwWPZXq4CXrfXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIqIt//2kmgurF/daJJOrPEjVNnDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGM5Mjk3ZmEtOThiNC0z MzgxLTllM2MtY2Q2ZThiMzAzNDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAGT12+8C0OyhLb1nvoumeFIBKMf8dOwdZ0B5NJnltnKe8UoXjYqKYx caJOoa4GstTVkgipjtbfjNDDBzZ1VL7vTAWUTr4ZfFk4rBc5OVlfmB3cfuGvy0Wg dp/MzPUlkdkJFE1us+QjdhFkrbSkAJzyn5swAz4OOaj5BPLRVrpX6dPorInNbiLH S4QWanZZy/8c6TaAKZnDZt0WlUvSARuAd/6cxHNdZeHt2cOw6FxFvVCtbkGxjAKl DW7eGWxWIBB+Iy5gm1NuEyWlKfqd52JmhuXy3rKVdkUPLaU2gYitrJrmw5NlwMco RTr64W0DrlOyTc+vnOcXDEjQkDTSC1mF -----END CERTIFICATE-----Generated at Sun May 11 08:15:21 2025 by rpki-client