$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5559f029-47d4-3b1d-8cec-099d16206891.roa File: 5559f029-47d4-3b1d-8cec-099d16206891.roa (raw, json) Hash identifier: nH0la6N4w+a8FgaP5TFkIhrql+mrhE6fQ67XBgMkHZI= Subject key identifier: 92:47:12:07:D0:15:56:BA:DE:4D:28:FE:79:CD:58:5E:4A:28:8A:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8BA1A7FDEDAEC9443820 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5559f029-47d4-3b1d-8cec-099d16206891.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396595 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8b:a1:a7:fd:ed:ae:c9:44:38:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=62a98f59-af85-4e6f-bbb4-0a17889fd5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:72:fe:cb:fe:fa:8c:85:a8:fd:ae:12:8c:b6: e5:45:c9:ef:f6:60:23:03:2e:a6:e0:73:f8:5e:e1: 23:bd:83:42:a8:94:36:44:b8:75:99:b6:3c:18:a4: 46:b5:2e:58:16:0f:a8:97:16:8f:f5:21:fb:be:fe: 4b:d9:8b:83:1f:21:89:10:ec:e2:d0:07:63:da:a8: 2c:15:07:96:3c:b5:b8:55:ff:57:fb:a0:b3:20:c8: e9:d9:de:9e:63:a2:72:5f:72:a4:e4:dc:98:b9:8e: 73:91:06:95:4a:df:24:ef:02:40:d9:e3:c0:cb:de: 78:3e:ea:99:a6:f6:d8:6a:e3:25:26:4e:e4:df:ed: 37:98:3d:61:6e:c3:19:97:d2:ab:c7:b6:e0:6f:85: 03:c7:88:35:60:0a:e6:8c:b1:19:ee:0b:12:9f:c6: 0a:c4:25:a3:85:af:93:7f:3b:f3:c7:ef:3d:2f:80: 5f:6c:cc:60:2a:70:f8:05:63:ce:c4:ac:05:9f:d1: 1e:c2:f6:da:03:5e:26:b6:a2:26:57:f5:3d:11:43: 8c:9d:eb:19:d5:0f:28:ed:e8:7d:3e:1a:0c:02:f1: 22:69:5b:85:19:62:e8:0b:44:28:fa:37:ed:2c:aa: 72:f7:69:4f:72:d5:5e:bd:09:ad:48:a4:77:06:95: 65:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:47:12:07:D0:15:56:BA:DE:4D:28:FE:79:CD:58:5E:4A:28:8A:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5559f029-47d4-3b1d-8cec-099d16206891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:2c:3e:6a:7f:e9:71:02:cd:9b:b8:c1:53:8b:7a:b5:af:23: 2a:f0:56:66:e7:ae:19:95:1b:27:64:0f:db:17:5c:ba:e5:23: 71:5d:fd:50:d1:6d:88:3f:67:20:c4:43:db:8f:d0:99:a8:59: 75:5b:ad:f2:e7:f3:b3:ad:0a:1f:7a:e6:67:b7:27:05:39:02: aa:eb:bc:84:4f:e3:ff:84:93:b5:a0:6e:4c:bf:09:e3:70:62: 03:cd:82:8b:42:bf:81:71:44:b3:17:27:e1:b8:ce:2d:e0:0c: 75:27:8d:b3:47:89:a4:66:76:11:83:78:60:db:8f:fd:7d:80: 3d:73:95:49:12:50:ea:6b:40:1f:1e:58:88:a8:dd:9c:20:3a: 9a:6a:7b:a8:51:ed:75:99:66:64:44:91:02:2b:fa:92:7e:b1: ba:05:29:38:91:8e:06:d3:9f:1d:7e:25:34:fb:39:1f:43:79: 65:4d:73:e2:13:dd:8b:65:86:a0:ea:80:2e:f1:e6:95:26:47: 8b:9a:02:3c:d0:bb:ff:ea:a6:1f:6e:43:99:75:24:f3:95:2a: 39:e3:d7:9b:3a:d3:e9:73:d8:08:64:5c:8a:2b:97:40:84:52: a8:77:d9:9a:07:c0:e9:53:21:8f:07:0a:d5:de:a8:65:26:8c: c5:84:10:48 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4uhp/3trslEOCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NjJhOThmNTktYWY4NS00ZTZmLWJiYjQtMGExNzg4OWZkNWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHL+y/76jIWo/a4SjLblRcnv9mAjAy6m4HP4 XuEjvYNCqJQ2RLh1mbY8GKRGtS5YFg+olxaP9SH7vv5L2YuDHyGJEOzi0Adj2qgs FQeWPLW4Vf9X+6CzIMjp2d6eY6JyX3Kk5NyYuY5zkQaVSt8k7wJA2ePAy954PuqZ pvbYauMlJk7k3+03mD1hbsMZl9Krx7bgb4UDx4g1YArmjLEZ7gsSn8YKxCWjha+T fzvzx+89L4BfbMxgKnD4BWPOxKwFn9EewvbaA14mtqImV/U9EUOMnesZ1Q8o7eh9 PhoMAvEiaVuFGWLoC0Qo+jftLKpy92lPctVevQmtSKR3BpVlTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJJHEgfQFVa63k0o/nnNWF5KKIo7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTU1OWYwMjktNDdkNC0z YjFkLThjZWMtMDk5ZDE2MjA2ODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAaLD5qf+lxAs2buMFTi3q1ryMq8FZm564ZlRsnZA/bF1y65SNxXf1Q 0W2IP2cgxEPbj9CZqFl1W63y5/OzrQofeuZntycFOQKq67yET+P/hJO1oG5Mvwnj cGIDzYKLQr+BcUSzFyfhuM4t4Ax1J42zR4mkZnYRg3hg24/9fYA9c5VJElDqa0Af HliIqN2cIDqaanuoUe11mWZkRJECK/qSfrG6BSk4kY4G058dfiU0+zkfQ3llTXPi E92LZYag6oAu8eaVJkeLmgI80Lv/6qYfbkOZdSTzlSo549ebOtPpc9gIZFyKK5dA hFKod9maB8DpUyGPBwrV3qhlJozFhBBI -----END CERTIFICATE-----Generated at Sun May 11 08:34:33 2025 by rpki-client