$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58254ee6-f857-3f74-91aa-b9565ecb3846.roa File: 58254ee6-f857-3f74-91aa-b9565ecb3846.roa (raw, json) Hash identifier: p08ckb5m1xSpwJIhckmAPwPYuEIIQHjz66tTAKL44bg= Subject key identifier: 19:09:20:15:7B:38:C3:8C:87:6D:3B:5D:F5:63:8C:4B:A2:E8:72:04 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F861FAD33973A00440600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58254ee6-f857-3f74-91aa-b9565ecb3846.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396826 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:86:1f:ad:33:97:3a:00:44:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=4d572b8e-a37c-428f-8ae9-1dab22b9dccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7c:5c:65:9e:80:ad:59:15:c9:7d:29:0c:a0: 71:b6:d5:00:34:e9:c6:d7:e7:ba:1f:11:25:be:a7: aa:a8:5b:ca:a6:d6:fb:34:7b:7e:58:cc:2a:de:1a: ef:d1:17:91:42:a6:b2:55:35:21:fd:7b:05:06:7b: 1a:c0:0f:df:e3:9e:34:e7:82:88:1d:27:e5:e2:2f: 1d:16:49:f7:71:f2:c4:95:52:df:00:f1:c5:90:e2: 96:29:f5:b8:af:9c:a2:dc:de:ae:e2:93:92:e9:c1: 8d:a5:8b:f0:cc:d2:cf:ab:77:4d:10:6a:14:23:96: 66:55:ec:c0:62:0e:4e:cf:f5:53:71:0e:e9:1b:bb: 40:35:b8:39:62:f3:dc:a9:24:f2:9a:5d:4d:71:90: 82:2b:eb:11:0b:a2:15:b9:57:fe:9f:e8:1b:6b:b1: 62:99:13:d8:7a:92:25:ea:04:09:f7:87:a7:a6:87: e0:00:05:99:68:f4:3f:35:68:1a:30:ba:a5:6c:77: 25:a6:10:ee:85:9a:58:65:f7:c0:00:67:2e:cc:c3: b7:aa:46:63:09:a3:8e:d9:9a:7c:c1:b4:cf:32:69: ce:53:35:ac:d8:a7:2f:8a:7e:8a:5b:14:8a:3d:de: 7f:a6:e5:57:2c:43:f9:8d:7e:42:0d:5a:88:f3:9b: 76:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:09:20:15:7B:38:C3:8C:87:6D:3B:5D:F5:63:8C:4B:A2:E8:72:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58254ee6-f857-3f74-91aa-b9565ecb3846.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:79:ee:96:b5:f8:d5:42:e0:2f:c6:c6:1d:15:a5:25:9f:52: c8:22:ac:22:36:19:4e:29:f2:b1:b1:c3:58:7e:92:83:91:2b: fe:33:27:84:d6:e7:41:e0:41:cf:84:bc:19:23:21:20:01:0c: 3f:b1:53:02:c5:81:4a:57:bb:92:ff:fb:9f:01:33:b3:a8:a6: 47:0a:98:d0:10:bb:6b:17:b8:db:b5:be:29:8f:d3:e0:31:08: cd:3e:ea:e5:7a:8b:c2:1a:65:ea:f8:94:e4:fd:2b:7d:23:9b: 21:93:b3:eb:6f:6f:61:31:53:8c:12:08:d1:cc:aa:c7:84:dc: b4:4f:6b:b8:f0:10:9a:73:6c:2b:50:0c:77:d1:18:15:de:a3: 2c:ad:17:3a:ba:ac:ee:55:60:54:09:11:e5:a6:a2:d9:33:bb: ed:43:2a:15:f2:07:89:c9:ff:4d:66:b0:0d:97:d9:ff:47:13: cd:e7:01:8b:59:00:ec:ad:71:67:e5:07:b7:3c:2e:ee:a8:12: f9:63:2f:4a:a9:39:9d:dd:d5:ea:d2:b6:1b:e2:7c:49:c3:14: fd:e7:e3:db:ec:de:04:dc:39:b6:92:dc:e7:6d:a5:63:13:40: f9:f8:f5:f2:b4:9f:6b:21:81:d6:f0:39:36:aa:d7:a9:73:d8: 4d:99:ac:4a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4YfrTOXOgBEBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NGQ1NzJiOGUtYTM3Yy00MjhmLThhZTktMWRhYjIyYjlkY2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHxcZZ6ArVkVyX0pDKBxttUANOnG1+e6HxEl vqeqqFvKptb7NHt+WMwq3hrv0ReRQqayVTUh/XsFBnsawA/f454054KIHSfl4i8d Fkn3cfLElVLfAPHFkOKWKfW4r5yi3N6u4pOS6cGNpYvwzNLPq3dNEGoUI5ZmVezA Yg5Oz/VTcQ7pG7tANbg5YvPcqSTyml1NcZCCK+sRC6IVuVf+n+gba7FimRPYepIl 6gQJ94enpofgAAWZaPQ/NWgaMLqlbHclphDuhZpYZffAAGcuzMO3qkZjCaOO2Zp8 wbTPMmnOUzWs2Kcvin6KWxSKPd5/puVXLEP5jX5CDVqI85t2QwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBkJIBV7OMOMh207XfVjjEui6HIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTgyNTRlZTYtZjg1Ny0z Zjc0LTkxYWEtYjk1NjVlY2IzODQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJee6WtfjVQuAvxsYdFaUln1LIIqwiNhlOKfKxscNYfpKDkSv+MyeE 1udB4EHPhLwZIyEgAQw/sVMCxYFKV7uS//ufATOzqKZHCpjQELtrF7jbtb4pj9Pg MQjNPurleovCGmXq+JTk/St9I5shk7Prb29hMVOMEgjRzKrHhNy0T2u48BCac2wr UAx30RgV3qMsrRc6uqzuVWBUCRHlpqLZM7vtQyoV8geJyf9NZrANl9n/RxPN5wGL WQDsrXFn5Qe3PC7uqBL5Yy9KqTmd3dXq0rYb4nxJwxT95+Pb7N4E3Dm2ktznbaVj E0D5+PXytJ9rIYHW8Dk2qtepc9hNmaxK -----END CERTIFICATE-----Generated at Sun May 11 06:37:23 2025 by rpki-client