$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b2e7b97-9281-33e1-953e-fc929888a2f0.roa File: 5b2e7b97-9281-33e1-953e-fc929888a2f0.roa (raw, json) Hash identifier: TwPAmObVo+wyTMiKvwN2b4f2weqVRATfPyOfP5eJpHM= Subject key identifier: 11:CD:A7:E4:11:64:F5:A2:EF:98:6E:4A:C1:F0:FB:03:F6:E2:D4:19 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F89ABAF3D3FF2613CB480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b2e7b97-9281-33e1-953e-fc929888a2f0.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396552 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:89:ab:af:3d:3f:f2:61:3c:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=b782fb90-aec9-4316-929b-8b6d92be6ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:24:88:83:a3:28:d4:20:21:bf:47:80:c6:15: 77:ac:1a:9a:39:de:91:e0:2d:e9:c3:10:17:0c:77: e7:f7:b0:2a:2e:0b:47:01:ed:67:43:a3:cf:36:74: d8:9a:af:1e:af:92:d3:04:f1:49:3e:9d:f0:cb:1a: 1c:1a:cb:c1:e0:fb:3b:30:6a:ff:a3:77:ce:87:3b: 52:1f:71:1f:4c:5d:00:b1:a2:0e:ff:b2:dd:9b:d1: 9e:60:55:39:21:52:80:23:19:83:38:64:d6:c4:3f: 93:98:8d:22:35:a7:4e:dd:33:db:5d:ea:f8:bb:27: 44:3b:1b:f4:88:8f:af:44:cd:ec:16:ed:7f:00:82: d9:4e:7c:2c:74:26:8b:c2:76:b7:9c:31:b6:38:40: f7:19:3f:19:63:ee:4d:dc:ba:82:3f:50:bc:a6:ff: b5:12:a4:50:34:1c:b7:f3:15:b0:b8:15:f6:0e:a4: d8:f9:05:85:7b:9a:83:b7:81:dc:da:00:8f:9f:b4: 98:4e:e5:16:c9:86:28:03:02:7b:35:4b:5b:2d:b4: 4b:e9:00:29:9f:e8:e4:d2:d1:73:e2:a7:3a:8a:4b: e0:46:8e:29:90:71:a3:20:fe:bc:54:8d:f3:5b:4e: 9c:3e:e1:11:5c:d4:95:59:98:48:85:fb:6b:88:b3: 1f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CD:A7:E4:11:64:F5:A2:EF:98:6E:4A:C1:F0:FB:03:F6:E2:D4:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b2e7b97-9281-33e1-953e-fc929888a2f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:16:34:db:02:6b:24:89:c5:86:fe:5d:3c:18:e2:e8:a9:17: 6a:4c:a9:07:90:b7:94:2d:fe:a7:22:ae:c8:6a:00:ed:f5:ff: a0:f7:02:84:b8:f0:4c:3e:5e:b2:48:0b:7a:4d:0a:d1:67:d5: 46:d7:e1:09:f0:ec:9a:7a:b7:54:ed:90:da:98:a4:f4:ff:0b: ab:05:04:94:78:e1:b4:97:7c:37:e3:96:09:af:58:fc:94:ef: d4:5a:36:2f:35:7b:88:e1:66:ac:42:d1:23:65:12:5d:a5:53: 31:0a:a8:49:cc:b8:f7:2d:b4:a0:f4:09:7a:76:9b:6d:0c:23: 95:24:2d:8c:a7:ab:f2:bf:ae:b1:6d:79:4d:10:a3:66:64:b0: 42:f0:2d:79:6d:4c:d0:c9:70:44:a9:3f:68:9e:ae:a0:3b:e8: b0:52:c6:3e:02:21:a6:40:a9:40:32:70:6e:4e:2e:58:8a:b2: c4:83:d1:a7:35:a1:76:4b:cf:bf:b9:ca:32:07:cb:da:be:8d: 05:23:57:e5:46:28:43:54:a7:22:99:96:52:70:e9:cb:3b:76: 70:60:b5:f1:4c:2f:e3:6d:5d:9e:41:6e:0a:d4:b0:70:b1:8b: bc:33:09:23:7c:ba:16:c0:75:13:d2:a5:fa:5d:b3:2b:9f:99: 1c:91:f2:d0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4mrrz0/8mE8tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk Yjc4MmZiOTAtYWVjOS00MzE2LTkyOWItOGI2ZDkyYmU2ZWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSSIg6Mo1CAhv0eAxhV3rBqaOd6R4C3pwxAX DHfn97AqLgtHAe1nQ6PPNnTYmq8er5LTBPFJPp3wyxocGsvB4Ps7MGr/o3fOhztS H3EfTF0AsaIO/7Ldm9GeYFU5IVKAIxmDOGTWxD+TmI0iNadO3TPbXer4uydEOxv0 iI+vRM3sFu1/AILZTnwsdCaLwna3nDG2OED3GT8ZY+5N3LqCP1C8pv+1EqRQNBy3 8xWwuBX2DqTY+QWFe5qDt4Hc2gCPn7SYTuUWyYYoAwJ7NUtbLbRL6QApn+jk0tFz 4qc6ikvgRo4pkHGjIP68VI3zW06cPuERXNSVWZhIhftriLMfFQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBHNp+QRZPWi75huSsHw+wP24tQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWIyZTdiOTctOTI4MS0z M2UxLTk1M2UtZmM5Mjk4ODhhMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBnFjTbAmskicWG/l08GOLoqRdqTKkHkLeULf6nIq7IagDt9f+g9wKE uPBMPl6ySAt6TQrRZ9VG1+EJ8OyaerdU7ZDamKT0/wurBQSUeOG0l3w345YJr1j8 lO/UWjYvNXuI4WasQtEjZRJdpVMxCqhJzLj3LbSg9Al6dpttDCOVJC2Mp6vyv66x bXlNEKNmZLBC8C15bUzQyXBEqT9onq6gO+iwUsY+AiGmQKlAMnBuTi5YirLEg9Gn NaF2S8+/ucoyB8vavo0FI1flRihDVKcimZZScOnLO3ZwYLXxTC/jbV2eQW4K1LBw sYu8MwkjfLoWwHUT0qX6XbMrn5kckfLQ -----END CERTIFICATE-----Generated at Sun May 11 06:26:57 2025 by rpki-client