$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b721686-3bd0-30a8-abbb-e701f8eff2e1.roa File: 5b721686-3bd0-30a8-abbb-e701f8eff2e1.roa (raw, json) Hash identifier: iN//FSiYNYUikiQzKs+71ql/vBPAhtMc1dnjeYGWEQw= Subject key identifier: 95:AF:B8:F2:29:1F:DF:C2:C0:DD:84:BC:10:29:DC:D0:72:E9:73:B5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F897EB5E061564A59F900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b721686-3bd0-30a8-abbb-e701f8eff2e1.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396554 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:89:7e:b5:e0:61:56:4a:59:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=4183ba64-117e-41ba-93ef-b42221d324a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c9:83:ec:9e:bb:98:29:73:a1:07:65:87:93: 14:fa:de:83:3a:27:14:0c:f6:12:07:b6:c2:e2:25: b1:38:8b:87:2d:1f:d3:18:5b:46:96:bf:50:08:b5: 62:60:e1:39:42:17:51:d5:6d:a7:a9:9f:25:5c:ed: 09:7c:e7:37:cf:56:65:04:04:ed:67:43:79:ac:0c: 4c:cf:0a:bb:db:de:f3:aa:d6:8f:97:2e:43:b5:02: 63:b3:bb:a9:59:83:ed:2b:8a:0b:e9:b0:7f:5f:ca: 35:d0:02:d8:73:31:31:7c:a0:d5:be:ab:4d:97:56: 8d:a8:7c:50:ee:51:c2:3c:4e:f2:bd:75:d6:c6:ca: c8:2c:02:42:4d:04:a1:51:cd:e4:8d:6f:6e:c6:3c: da:d6:92:b8:51:71:55:c8:d0:78:2f:9d:8e:0a:c9: 66:a4:34:f4:55:64:c0:e8:c8:d4:d4:7a:aa:6d:a4: 7a:4b:d9:db:6d:2e:e1:69:b3:bb:54:fb:b0:1e:11: 40:0e:19:93:fd:46:83:55:c0:86:27:ff:12:19:c2: be:91:f9:20:93:1c:f8:c2:57:4d:19:72:35:d1:3f: 1e:63:36:95:6c:9e:2a:a0:9c:fd:4f:af:1c:85:c1: f0:ac:2c:39:2d:4e:c7:49:0b:a6:91:ea:d5:87:35: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AF:B8:F2:29:1F:DF:C2:C0:DD:84:BC:10:29:DC:D0:72:E9:73:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b721686-3bd0-30a8-abbb-e701f8eff2e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:93:ec:b1:39:34:86:bf:97:b0:0b:a2:60:97:26:61:28:4b: 8c:f4:dc:18:19:10:5c:65:45:49:53:8f:24:9d:26:90:c5:c7: ec:14:5e:6d:ff:7e:20:59:87:0a:49:82:a2:cf:38:f3:f6:dd: 48:a6:c8:a8:aa:bd:4a:92:05:89:14:b3:a9:3d:1a:80:78:00: 72:26:2a:6c:c8:88:ef:8a:ad:b9:d4:89:16:aa:57:85:91:fa: 92:68:18:e6:26:38:02:20:ed:bb:b2:4c:21:e5:99:37:d6:61: 1d:da:6f:c5:5f:4f:3c:0f:a9:53:0f:57:e6:4d:15:57:36:51: 91:f5:d7:2b:24:dc:73:05:8f:dd:92:53:fa:35:33:5c:ff:d1: c9:21:94:a5:e6:07:18:7a:08:f6:a1:10:4f:69:26:a9:27:f0: 68:e2:d4:f3:a2:a7:06:aa:82:e6:2b:c2:4f:0a:0a:bb:cc:09: 66:e1:2e:b6:51:d8:f5:f3:15:0b:06:69:a3:1c:b9:77:94:10: d7:73:51:c3:6f:38:0b:39:97:76:d1:e8:ad:94:88:a4:60:bc: 31:3e:ca:9e:31:51:85:76:01:a4:61:d9:ed:ea:f6:c7:d1:b6: 20:31:9b:ca:af:92:7e:a9:ea:ac:94:bf:bf:ae:4a:66:cd:b2: 25:24:73:2a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4l+teBhVkpZ+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NDE4M2JhNjQtMTE3ZS00MWJhLTkzZWYtYjQyMjIxZDMyNGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5smD7J67mClzoQdlh5MU+t6DOicUDPYSB7bC 4iWxOIuHLR/TGFtGlr9QCLViYOE5QhdR1W2nqZ8lXO0JfOc3z1ZlBATtZ0N5rAxM zwq7297zqtaPly5DtQJjs7upWYPtK4oL6bB/X8o10ALYczExfKDVvqtNl1aNqHxQ 7lHCPE7yvXXWxsrILAJCTQShUc3kjW9uxjza1pK4UXFVyNB4L52OCslmpDT0VWTA 6MjU1HqqbaR6S9nbbS7habO7VPuwHhFADhmT/UaDVcCGJ/8SGcK+kfkgkxz4wldN GXI10T8eYzaVbJ4qoJz9T68chcHwrCw5LU7HSQumkerVhzVfTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJWvuPIpH9/CwN2EvBAp3NBy6XO1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWI3MjE2ODYtM2JkMC0z MGE4LWFiYmItZTcwMWY4ZWZmMmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBNk+yxOTSGv5ewC6JglyZhKEuM9NwYGRBcZUVJU48knSaQxcfsFF5t /34gWYcKSYKizzjz9t1Ipsioqr1KkgWJFLOpPRqAeAByJipsyIjviq251IkWqleF kfqSaBjmJjgCIO27skwh5Zk31mEd2m/FX088D6lTD1fmTRVXNlGR9dcrJNxzBY/d klP6NTNc/9HJIZSl5gcYegj2oRBPaSapJ/Bo4tTzoqcGqoLmK8JPCgq7zAlm4S62 Udj18xULBmmjHLl3lBDXc1HDbzgLOZd20eitlIikYLwxPsqeMVGFdgGkYdnt6vbH 0bYgMZvKr5J+qeqslL+/rkpmzbIlJHMq -----END CERTIFICATE-----Generated at Sun May 11 05:55:40 2025 by rpki-client