$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6008ca0a-c263-3da9-ac70-8a69bae553d6.roa File: 6008ca0a-c263-3da9-ac70-8a69bae553d6.roa (raw, json) Hash identifier: kR/73D9IuLwZ7H97NAfcT4tY7r3eAu9S9w+k6UVgpsA= Subject key identifier: 64:B6:45:58:18:1C:D2:26:E5:E4:F7:72:EF:27:C9:6B:0D:17:EA:78 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F89E867B3BCD7DF057D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6008ca0a-c263-3da9-ac70-8a69bae553d6.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 36632 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:89:e8:67:b3:bc:d7:df:05:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=d5f2011f-6730-4b3e-81e7-7d0a5da4cdc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:13:b3:6d:d6:69:c5:aa:ec:f7:b6:b9:c4:c6: 18:e6:7c:55:97:74:64:6e:17:ae:83:23:77:6a:bd: 91:43:e5:37:da:94:48:9d:7c:e6:36:99:11:2b:1d: 24:11:16:1b:29:ac:7a:80:93:fe:db:d4:e6:a4:83: 3c:af:5d:77:8f:ba:2d:f6:5d:21:7e:60:60:01:5c: 49:e9:1b:ea:b5:19:83:63:8f:f6:79:15:1d:79:45: e0:75:d8:94:22:27:47:ca:cc:a4:24:e3:ea:cf:d6: 10:b2:64:a2:3f:e0:c5:47:a0:ca:9d:d6:77:bc:87: a0:c5:6b:44:61:7a:d5:c7:c8:c3:89:a5:2d:80:7c: 75:87:4d:1d:8e:c6:b8:de:19:19:3d:38:97:84:40: 6d:b5:62:bd:48:ee:3b:19:f6:c6:77:da:54:26:90: 9b:d0:9b:46:50:f1:0b:97:4a:56:7c:dc:d4:16:70: 4b:39:35:c3:05:1a:f5:04:f3:ce:87:cf:79:e3:83: 43:cd:23:84:8e:ec:46:d4:ae:09:ca:23:4a:64:82: 9b:a1:24:d3:03:eb:0d:51:da:9b:c0:56:3a:85:e4: 04:1e:ff:30:6d:8c:fb:4f:34:a7:82:0f:2e:24:bc: 0e:d8:3b:b6:f8:52:65:a2:82:36:15:2d:86:66:ae: e3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B6:45:58:18:1C:D2:26:E5:E4:F7:72:EF:27:C9:6B:0D:17:EA:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6008ca0a-c263-3da9-ac70-8a69bae553d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:1f:df:0d:24:d3:31:7a:32:14:b5:af:37:2f:9d:16:d9:0e: f5:0b:48:93:79:a7:2b:9f:3c:c8:8f:7a:50:55:2c:7d:b0:d4: 2b:3c:b0:d7:6a:7f:90:36:91:83:fe:6d:75:c6:62:18:66:cd: 90:58:ee:00:45:74:fb:ff:07:19:36:5c:a3:73:bb:d4:a7:97: e9:9f:6a:11:ef:5e:6e:ed:28:d4:39:06:7f:ee:d4:62:d8:89: 96:94:92:ff:a2:d1:2e:30:4b:da:19:2c:87:c8:02:de:2b:ac: a9:d4:d9:e9:b0:4c:85:7a:05:30:6c:9f:33:93:e4:85:5d:fd: 0f:96:a2:98:67:bf:4c:6b:87:15:19:c9:6a:c9:32:01:6f:dc: 6d:7b:cc:65:5b:5d:cc:ad:aa:3e:8a:c4:56:17:36:79:77:d1: 84:db:e3:a0:26:48:13:f5:3e:24:39:a0:10:30:fe:87:04:d0: e1:e5:f3:b8:c2:62:ff:0a:95:11:68:77:f3:cd:75:20:95:36: 79:98:7e:d7:cd:b2:f5:1e:39:c0:3f:81:ed:de:f0:a8:1d:10: 49:6e:c5:81:9a:c8:37:49:2d:64:22:e3:70:c7:25:f3:30:1c: 5d:0e:94:a3:db:7b:7d:6a:68:da:80:c4:d1:4c:5b:b7:8c:1c: 61:27:08:3f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4noZ7O8198FfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZDVmMjAxMWYtNjczMC00YjNlLTgxZTctN2QwYTVkYTRjZGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoROzbdZpxars97a5xMYY5nxVl3RkbheugyN3 ar2RQ+U32pRInXzmNpkRKx0kERYbKax6gJP+29TmpIM8r113j7ot9l0hfmBgAVxJ 6RvqtRmDY4/2eRUdeUXgddiUIidHysykJOPqz9YQsmSiP+DFR6DKndZ3vIegxWtE YXrVx8jDiaUtgHx1h00djsa43hkZPTiXhEBttWK9SO47GfbGd9pUJpCb0JtGUPEL l0pWfNzUFnBLOTXDBRr1BPPOh89544NDzSOEjuxG1K4JyiNKZIKboSTTA+sNUdqb wFY6heQEHv8wbYz7TzSngg8uJLwO2Du2+FJlooI2FS2GZq7jcQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGS2RVgYHNIm5eT3cu8nyWsNF+p4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjAwOGNhMGEtYzI2My0z ZGE5LWFjNzAtOGE2OWJhZTU1M2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4H98NJNMxejIUta83L50W2Q71C0iTeacrnzzIj3pQVSx9sNQrPLDX an+QNpGD/m11xmIYZs2QWO4ARXT7/wcZNlyjc7vUp5fpn2oR715u7SjUOQZ/7tRi 2ImWlJL/otEuMEvaGSyHyALeK6yp1NnpsEyFegUwbJ8zk+SFXf0PlqKYZ79Ma4cV GclqyTIBb9xte8xlW13Mrao+isRWFzZ5d9GE2+OgJkgT9T4kOaAQMP6HBNDh5fO4 wmL/CpURaHfzzXUglTZ5mH7XzbL1HjnAP4Ht3vCoHRBJbsWBmsg3SS1kIuNwxyXz MBxdDpSj23t9amjagMTRTFu3jBxhJwg/ -----END CERTIFICATE-----Generated at Sun May 11 05:35:07 2025 by rpki-client