$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c1de249-6f5e-33a2-940f-7fff57d77838.roa File: 6c1de249-6f5e-33a2-940f-7fff57d77838.roa (raw, json) Hash identifier: fJ4OEwdvFsUc5BGbnesjqNHvGByuloU7iBKZ1hiiVcQ= Subject key identifier: 10:23:E2:F4:97:9D:15:BC:B4:AE:B2:93:50:E8:61:89:03:40:68:47 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F84D5011D8A5874267380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c1de249-6f5e-33a2-940f-7fff57d77838.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396580 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:84:d5:01:1d:8a:58:74:26:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=706baca2-f65a-428b-be4f-d79fa5867e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:56:53:99:5f:a1:56:1b:77:5f:b1:85:32:9d: ed:e9:20:ec:df:1e:9e:8a:b5:88:e8:ec:3e:c2:26: 23:50:ac:96:41:78:23:9e:e8:58:fc:f8:c0:fc:63: 0d:58:a9:c3:60:6b:1f:26:f8:03:3a:2b:db:36:14: 0e:e2:f3:1f:d3:17:43:86:43:05:02:79:d5:23:fa: ef:e9:f4:68:26:c2:80:ca:8c:81:ae:1e:98:ee:da: d3:88:19:25:58:ac:1d:1f:d2:73:ef:76:2e:e4:bc: 9c:87:b4:7a:a1:37:96:5e:70:d8:3a:30:aa:e8:8b: 67:d7:55:8c:42:92:16:b2:95:4f:0e:29:be:99:7a: 63:45:30:69:8a:5d:9f:3a:b5:c4:cb:74:e4:10:b1: bf:13:64:e9:2c:76:f3:e4:fb:1f:f8:c9:2c:b9:b5: 9c:88:d3:9b:2a:c1:72:d9:d7:d9:82:b7:32:8c:73: 65:ee:83:a8:81:6c:84:c4:ac:96:65:46:02:c8:cd: 47:ef:bc:f5:f2:50:ab:ca:af:1a:16:f1:42:1c:3f: 78:f2:6a:9b:35:32:94:e0:4b:3c:e2:49:13:8a:41: 8d:8d:6b:68:c2:ab:a3:0b:47:6e:bc:d2:08:17:0e: 00:f2:73:aa:81:68:8a:25:9d:73:de:cc:ab:71:3a: e7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:23:E2:F4:97:9D:15:BC:B4:AE:B2:93:50:E8:61:89:03:40:68:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c1de249-6f5e-33a2-940f-7fff57d77838.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:68:e2:d7:77:49:df:e2:d7:00:aa:c1:00:07:f1:10:d9:b3: 3e:81:ed:b5:32:50:d7:11:d0:5f:ba:96:6b:d4:4c:41:96:82: 9a:e0:dd:da:c1:e3:2e:0c:32:23:6f:01:09:ef:d4:ed:57:9d: 18:49:98:80:50:af:34:ec:a9:02:7c:e6:3d:25:4a:4c:40:57: f2:68:23:f0:b8:f0:3c:dd:3a:c7:14:ae:6a:0f:eb:fa:75:ec: 8c:db:a1:7a:c2:d5:78:66:5a:73:77:85:db:39:ff:5a:15:02: 47:74:de:18:af:fe:01:6c:06:da:42:a9:a4:4d:e9:a3:79:73: b6:c2:af:89:35:b0:2f:d1:e2:a6:4b:b7:23:55:08:cb:10:a4: 20:56:ad:a9:45:95:da:50:36:f0:8a:ee:ca:91:70:15:85:4d: 9f:23:8b:89:00:70:4e:0e:1d:35:0b:39:66:39:95:3e:3a:bd: b8:fb:6b:c5:fa:ad:45:37:23:da:1a:fb:15:0e:de:c6:8d:6c: 01:20:21:dc:9e:94:fb:9a:ff:50:b9:bf:52:a1:90:04:98:aa: 43:61:12:08:63:c0:52:52:16:cb:69:d3:a5:a9:43:c5:61:d4: 6a:98:51:9b:47:27:8c:f6:c6:1f:86:fa:47:5f:6b:cd:6a:7b: cd:ca:8a:b8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4TVAR2KWHQmc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NzA2YmFjYTItZjY1YS00MjhiLWJlNGYtZDc5ZmE1ODY3ZTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslZTmV+hVht3X7GFMp3t6SDs3x6eirWI6Ow+ wiYjUKyWQXgjnuhY/PjA/GMNWKnDYGsfJvgDOivbNhQO4vMf0xdDhkMFAnnVI/rv 6fRoJsKAyoyBrh6Y7trTiBklWKwdH9Jz73Yu5Lych7R6oTeWXnDYOjCq6Itn11WM QpIWspVPDim+mXpjRTBpil2fOrXEy3TkELG/E2TpLHbz5Psf+MksubWciNObKsFy 2dfZgrcyjHNl7oOogWyExKyWZUYCyM1H77z18lCryq8aFvFCHD948mqbNTKU4Es8 4kkTikGNjWtowqujC0duvNIIFw4A8nOqgWiKJZ1z3syrcTrnSQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBAj4vSXnRW8tK6yk1DoYYkDQGhHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmMxZGUyNDktNmY1ZS0z M2EyLTk0MGYtN2ZmZjU3ZDc3ODM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBpaOLXd0nf4tcAqsEAB/EQ2bM+ge21MlDXEdBfupZr1ExBloKa4N3a weMuDDIjbwEJ79TtV50YSZiAUK807KkCfOY9JUpMQFfyaCPwuPA83TrHFK5qD+v6 deyM26F6wtV4Zlpzd4XbOf9aFQJHdN4Yr/4BbAbaQqmkTemjeXO2wq+JNbAv0eKm S7cjVQjLEKQgVq2pRZXaUDbwiu7KkXAVhU2fI4uJAHBODh01CzlmOZU+Or24+2vF +q1FNyPaGvsVDt7GjWwBICHcnpT7mv9Qub9SoZAEmKpDYRIIY8BSUhbLadOlqUPF YdRqmFGbRyeM9sYfhvpHX2vNanvNyoq4 -----END CERTIFICATE-----Generated at Sun May 11 08:47:40 2025 by rpki-client