$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c5cb338-e96e-3817-a83f-4c50a4a02840.roa File: 6c5cb338-e96e-3817-a83f-4c50a4a02840.roa (raw, json) Hash identifier: tzsoer2fOCet2Esy9Q8kzeRbgU59XJ+ubSL4HK3kBfo= Subject key identifier: 70:E7:2D:FD:BD:2D:95:60:44:F6:AD:54:85:C8:A7:90:46:55:65:AD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F7FCA411F8978B26F0A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c5cb338-e96e-3817-a83f-4c50a4a02840.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 397201 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:7f:ca:41:1f:89:78:b2:6f:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=d5a2bf05-a7d7-4e80-ba17-802eac9b6bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9d:e0:d4:17:77:87:66:02:84:ec:a2:71:b6: ce:a3:09:60:98:64:9f:3e:50:4a:61:74:49:e3:26: ae:02:31:70:0f:60:bc:56:cf:2e:d6:16:07:8f:97: 0a:47:b8:52:56:01:1c:be:79:e4:77:b5:76:b8:e2: 89:6c:ee:19:04:94:9b:a1:63:39:ed:dd:c3:53:07: f7:da:34:76:c4:80:34:4f:b8:5a:5c:58:0e:23:ab: bc:67:38:94:f1:32:8c:79:0a:00:17:22:06:96:ff: 7a:11:98:a7:25:7d:32:89:d8:34:da:24:91:4f:60: 12:42:78:30:49:26:b4:b7:29:72:a8:d8:e7:d6:e6: 91:89:b9:cd:81:a5:71:2f:7f:d8:17:37:89:21:3d: 9c:2c:e4:0a:c7:fb:e5:4b:0c:1e:d5:78:8a:f7:fb: cb:12:81:97:dd:b0:59:f7:12:c7:ed:ef:f0:7d:1c: 3e:75:ad:cb:29:0c:92:f3:db:7f:9d:e2:c0:ac:13: 45:79:d0:dd:38:f3:08:9c:3c:3a:d8:1b:a9:af:09: da:25:c7:b7:9a:ce:bd:17:22:c0:03:a5:a1:79:6a: 09:21:d0:04:c2:28:2b:eb:71:41:51:c9:af:d5:ba: 22:2b:1f:09:33:b2:f4:d3:53:a7:ec:2a:6f:e8:13: 77:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E7:2D:FD:BD:2D:95:60:44:F6:AD:54:85:C8:A7:90:46:55:65:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c5cb338-e96e-3817-a83f-4c50a4a02840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:57:a3:17:f0:79:45:cd:8f:27:bd:10:43:da:c6:45:41:0c: cc:44:95:72:fe:50:63:48:9d:81:82:71:e9:18:eb:70:d4:13: 52:d0:c1:7a:50:30:68:f5:d2:76:ae:8c:93:95:0e:f3:83:c6: f2:eb:b4:9e:88:6d:de:04:85:be:c6:4c:59:ce:d7:17:31:a1: 67:01:0f:d2:7b:3b:04:35:76:28:4b:23:9b:99:a2:73:8a:ae: c7:bb:72:08:7c:af:2f:d9:dc:c3:ee:f2:a2:8b:68:08:91:01: 0d:c2:be:af:d4:4c:39:76:b2:db:b9:40:60:80:9b:4f:76:e4: c3:df:69:5d:8f:76:a4:86:49:d6:83:06:11:72:e0:67:25:87: 6d:81:63:87:a1:8c:04:be:85:e3:60:d4:08:2b:48:35:cf:fa: d7:56:8b:e7:08:0c:09:63:92:f3:05:06:1a:f6:cc:16:38:a0: ad:21:65:1d:65:a1:9d:c9:d1:05:60:9a:b0:1e:5b:4f:46:5f: af:b9:60:ae:6d:68:88:82:ad:9b:df:ce:bd:3d:92:24:92:b0: b1:40:e7:9a:ea:c4:ed:f9:6c:e3:bf:77:da:c9:d0:4d:cb:66: 00:b8:1c:b1:b6:04:5b:ec:fc:c3:09:7f:0c:6c:3d:28:db:77: 55:b0:2d:11 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P3/KQR+JeLJvCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZDVhMmJmMDUtYTdkNy00ZTgwLWJhMTctODAyZWFjOWI2YmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ3g1Bd3h2YChOyicbbOowlgmGSfPlBKYXRJ 4yauAjFwD2C8Vs8u1hYHj5cKR7hSVgEcvnnkd7V2uOKJbO4ZBJSboWM57d3DUwf3 2jR2xIA0T7haXFgOI6u8ZziU8TKMeQoAFyIGlv96EZinJX0yidg02iSRT2ASQngw SSa0tylyqNjn1uaRibnNgaVxL3/YFzeJIT2cLOQKx/vlSwwe1XiK9/vLEoGX3bBZ 9xLH7e/wfRw+da3LKQyS89t/neLArBNFedDdOPMInDw62BuprwnaJce3ms69FyLA A6WheWoJIdAEwigr63FBUcmv1boiKx8JM7L001On7Cpv6BN3QwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHDnLf29LZVgRPatVIXIp5BGVWWtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmM1Y2IzMzgtZTk2ZS0z ODE3LWE4M2YtNGM1MGE0YTAyODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAMV6MX8HlFzY8nvRBD2sZFQQzMRJVy/lBjSJ2BgnHpGOtw1BNS0MF6 UDBo9dJ2royTlQ7zg8by67SeiG3eBIW+xkxZztcXMaFnAQ/SezsENXYoSyObmaJz iq7Hu3IIfK8v2dzD7vKii2gIkQENwr6v1Ew5drLbuUBggJtPduTD32ldj3akhknW gwYRcuBnJYdtgWOHoYwEvoXjYNQIK0g1z/rXVovnCAwJY5LzBQYa9swWOKCtIWUd ZaGdydEFYJqwHltPRl+vuWCubWiIgq2b3869PZIkkrCxQOea6sTt+Wzjv3faydBN y2YAuByxtgRb7PzDCX8MbD0o23dVsC0R -----END CERTIFICATE-----Generated at Sun May 11 08:32:17 2025 by rpki-client