$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71018df6-bd92-3378-985c-e3e08032c26b.roa File: 71018df6-bd92-3378-985c-e3e08032c26b.roa (raw, json) Hash identifier: 3/fzcYNgzh8Cx8qYd7XgInVuNblxybCsgeb4RiTNVUM= Subject key identifier: 2E:71:B0:42:02:F4:79:91:5D:FC:21:27:62:D5:04:9F:5E:A4:AB:F9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8B21B8EC1097EB0D46C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71018df6-bd92-3378-985c-e3e08032c26b.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 27544 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8b:21:b8:ec:10:97:eb:0d:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=cc26fcd0-648e-430d-87cf-0de3deba30cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8e:5b:9e:2f:30:84:61:7c:6b:d9:8f:33:24: 73:fd:25:51:bd:10:50:c8:35:b7:06:4f:6d:e4:fa: 53:94:32:93:9e:81:0d:a1:a6:ca:6f:e1:3c:34:f8: 74:d1:b2:5b:bf:a5:16:ba:02:01:26:33:4c:61:ce: b0:52:4b:3c:39:a9:33:89:11:d6:d1:17:7e:2d:df: 07:73:ba:44:f3:fb:20:3e:7a:8a:88:ab:da:50:e5: 2c:c1:c2:f9:15:ad:2e:0d:a1:8f:0f:ec:2f:19:fd: 5d:13:e0:db:ec:66:43:93:7b:59:1b:10:d3:de:13: fe:9b:fb:f8:6d:2d:01:e7:fa:67:40:01:ce:d0:70: ed:7c:e9:8c:84:a7:35:e7:f5:7d:d7:68:88:a9:af: ba:a0:fe:d7:f5:41:70:07:8d:25:7e:5d:dc:00:cd: c7:e4:38:c5:cb:3c:51:1a:76:bf:6a:06:03:7d:fe: 4e:7c:83:f8:c8:7f:6c:7f:21:5e:dd:cc:f6:5b:88: 49:64:7b:da:8e:78:ab:12:e9:00:b2:4b:d2:8d:8e: 0e:2d:3a:2d:11:80:2c:f9:e1:4b:b5:d3:05:a5:d2: a0:c4:d5:d2:ed:a2:d2:a1:49:80:a3:eb:41:13:64: 46:1b:9e:8a:b2:e8:b6:e5:31:f5:d0:e5:ba:d8:33: c1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:71:B0:42:02:F4:79:91:5D:FC:21:27:62:D5:04:9F:5E:A4:AB:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71018df6-bd92-3378-985c-e3e08032c26b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:47:a5:2b:15:fd:8d:9e:93:81:f8:15:84:0a:df:9a:80:96: db:80:15:c0:ff:fc:ce:ae:e5:0b:f6:f2:cd:d1:20:47:73:a6: 88:ca:c9:c6:37:24:ba:90:5b:66:69:29:66:e0:62:27:15:bb: f2:71:25:5a:bf:2d:cd:72:17:00:49:de:59:35:85:1d:24:68: 40:62:15:92:b0:5e:96:74:c8:93:84:3a:49:1d:78:da:4c:f8: 6a:35:b4:79:a0:7c:c7:89:8d:6c:88:6d:5f:da:dc:1c:af:a6: 0f:27:06:42:8d:2b:e9:8c:fa:dd:05:10:38:fb:a8:bb:06:57: 73:c2:4f:bf:56:4f:ea:30:dd:d2:74:60:33:01:6c:8c:91:7e: d0:cd:96:b8:52:aa:6b:23:36:8a:4e:3e:bc:07:b6:7a:fc:bf: 76:d3:8f:c3:40:f6:a0:50:49:1f:a6:53:70:f6:f3:b2:3f:aa: 2d:dc:30:31:6b:9e:11:76:cd:10:74:f2:22:74:3e:a9:72:5b: aa:08:27:d9:ec:57:e0:2b:c3:c1:57:44:36:0f:2b:a1:b1:bb: 04:26:e9:2b:dc:ed:bd:ae:11:de:02:9e:79:f3:e9:1e:3f:ba: 0b:b2:8d:eb:28:f7:d3:af:c8:86:cd:08:fb:fd:e2:bf:d0:ad: bd:d6:f4:29 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4shuOwQl+sNRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk Y2MyNmZjZDAtNjQ4ZS00MzBkLTg3Y2YtMGRlM2RlYmEzMGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho5bni8whGF8a9mPMyRz/SVRvRBQyDW3Bk9t 5PpTlDKTnoENoabKb+E8NPh00bJbv6UWugIBJjNMYc6wUks8OakziRHW0Rd+Ld8H c7pE8/sgPnqKiKvaUOUswcL5Fa0uDaGPD+wvGf1dE+Db7GZDk3tZGxDT3hP+m/v4 bS0B5/pnQAHO0HDtfOmMhKc15/V912iIqa+6oP7X9UFwB40lfl3cAM3H5DjFyzxR Gna/agYDff5OfIP4yH9sfyFe3cz2W4hJZHvajnirEukAskvSjY4OLTotEYAs+eFL tdMFpdKgxNXS7aLSoUmAo+tBE2RGG56Ksui25TH10OW62DPBEQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC5xsEIC9HmRXfwhJ2LVBJ9epKv5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzEwMThkZjYtYmQ5Mi0z Mzc4LTk4NWMtZTNlMDgwMzJjMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB/R6UrFf2NnpOB+BWECt+agJbbgBXA//zOruUL9vLN0SBHc6aIysnG NyS6kFtmaSlm4GInFbvycSVavy3NchcASd5ZNYUdJGhAYhWSsF6WdMiThDpJHXja TPhqNbR5oHzHiY1siG1f2twcr6YPJwZCjSvpjPrdBRA4+6i7Bldzwk+/Vk/qMN3S dGAzAWyMkX7QzZa4UqprIzaKTj68B7Z6/L9204/DQPagUEkfplNw9vOyP6ot3DAx a54Rds0QdPIidD6pcluqCCfZ7FfgK8PBV0Q2DyuhsbsEJukr3O29rhHeAp558+ke P7oLso3rKPfTr8iGzQj7/eK/0K291vQp -----END CERTIFICATE-----Generated at Sun May 11 05:35:06 2025 by rpki-client