$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78be5fc9-94e1-3f41-9ae3-3a2fbe1774b1.roa File: 78be5fc9-94e1-3f41-9ae3-3a2fbe1774b1.roa (raw, json) Hash identifier: uXrbOZ3j0J+hn60ZdAfxhsg4xY+w62k3guPFFdo6LSQ= Subject key identifier: EE:5A:9C:57:33:C2:0C:6A:B8:2E:90:AD:10:B8:85:36:F6:81:2D:42 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F831309FCF9C94AF38A40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78be5fc9-94e1-3f41-9ae3-3a2fbe1774b1.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 10515 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:83:13:09:fc:f9:c9:4a:f3:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=407cd2f3-c425-4f17-88bd-e69b0ab06828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b5:49:54:d3:14:2e:b1:3d:9b:97:4c:25:29: 01:0f:b8:42:b6:6f:9c:05:0a:36:f7:29:ac:b2:a2: cf:e5:da:48:29:e3:a7:57:50:fa:60:8e:6d:70:20: 73:d8:07:25:80:e1:ab:36:d5:24:d6:3a:8e:86:99: 8c:19:4b:c9:4f:6e:ae:be:6c:0d:86:8a:a5:87:f4: 4a:70:e3:fe:7f:97:50:b9:dc:fe:12:22:c9:cb:86: 12:9d:1d:0a:23:34:c2:b4:09:68:d9:9e:09:82:b1: 7b:be:70:a5:aa:fd:8a:03:6a:18:34:c4:ed:67:63: 2f:ce:55:9e:99:7e:9a:6c:81:90:5c:19:11:6b:ff: 61:a7:b6:5e:9d:2c:e1:4c:c9:89:ab:61:e8:5d:06: 15:cc:a4:df:cc:66:db:1b:14:07:b3:26:cf:97:f4: 01:ba:b5:49:a9:2e:35:33:6d:8b:0b:24:1e:98:ad: 12:71:36:96:d8:51:5e:96:5c:55:fa:29:d5:78:54: 97:1a:0f:f5:d5:4f:33:1c:f5:51:ed:ab:a5:cd:1c: 6d:76:c9:e0:b9:84:a5:8b:6f:aa:22:38:09:7f:95: d4:ab:d8:a4:12:7c:05:28:8f:d3:b2:93:36:3c:5b: c5:96:cc:8b:b8:55:14:1c:2f:f8:57:db:bf:47:7d: 2e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5A:9C:57:33:C2:0C:6A:B8:2E:90:AD:10:B8:85:36:F6:81:2D:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78be5fc9-94e1-3f41-9ae3-3a2fbe1774b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ec:99:4e:1a:fa:bd:ef:5d:23:07:9b:af:9f:36:35:d0:96: fb:70:e6:70:a8:17:1c:8d:ba:ef:03:ab:04:dc:0c:5b:be:b2: 9d:c3:d8:dc:b1:00:a5:36:ab:2f:31:88:e6:b1:c8:f6:6b:7f: 1d:fb:33:c1:5e:83:5a:ae:3d:d0:b4:f3:e7:81:a3:d3:4c:d2: a2:46:a9:1c:19:0e:18:e5:09:a1:f7:1c:e5:c6:3a:5d:fa:a4: b1:57:29:37:5d:f9:8e:01:dc:d9:77:50:53:89:29:31:54:63: a1:ed:e5:cb:7c:0f:7a:dd:9b:6d:61:4b:a4:84:c4:1a:87:95: a8:3e:14:c0:21:b1:af:6e:1f:95:62:ed:07:d8:80:e6:6f:9b: f4:7a:2a:81:ab:eb:5a:41:12:ba:33:05:e5:34:97:46:c5:fd: 98:c3:15:4e:13:f6:f7:59:f2:79:73:86:06:d6:8d:95:b8:9e: 0f:bb:1c:9a:07:8a:95:c8:6a:2d:bd:7e:59:c6:3a:ce:d8:64: 06:f2:77:11:bc:16:bf:19:e0:7f:37:f3:2c:21:05:d1:cb:6e: 43:ff:f9:bb:01:54:01:56:d6:8d:08:17:b6:65:51:27:65:b3: f6:8f:5d:bf:8c:9c:ad:f3:4d:08:eb:cc:40:a2:09:52:d1:1f: f0:fe:e7:b9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4MTCfz5yUrzikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NDA3Y2QyZjMtYzQyNS00ZjE3LTg4YmQtZTY5YjBhYjA2ODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7VJVNMULrE9m5dMJSkBD7hCtm+cBQo29yms sqLP5dpIKeOnV1D6YI5tcCBz2AclgOGrNtUk1jqOhpmMGUvJT26uvmwNhoqlh/RK cOP+f5dQudz+EiLJy4YSnR0KIzTCtAlo2Z4JgrF7vnClqv2KA2oYNMTtZ2MvzlWe mX6abIGQXBkRa/9hp7ZenSzhTMmJq2HoXQYVzKTfzGbbGxQHsybPl/QBurVJqS41 M22LCyQemK0ScTaW2FFellxV+inVeFSXGg/11U8zHPVR7aulzRxtdsnguYSli2+q IjgJf5XUq9ikEnwFKI/TspM2PFvFlsyLuFUUHC/4V9u/R30uewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO5anFczwgxquC6QrRC4hTb2gS1CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzhiZTVmYzktOTRlMS0z ZjQxLTlhZTMtM2EyZmJlMTc3NGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCB7JlOGvq9710jB5uvnzY10Jb7cOZwqBccjbrvA6sE3AxbvrKdw9jc sQClNqsvMYjmscj2a38d+zPBXoNarj3QtPPngaPTTNKiRqkcGQ4Y5Qmh9xzlxjpd +qSxVyk3XfmOAdzZd1BTiSkxVGOh7eXLfA963ZttYUukhMQah5WoPhTAIbGvbh+V Yu0H2IDmb5v0eiqBq+taQRK6MwXlNJdGxf2YwxVOE/b3WfJ5c4YG1o2VuJ4Puxya B4qVyGotvX5ZxjrO2GQG8ncRvBa/GeB/N/MsIQXRy25D//m7AVQBVtaNCBe2ZVEn ZbP2j12/jJyt800I68xAoglS0R/w/ue5 -----END CERTIFICATE-----Generated at Mon May 12 02:03:18 2025 by rpki-client