$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/82670539-bfff-3308-b662-a1acd7aa0b03.roa File: 82670539-bfff-3308-b662-a1acd7aa0b03.roa (raw, json) Hash identifier: OHhwuvcrXAJtjSgt3S6UIZOqGlZwKQ2OG3CH8LHpaZk= Subject key identifier: CD:EE:87:87:D7:CE:C6:CF:1B:17:F6:4E:80:E7:34:AF:8C:FC:85:65 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F82DDE973959BDA306580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/82670539-bfff-3308-b662-a1acd7aa0b03.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396549 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:82:dd:e9:73:95:9b:da:30:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=b8ea00c2-b2f7-43bd-927d-1f771098f408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ae:5a:71:7d:c0:b7:39:6e:3f:60:fe:d0:c0: 07:4a:90:0b:fa:23:8f:43:67:56:41:58:30:7a:25: 06:a6:0b:99:5b:15:d6:5c:70:3c:7e:7f:6a:92:3f: 3d:f7:82:c7:1d:bd:eb:63:37:f4:0c:42:0c:8e:21: eb:55:f9:a8:8d:aa:a7:4f:d5:f3:11:5a:12:c8:60: 99:dc:f3:39:d5:0b:6c:48:7c:7d:b8:27:2d:ff:4f: 2a:f0:9c:4d:a1:79:e2:1b:d7:d3:92:c7:49:fc:82: 4d:b3:86:a6:9b:02:9a:ef:67:b4:ed:07:fd:0b:08: a1:52:23:9b:4f:80:af:4f:92:a4:fa:83:04:da:bb: e9:22:77:71:e2:e7:53:04:0a:4a:eb:79:94:19:bb: e1:38:a2:7d:d2:33:07:dc:2c:8b:64:fa:4d:9b:55: 54:fc:5b:56:01:0f:ae:c7:af:35:b9:c9:80:d0:16: 41:2f:00:38:38:d5:88:53:8e:20:ef:a7:07:2f:33: cb:b8:65:7c:01:78:29:ab:a3:ed:2b:e7:eb:29:14: f2:1e:48:e5:ca:fc:c9:3b:17:fb:07:63:ac:59:af: d2:8c:22:0c:fa:05:3b:9f:bf:28:0e:41:8c:73:a3: 78:94:b7:f4:e0:8a:b1:19:09:7d:b6:be:a9:63:42: 43:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EE:87:87:D7:CE:C6:CF:1B:17:F6:4E:80:E7:34:AF:8C:FC:85:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/82670539-bfff-3308-b662-a1acd7aa0b03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:f2:7a:11:df:5e:87:c5:4f:a2:8f:96:00:e5:bf:5a:27:2e: c4:fe:ed:4e:0f:8f:80:b5:58:2d:c2:52:3a:a3:b1:b4:d4:72: 99:70:a4:72:de:8f:38:33:13:b9:a0:cc:74:9f:07:b4:e9:ac: 9c:42:44:e3:0c:3c:ee:c6:a3:01:c2:60:97:9e:56:ac:69:aa: 47:99:36:3b:78:f1:ef:a8:ec:0d:fd:48:3f:b3:fc:47:45:47: 1d:74:21:37:94:ab:02:ac:2d:9b:a5:15:69:9b:17:68:43:34: 34:34:1e:bb:a7:a1:c2:f9:f6:22:c5:36:ac:26:40:aa:73:d4: 7f:bd:a7:66:2f:a6:be:ef:74:7f:16:39:a2:19:9b:7a:60:3a: 39:b3:2e:19:ac:a5:95:50:fa:62:3e:08:db:ba:a7:d4:56:c7: b7:ee:b2:fe:ea:11:af:9a:ef:ad:da:b1:6b:a3:40:62:bc:dd: f2:e3:61:d1:87:d9:ef:0f:f3:55:db:a2:8a:15:ab:48:78:af: 94:9a:9d:a0:81:87:ae:b1:86:a6:cf:c1:ab:9b:d1:a9:ff:68: 93:a7:70:56:6e:cb:2f:02:f8:c4:38:87:f3:65:cd:9a:53:24: 49:15:d2:f8:32:04:0e:83:fd:d2:b7:50:21:bb:c9:d8:66:15: d6:3e:74:3f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4Ld6XOVm9owZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YjhlYTAwYzItYjJmNy00M2JkLTkyN2QtMWY3NzEwOThmNDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu65acX3AtzluP2D+0MAHSpAL+iOPQ2dWQVgw eiUGpguZWxXWXHA8fn9qkj8994LHHb3rYzf0DEIMjiHrVfmojaqnT9XzEVoSyGCZ 3PM51QtsSHx9uCct/08q8JxNoXniG9fTksdJ/IJNs4ammwKa72e07Qf9CwihUiOb T4CvT5Kk+oME2rvpIndx4udTBApK63mUGbvhOKJ90jMH3CyLZPpNm1VU/FtWAQ+u x681ucmA0BZBLwA4ONWIU44g76cHLzPLuGV8AXgpq6PtK+frKRTyHkjlyvzJOxf7 B2OsWa/SjCIM+gU7n78oDkGMc6N4lLf04IqxGQl9tr6pY0JDQwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM3uh4fXzsbPGxf2ToDnNK+M/IVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODI2NzA1MzktYmZmZi0z MzA4LWI2NjItYTFhY2Q3YWEwYjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAE8noR316HxU+ij5YA5b9aJy7E/u1OD4+AtVgtwlI6o7G01HKZcKRy 3o84MxO5oMx0nwe06aycQkTjDDzuxqMBwmCXnlasaapHmTY7ePHvqOwN/Ug/s/xH RUcddCE3lKsCrC2bpRVpmxdoQzQ0NB67p6HC+fYixTasJkCqc9R/vadmL6a+73R/ FjmiGZt6YDo5sy4ZrKWVUPpiPgjbuqfUVse37rL+6hGvmu+t2rFro0BivN3y42HR h9nvD/NV26KKFatIeK+Ump2ggYeusYamz8Grm9Gp/2iTp3BWbssvAvjEOIfzZc2a UyRJFdL4MgQOg/3St1Ahu8nYZhXWPnQ/ -----END CERTIFICATE-----Generated at Sun May 11 08:37:41 2025 by rpki-client