$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87fb8355-5f00-3908-8247-23aa3f3a16b5.roa File: 87fb8355-5f00-3908-8247-23aa3f3a16b5.roa (raw, json) Hash identifier: IO92Mf/5GeFfzG8vLzuzaJC6gtk9JhW4dZ8ODTPcCVY= Subject key identifier: 0C:CF:4E:7E:25:5A:D6:76:A3:27:E9:E7:D8:7A:6B:03:98:5C:38:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F848F9CDA507AFDC3AB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87fb8355-5f00-3908-8247-23aa3f3a16b5.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 397200 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:84:8f:9c:da:50:7a:fd:c3:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=fb4afc84-d422-4e56-b126-6fbc8f36ef98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6e:55:fa:31:7a:ba:c2:b7:be:cf:9c:99:57: 3a:b3:c2:58:97:7a:85:38:84:e0:d6:ed:63:42:b4: 67:2a:58:db:91:0d:2d:12:59:1a:02:0b:e2:f1:c9: 9d:67:2c:ff:fd:b6:15:4a:16:48:54:7a:bf:e7:67: ae:e0:06:37:e1:a6:41:9c:66:25:dc:07:23:83:19: 2e:dc:53:4c:64:20:dc:e5:93:6b:6c:d5:e6:ce:41: 3e:99:94:d6:1a:ab:77:be:91:c0:73:94:09:6b:77: a7:99:0d:7f:4a:6c:82:37:27:4c:3a:26:6a:97:d2: 71:78:ce:3a:a1:29:f1:ac:df:ce:f5:80:28:3a:81: a6:ae:ef:11:16:de:6d:5a:6f:0f:ff:60:71:f4:ce: d9:d5:16:c2:39:44:f0:dc:a5:d5:e2:ed:2f:e8:e0: d2:45:49:bb:7d:c4:51:17:d1:a5:70:68:b5:5c:10: 92:af:a7:fd:c1:98:db:9d:49:d3:f2:07:8c:36:8d: 5c:fd:e1:fe:9d:9c:66:26:17:fa:64:17:ac:52:2c: 5a:ad:10:d8:fb:a1:bd:8e:d5:ca:0a:3d:3f:fc:4c: 30:a7:59:39:0a:ef:79:32:c4:19:99:a0:41:b2:b3: a8:62:3a:2e:b3:69:14:60:13:8e:bd:0e:f2:7f:c8: 9b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CF:4E:7E:25:5A:D6:76:A3:27:E9:E7:D8:7A:6B:03:98:5C:38:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87fb8355-5f00-3908-8247-23aa3f3a16b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:bc:61:79:2a:90:24:8f:a6:52:39:e3:5d:cb:a0:2d:dd:86: 0c:99:3e:e7:1b:d8:3d:1d:40:e8:34:d2:0f:9b:f9:62:17:f5: 61:15:90:e8:47:c2:c6:8f:67:02:19:5f:3d:32:13:f8:18:17: 40:75:f2:97:ef:90:e1:ad:09:1e:f6:30:8c:16:b6:31:79:71: c9:40:45:b4:82:61:93:4a:f6:93:c6:45:9b:dd:b2:30:af:26: 77:83:b0:af:c3:21:0c:2d:89:c2:9a:93:f9:73:dd:f5:fe:16: dc:d5:d2:d8:7c:17:24:92:a6:dc:39:33:37:f6:f1:f3:de:13: 0f:b5:8c:28:7d:8a:35:40:d5:df:43:58:b4:52:1c:e1:c2:7e: 02:51:99:ad:62:83:5f:1c:fc:9d:a5:42:94:ec:e5:24:a0:b6: 11:9c:55:6b:01:94:ce:39:56:66:3d:a1:a2:d3:16:4e:f4:1a: 20:7d:74:dd:30:fb:53:3b:48:30:9b:e5:30:6c:62:be:b3:20: 10:fb:88:36:fd:27:f1:70:83:37:d7:08:f3:df:7c:80:c4:7e: 3d:f8:e3:b6:df:fe:54:e7:67:26:9b:c0:aa:03:0c:61:7c:83: d1:da:e4:9a:33:db:75:2e:f6:31:53:28:b1:d5:a5:0f:68:78: 9b:b8:ad:6f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4SPnNpQev3DqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZmI0YWZjODQtZDQyMi00ZTU2LWIxMjYtNmZiYzhmMzZlZjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5W5V+jF6usK3vs+cmVc6s8JYl3qFOITg1u1j QrRnKljbkQ0tElkaAgvi8cmdZyz//bYVShZIVHq/52eu4AY34aZBnGYl3Acjgxku 3FNMZCDc5ZNrbNXmzkE+mZTWGqt3vpHAc5QJa3enmQ1/SmyCNydMOiZql9JxeM46 oSnxrN/O9YAoOoGmru8RFt5tWm8P/2Bx9M7Z1RbCOUTw3KXV4u0v6ODSRUm7fcRR F9GlcGi1XBCSr6f9wZjbnUnT8geMNo1c/eH+nZxmJhf6ZBesUixarRDY+6G9jtXK Cj0//Ewwp1k5Cu95MsQZmaBBsrOoYjous2kUYBOOvQ7yf8ib7QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAzPTn4lWtZ2oyfp59h6awOYXDhxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODdmYjgzNTUtNWYwMC0z OTA4LTgyNDctMjNhYTNmM2ExNmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCJvGF5KpAkj6ZSOeNdy6At3YYMmT7nG9g9HUDoNNIPm/liF/VhFZDo R8LGj2cCGV89MhP4GBdAdfKX75DhrQke9jCMFrYxeXHJQEW0gmGTSvaTxkWb3bIw ryZ3g7CvwyEMLYnCmpP5c931/hbc1dLYfBckkqbcOTM39vHz3hMPtYwofYo1QNXf Q1i0Uhzhwn4CUZmtYoNfHPydpUKU7OUkoLYRnFVrAZTOOVZmPaGi0xZO9BogfXTd MPtTO0gwm+UwbGK+syAQ+4g2/SfxcIM31wjz33yAxH49+OO23/5U52cmm8CqAwxh fIPR2uSaM9t1LvYxUyix1aUPaHibuK1v -----END CERTIFICATE-----Generated at Sun May 11 06:22:36 2025 by rpki-client