$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95a5a1eb-38c8-3cd5-abcc-7390677a5bc7.roa File: 95a5a1eb-38c8-3cd5-abcc-7390677a5bc7.roa (raw, json) Hash identifier: QbY2plEh3NlNjT8BFd6k4JBrylYu3P1Z3XrLBzgS1PI= Subject key identifier: C4:C9:9B:FD:D1:C5:49:14:83:21:41:C2:2B:EE:4B:F0:DE:AD:14:0B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F88537B22E4F6CE98C900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95a5a1eb-38c8-3cd5-abcc-7390677a5bc7.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396585 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:88:53:7b:22:e4:f6:ce:98:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=4cc3b109-6644-48ac-9bb6-aab6f0de7127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7a:f1:f1:50:58:3c:9f:1c:73:04:75:f0:ab: 27:36:d4:a4:07:73:8c:3e:9f:80:7d:43:ba:8f:7b: 1b:aa:de:19:a4:33:ea:17:15:3c:af:4e:72:2b:57: 2a:1f:85:c1:ab:1b:03:d9:5d:69:fb:e2:c2:06:96: bc:27:7d:3d:2f:0c:09:5c:f2:66:95:d0:9d:f9:eb: 09:d9:b0:16:2c:f6:ad:e9:9f:bc:2a:8b:5f:11:aa: 7f:cf:4a:93:d6:ad:58:35:55:5d:24:6c:ed:05:b0: 8f:e6:b6:ee:8e:7e:a8:f2:92:3e:85:55:c6:86:0f: 7b:bf:60:bd:8c:bf:51:39:fc:a2:34:15:fc:56:31: a7:69:70:5c:04:73:b7:a6:fc:24:81:a4:73:68:41: da:10:fe:c6:af:8a:ba:a9:f1:25:14:9c:b8:b7:ee: 22:04:d2:d5:61:5f:ca:46:06:17:c1:48:a7:aa:27: e6:ae:c5:94:3e:24:b8:80:30:67:dd:f2:53:99:c8: 00:ac:81:03:09:d3:c5:8c:29:30:df:7d:97:40:83: 95:bf:72:6f:bf:28:f6:e3:02:2a:41:3e:9e:3e:a8: cc:55:d4:ae:ca:59:f1:1c:b6:7f:84:79:ab:f4:0a: 96:45:d2:25:93:c1:63:8b:e4:ed:d2:36:21:ca:62: 24:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C9:9B:FD:D1:C5:49:14:83:21:41:C2:2B:EE:4B:F0:DE:AD:14:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95a5a1eb-38c8-3cd5-abcc-7390677a5bc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:0a:21:15:cf:b9:b6:2d:b0:ee:c5:4a:e7:df:53:c1:54:3a: 08:38:17:30:cf:bf:52:ec:25:d6:85:77:39:66:4e:82:22:ee: 08:6c:a5:8c:6a:30:40:2a:21:09:4e:fe:25:8a:b1:68:dd:50: 8c:7f:9a:8f:18:e7:05:ed:38:e6:74:0b:f1:2a:bc:a0:c9:7d: e3:ec:a0:13:d4:dc:29:59:c1:48:45:19:21:a9:6d:ea:16:00: 49:1b:a1:20:c8:20:d6:7a:97:bc:9b:93:da:27:83:f4:8d:65: 00:58:e3:d7:ad:d9:e3:70:37:71:a3:d1:3a:d8:95:ea:b7:71: a5:dd:43:ee:4f:26:6b:24:a4:ab:f4:46:6a:a5:ee:fd:ac:5a: e4:d1:17:36:af:23:e1:c1:9e:19:dc:2c:f2:e2:c0:fc:b5:cd: 8f:8a:7e:07:ae:a1:28:f0:6e:c2:d7:cd:73:54:71:ad:a8:26: c0:86:b8:ca:46:67:aa:b5:3e:d1:a0:6a:70:88:77:70:06:db: 9f:37:57:20:bd:fb:5e:44:7d:71:04:01:b2:5b:c6:26:a8:f6: 99:8d:c3:47:5c:ba:05:e7:5e:13:9f:a3:25:69:cc:ed:88:94: 70:64:a7:fd:42:37:b1:4b:ae:98:5e:91:14:8f:43:e1:8d:1e: b8:70:47:c6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4hTeyLk9s6YyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NGNjM2IxMDktNjY0NC00OGFjLTliYjYtYWFiNmYwZGU3MTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHrx8VBYPJ8ccwR18KsnNtSkB3OMPp+AfUO6 j3sbqt4ZpDPqFxU8r05yK1cqH4XBqxsD2V1p++LCBpa8J309LwwJXPJmldCd+esJ 2bAWLPat6Z+8KotfEap/z0qT1q1YNVVdJGztBbCP5rbujn6o8pI+hVXGhg97v2C9 jL9ROfyiNBX8VjGnaXBcBHO3pvwkgaRzaEHaEP7Gr4q6qfElFJy4t+4iBNLVYV/K RgYXwUinqifmrsWUPiS4gDBn3fJTmcgArIEDCdPFjCkw332XQIOVv3Jvvyj24wIq QT6ePqjMVdSuylnxHLZ/hHmr9AqWRdIlk8Fji+Tt0jYhymIk8QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMTJm/3RxUkUgyFBwivuS/DerRQLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTVhNWExZWItMzhjOC0z Y2Q1LWFiY2MtNzM5MDY3N2E1YmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBjCiEVz7m2LbDuxUrn31PBVDoIOBcwz79S7CXWhXc5Zk6CIu4IbKWM ajBAKiEJTv4lirFo3VCMf5qPGOcF7TjmdAvxKrygyX3j7KAT1NwpWcFIRRkhqW3q FgBJG6EgyCDWepe8m5PaJ4P0jWUAWOPXrdnjcDdxo9E62JXqt3Gl3UPuTyZrJKSr 9EZqpe79rFrk0Rc2ryPhwZ4Z3Czy4sD8tc2Pin4HrqEo8G7C181zVHGtqCbAhrjK RmeqtT7RoGpwiHdwBtufN1cgvfteRH1xBAGyW8YmqPaZjcNHXLoF514Tn6Mlaczt iJRwZKf9QjexS66YXpEUj0PhjR64cEfG -----END CERTIFICATE-----Generated at Sun May 11 08:32:20 2025 by rpki-client