$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9641d997-69b0-376f-a225-6c0526f238da.roa File: 9641d997-69b0-376f-a225-6c0526f238da.roa (raw, json) Hash identifier: 2COP7q9CYqdgoj/KjSDZC4F4qlV9gvZki8j5LCIb108= Subject key identifier: CB:65:17:40:E1:B9:32:E6:EB:DA:6E:46:34:85:5B:EA:9A:55:13:46 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F88DC9AA651B1D2435380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9641d997-69b0-376f-a225-6c0526f238da.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396546 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:88:dc:9a:a6:51:b1:d2:43:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=f7b3a2c7-7a47-4cfb-bbfa-164becfe2faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:70:fc:78:87:bc:a6:d0:30:3a:03:f9:a0:f5: 5b:ea:99:0c:df:3c:68:b6:4a:08:17:da:06:3c:47: e9:a9:2d:eb:f6:c5:db:be:26:80:96:42:da:0a:2e: 5b:8a:8d:d5:13:17:03:a3:8c:73:09:2e:5c:be:d6: ee:bd:4a:09:4d:28:c2:f6:3f:7a:94:fc:59:48:19: a8:e4:52:e6:30:c5:4e:a3:06:5e:62:41:82:de:af: 09:eb:af:a7:82:77:fc:01:b4:ec:53:8b:95:d5:b2: ab:fc:2d:09:31:4f:35:8e:e1:29:b9:eb:51:9c:b5: b0:08:c5:98:ce:34:ac:86:58:38:d0:a2:73:e7:fb: a0:39:55:e0:e7:82:30:b7:d5:52:e1:53:50:dd:87: 49:ee:35:b2:0b:87:ec:e6:79:81:18:09:55:30:b8: ca:dc:f1:de:c8:13:97:36:45:b9:e3:6d:79:34:26: 49:ba:d5:0e:2f:18:ff:6d:1c:f6:b6:1c:5a:95:3f: e2:28:69:dc:a0:d7:d5:95:62:6f:62:63:1c:e5:34: d2:0a:d4:d8:73:3c:93:5d:ca:63:f5:37:8d:09:1a: db:1f:8d:89:31:8b:66:f2:f6:31:70:5e:3b:b1:52: 7e:84:71:ba:12:fb:fb:cc:0a:cb:0b:8d:40:7a:de: bb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:65:17:40:E1:B9:32:E6:EB:DA:6E:46:34:85:5B:EA:9A:55:13:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9641d997-69b0-376f-a225-6c0526f238da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:3d:f4:b9:f3:6d:90:11:05:3b:36:d1:b1:cf:54:50:07:fc: 20:d7:74:d5:8f:b2:71:37:46:a9:e1:b1:8e:49:ef:64:fc:bd: 79:24:64:d5:e4:99:9e:bd:91:23:63:99:14:04:7f:d4:96:ec: 32:af:94:62:c5:cf:4f:34:fb:95:30:d3:60:02:92:17:1b:29: bc:3e:39:89:62:40:be:7d:e5:9d:5b:29:52:c9:8c:64:17:19: 1f:3f:eb:de:7c:09:a8:ee:05:be:47:39:95:4c:ed:06:ea:4b: 94:9e:76:b4:b2:dd:2a:e2:7a:4b:17:07:14:93:ad:56:65:0b: 2c:53:1c:6d:b0:95:53:22:54:a0:ff:a5:57:3a:00:d1:1a:71: da:2a:12:91:4f:08:2d:c4:81:41:27:39:18:94:b5:44:ed:0f: b7:3b:6c:11:f2:24:ef:69:5c:61:ac:11:99:18:9d:32:af:f1: 67:6f:3b:a8:cd:52:c6:29:52:8f:90:ec:55:84:45:b1:ea:43: 63:ae:7c:71:24:12:94:e6:e7:d1:8b:39:ac:ce:c1:40:59:e0: e7:f1:7a:0d:27:c4:17:aa:f3:bc:2e:cf:98:f8:a0:dd:28:03: 49:3e:75:f1:0b:36:34:25:40:57:ea:40:08:71:45:5c:0d:3c: d4:8a:a8:85 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4jcmqZRsdJDU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZjdiM2EyYzctN2E0Ny00Y2ZiLWJiZmEtMTY0YmVjZmUyZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXD8eIe8ptAwOgP5oPVb6pkM3zxotkoIF9oG PEfpqS3r9sXbviaAlkLaCi5bio3VExcDo4xzCS5cvtbuvUoJTSjC9j96lPxZSBmo 5FLmMMVOowZeYkGC3q8J66+ngnf8AbTsU4uV1bKr/C0JMU81juEpuetRnLWwCMWY zjSshlg40KJz5/ugOVXg54Iwt9VS4VNQ3YdJ7jWyC4fs5nmBGAlVMLjK3PHeyBOX NkW54215NCZJutUOLxj/bRz2thxalT/iKGncoNfVlWJvYmMc5TTSCtTYczyTXcpj 9TeNCRrbH42JMYtm8vYxcF47sVJ+hHG6Evv7zArLC41Aet67SwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMtlF0DhuTLm69puRjSFW+qaVRNGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTY0MWQ5OTctNjliMC0z NzZmLWEyMjUtNmMwNTI2ZjIzOGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBzPfS5822QEQU7NtGxz1RQB/wg13TVj7JxN0ap4bGOSe9k/L15JGTV 5JmevZEjY5kUBH/Uluwyr5Rixc9PNPuVMNNgApIXGym8PjmJYkC+feWdWylSyYxk FxkfP+vefAmo7gW+RzmVTO0G6kuUnna0st0q4npLFwcUk61WZQssUxxtsJVTIlSg /6VXOgDRGnHaKhKRTwgtxIFBJzkYlLVE7Q+3O2wR8iTvaVxhrBGZGJ0yr/Fnbzuo zVLGKVKPkOxVhEWx6kNjrnxxJBKU5ufRizmszsFAWeDn8XoNJ8QXqvO8Ls+Y+KDd KANJPnXxCzY0JUBX6kAIcUVcDTzUiqiF -----END CERTIFICATE-----Generated at Sun May 11 08:47:46 2025 by rpki-client