$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a82095ef-4e8d-3fc4-8ea7-95790abb5a93.roa File: a82095ef-4e8d-3fc4-8ea7-95790abb5a93.roa (raw, json) Hash identifier: fuKGXT+evSfsLwgIqCgAlVymd64tjrx8JngxRw+xqkI= Subject key identifier: 15:E6:8B:AA:14:46:76:5F:85:B2:3C:0D:A4:26:30:5D:EA:3E:E3:B7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F83EFB1327BE697541E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a82095ef-4e8d-3fc4-8ea7-95790abb5a93.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 36619 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:83:ef:b1:32:7b:e6:97:54:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=db92200c-88d9-4a3f-a44f-4973c5b12bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cd:47:42:c6:8e:37:1c:83:a0:c0:81:d6:c4: a8:51:9a:06:ab:c3:df:e0:a1:0b:8c:8a:1b:1c:23: 6b:e7:15:a9:9b:e7:7b:89:3c:62:2f:67:9a:75:7a: 7c:d6:3b:91:9c:30:d4:c7:e4:10:cb:25:fd:cc:36: f1:4a:dd:c7:9b:71:c9:05:3e:05:8a:8b:0f:56:b5: de:63:83:24:ad:33:84:0e:8b:e6:3a:9f:92:66:eb: 06:1e:b4:8f:ad:6c:53:23:d8:29:b0:0a:60:a8:85: 02:5a:3f:e7:dc:f1:15:d1:24:d5:01:f9:93:8f:64: 7a:b0:66:2c:ac:ab:07:a3:07:dc:d6:7b:78:7b:27: 68:4d:21:f2:f8:e9:e1:7e:87:36:e5:21:f6:05:80: 2c:e3:db:be:8f:ac:79:87:1e:88:7e:04:c3:13:c3: 05:49:9b:22:ba:a5:d0:6a:25:5d:e4:33:3a:fb:3d: ef:5b:8c:6c:5c:8b:90:3b:7c:77:48:b6:34:63:cb: 07:5a:3c:00:50:9f:ad:47:ac:f8:8b:02:e0:31:e4: c6:51:9b:18:dd:15:58:22:b2:84:16:72:9e:18:36: a2:b1:fe:bf:9a:62:a4:55:ae:f5:ef:a0:97:51:5e: 56:a2:a8:61:2f:09:65:ec:58:71:fd:cc:2c:a0:89: ed:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E6:8B:AA:14:46:76:5F:85:B2:3C:0D:A4:26:30:5D:EA:3E:E3:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a82095ef-4e8d-3fc4-8ea7-95790abb5a93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ee:91:38:2b:0d:18:6c:80:d2:c3:96:82:53:b3:6e:e0:46: c4:a2:05:21:ad:db:4c:1e:b9:ba:06:55:13:e7:43:ef:1e:33: 9a:b5:72:52:52:5a:4a:63:a1:de:48:ea:27:fc:33:a6:59:02: 74:da:16:c5:82:74:2f:8f:6c:a0:a9:41:cc:7f:f1:03:1b:1c: 30:39:8e:3f:a4:31:6d:7b:6b:5b:dd:a8:ae:25:0c:99:5d:54: 8e:08:ab:6f:b5:ff:2f:96:96:a1:7b:1a:8b:4e:65:b3:a9:b2: c5:ab:5a:ff:2c:0f:88:d6:93:f9:23:5b:23:12:87:a3:f6:66: 11:d3:82:a3:b1:6e:20:6e:7a:58:f9:38:bb:bc:a5:7b:95:b2: bf:41:63:00:c7:06:42:8e:55:cc:5a:91:18:52:f9:44:b5:90: 70:b9:af:c4:82:11:ab:c8:f7:05:1c:88:1f:78:8a:ff:ee:c7: 70:fa:70:bf:e2:19:6e:14:80:42:96:51:9b:05:1c:43:27:00: c1:9e:c6:fe:30:56:32:bd:5c:41:ab:b0:de:44:24:d3:26:af: a3:13:b7:50:6f:18:92:f2:8a:ad:e1:ec:85:c7:7f:35:f1:ed: b5:0a:2c:26:0e:1e:8e:fe:da:77:cd:da:13:6d:07:ae:e3:75: af:77:af:24 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4PvsTJ75pdUHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZGI5MjIwMGMtODhkOS00YTNmLWE0NGYtNDk3M2M1YjEyYmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc1HQsaONxyDoMCB1sSoUZoGq8Pf4KELjIob HCNr5xWpm+d7iTxiL2eadXp81juRnDDUx+QQyyX9zDbxSt3Hm3HJBT4FiosPVrXe Y4MkrTOEDovmOp+SZusGHrSPrWxTI9gpsApgqIUCWj/n3PEV0STVAfmTj2R6sGYs rKsHowfc1nt4eydoTSHy+Onhfoc25SH2BYAs49u+j6x5hx6IfgTDE8MFSZsiuqXQ aiVd5DM6+z3vW4xsXIuQO3x3SLY0Y8sHWjwAUJ+tR6z4iwLgMeTGUZsY3RVYIrKE FnKeGDaisf6/mmKkVa7176CXUV5WoqhhLwll7Fhx/cwsoIntGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBXmi6oURnZfhbI8DaQmMF3qPuO3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTgyMDk1ZWYtNGU4ZC0z ZmM0LThlYTctOTU3OTBhYmI1YTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAb7pE4Kw0YbIDSw5aCU7Nu4EbEogUhrdtMHrm6BlUT50PvHjOatXJS UlpKY6HeSOon/DOmWQJ02hbFgnQvj2ygqUHMf/EDGxwwOY4/pDFte2tb3aiuJQyZ XVSOCKtvtf8vlpahexqLTmWzqbLFq1r/LA+I1pP5I1sjEoej9mYR04KjsW4gbnpY +Ti7vKV7lbK/QWMAxwZCjlXMWpEYUvlEtZBwua/EghGryPcFHIgfeIr/7sdw+nC/ 4hluFIBCllGbBRxDJwDBnsb+MFYyvVxBq7DeRCTTJq+jE7dQbxiS8oqt4eyFx381 8e21CiwmDh6O/tp3zdoTbQeu43Wvd68k -----END CERTIFICATE-----Generated at Sun May 11 05:55:50 2025 by rpki-client