$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9fbb6c1-a6be-3366-abe7-c752cb2ec528.roa File: a9fbb6c1-a6be-3366-abe7-c752cb2ec528.roa (raw, json) Hash identifier: Lh+QhyW94bmqGIBmd+P1gMVVpngJvJD64iSssO5Bsqo= Subject key identifier: B1:19:47:01:3B:E8:FE:B4:0E:5C:E5:E5:BC:21:04:0D:C4:F2:11:4C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8A167611ADB861E4FE60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9fbb6c1-a6be-3366-abe7-c752cb2ec528.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396590 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8a:16:76:11:ad:b8:61:e4:fe:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=81b62018-0685-4a7a-8171-63f2038b3906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:69:15:d4:c3:05:20:fb:14:c3:24:aa:02:5b: 57:7e:90:71:35:3f:2e:0e:15:95:14:51:88:a4:da: cc:1e:6f:4a:f7:fa:c3:d1:70:93:09:e7:3c:0e:81: a7:b4:e0:88:f8:fc:cf:e8:5b:ba:5e:19:f9:b8:0a: d6:d6:c6:71:d8:b8:b9:34:26:ad:1b:db:a0:13:4e: c6:d2:1b:ed:26:5e:99:ed:96:94:85:88:31:eb:69: 35:7d:a6:9e:ba:60:55:17:b9:8b:88:1a:d1:12:45: df:59:ff:59:12:1e:0e:30:2a:26:52:40:c2:f3:8a: ea:bb:b0:c1:72:bb:00:25:90:d2:84:e6:54:71:b4: e9:15:f4:77:05:0a:b9:90:af:3d:88:d4:4b:4f:80: 97:0a:ef:62:a3:f2:89:c2:7a:50:3c:7f:3b:61:89: c3:99:2b:85:d8:f6:4b:3c:e6:83:6c:17:bb:a1:d6: 8b:a5:fb:9f:81:18:84:96:60:44:f0:7c:22:24:73: 96:58:4a:c9:b5:a0:a8:5e:b7:55:9f:0e:9c:d1:f5: 81:8b:92:af:53:b9:d5:20:b1:34:21:9e:19:dc:2f: 30:18:18:29:da:91:65:e8:33:e1:82:61:d5:37:39: 36:4e:3b:55:3b:82:e1:9d:09:00:54:8c:87:81:f2: 74:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:19:47:01:3B:E8:FE:B4:0E:5C:E5:E5:BC:21:04:0D:C4:F2:11:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9fbb6c1-a6be-3366-abe7-c752cb2ec528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:31:67:c8:68:ee:cb:b2:d1:2e:fb:d4:9d:81:69:06:14:80: 4b:3c:bf:b8:f2:f2:fa:09:eb:57:43:e1:8d:28:76:14:f4:e2: 61:8e:5d:58:fe:7c:58:91:94:17:09:cd:57:ee:2f:d7:6a:29: bf:de:02:39:0f:22:cc:77:d5:91:1f:61:30:7c:9a:32:62:6b: 0a:68:b3:ef:e0:9f:85:34:39:34:72:4d:09:33:f3:b3:eb:67: d9:66:58:5b:ec:06:7e:c5:ae:6c:9b:89:07:ae:a3:cb:1a:a2: 1f:00:7a:24:c2:34:05:f4:21:d6:e9:1a:de:78:35:2d:78:c0: 10:09:21:98:9b:d6:f8:6a:12:50:e7:9f:8b:82:f7:a2:6c:6a: f3:09:83:b2:59:20:33:9d:31:a2:6d:91:c2:c9:02:2d:80:8c: 1f:6e:48:c4:cc:15:25:dd:6c:36:f8:f9:4d:31:5e:ed:1f:33: 67:7c:90:39:6d:f6:3c:f3:21:3c:04:07:ae:ad:99:ad:91:15: fb:e4:dc:d7:8b:5f:5b:86:b0:3d:d6:40:7b:01:11:e0:0b:6f: 20:af:2f:0d:bd:94:8b:07:3c:e6:6a:81:cf:4b:22:94:4a:eb: e4:26:6e:f3:66:38:d8:27:d7:28:60:18:41:14:f3:37:fb:f1: 2f:56:31:63 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4oWdhGtuGHk/mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ODFiNjIwMTgtMDY4NS00YTdhLTgxNzEtNjNmMjAzOGIzOTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmkV1MMFIPsUwySqAltXfpBxNT8uDhWVFFGI pNrMHm9K9/rD0XCTCec8DoGntOCI+PzP6Fu6Xhn5uArW1sZx2Li5NCatG9ugE07G 0hvtJl6Z7ZaUhYgx62k1faaeumBVF7mLiBrREkXfWf9ZEh4OMComUkDC84rqu7DB crsAJZDShOZUcbTpFfR3BQq5kK89iNRLT4CXCu9io/KJwnpQPH87YYnDmSuF2PZL POaDbBe7odaLpfufgRiElmBE8HwiJHOWWErJtaCoXrdVnw6c0fWBi5KvU7nVILE0 IZ4Z3C8wGBgp2pFl6DPhgmHVNzk2TjtVO4LhnQkAVIyHgfJ0zwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLEZRwE76P60Dlzl5bwhBA3E8hFMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTlmYmI2YzEtYTZiZS0z MzY2LWFiZTctYzc1MmNiMmVjNTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJMWfIaO7LstEu+9SdgWkGFIBLPL+48vL6CetXQ+GNKHYU9OJhjl1Y /nxYkZQXCc1X7i/Xaim/3gI5DyLMd9WRH2EwfJoyYmsKaLPv4J+FNDk0ck0JM/Oz 62fZZlhb7AZ+xa5sm4kHrqPLGqIfAHokwjQF9CHW6RreeDUteMAQCSGYm9b4ahJQ 55+LgveibGrzCYOyWSAznTGibZHCyQItgIwfbkjEzBUl3Ww2+PlNMV7tHzNnfJA5 bfY88yE8BAeurZmtkRX75NzXi19bhrA91kB7ARHgC28gry8NvZSLBzzmaoHPSyKU SuvkJm7zZjjYJ9coYBhBFPM3+/EvVjFj -----END CERTIFICATE-----Generated at Sun May 11 05:29:39 2025 by rpki-client