$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa5da138-9d26-3e7e-94b6-ab99c4387134.roa File: aa5da138-9d26-3e7e-94b6-ab99c4387134.roa (raw, json) Hash identifier: 1/VBmwYd9ukC//kNR0EuYBUTaUWF2iAAt8wHOoJef58= Subject key identifier: A3:FB:49:83:23:1E:A7:54:CA:B7:30:AD:E2:FC:FB:02:D8:48:0D:BF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F869891D4A448AAE8CD00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa5da138-9d26-3e7e-94b6-ab99c4387134.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396542 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:86:98:91:d4:a4:48:aa:e8:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=1cc1e370-6ed5-497f-a995-4d7ebc15ca69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4a:67:4d:0a:6e:cf:1e:de:1d:7b:c8:18:7f: 3a:66:0f:11:b3:11:a3:53:ad:ce:82:fb:a0:1d:6c: 9c:c2:89:74:ec:d1:08:71:0e:63:dd:9c:21:ab:93: a7:4a:dc:0c:1f:dc:78:b1:cf:5f:c5:5c:32:54:35: 1d:b7:29:c0:ad:c9:cb:fb:bc:01:4b:ba:6c:59:00: 19:e1:df:d2:96:cf:b3:e1:7d:0f:3c:e3:a1:1c:91: 20:91:df:61:59:3c:d0:e1:de:58:fa:cd:ae:81:9e: 7d:c1:5e:5b:35:d2:10:b1:fe:31:16:27:19:84:a3: 72:ab:bb:d8:d4:e2:6a:d6:8c:85:67:d0:8c:01:16: d0:6a:3c:d3:78:07:53:e3:28:45:9d:7c:f2:08:b3: 72:89:13:31:dd:8a:7e:19:9b:67:e6:75:4b:70:16: cd:ef:4a:a6:9e:b8:4e:3e:dc:67:91:8c:26:3c:fb: 81:23:2e:7d:a2:7d:c3:1f:38:6e:57:7c:9e:6e:2d: 6c:10:8e:44:de:56:fd:59:ff:7c:75:34:ff:5b:28: 2b:75:0a:b5:f0:ce:63:c0:ab:2d:56:77:b6:cd:9f: 99:f1:b9:32:86:97:61:f9:8f:aa:b7:c6:a4:9b:fe: 98:43:98:dc:09:64:46:07:81:fe:f6:51:d8:a2:32: db:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FB:49:83:23:1E:A7:54:CA:B7:30:AD:E2:FC:FB:02:D8:48:0D:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa5da138-9d26-3e7e-94b6-ab99c4387134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:37:1b:50:9d:e0:7a:bb:5e:a1:d2:22:dd:f7:6c:7a:cc:a9: 36:f6:53:65:a3:d6:31:b2:b5:1f:d8:09:29:4e:68:5d:36:89: fb:23:88:3e:04:ba:8a:6e:99:0c:45:af:f6:0d:5a:e4:60:ab: 3f:65:dc:2a:60:e4:32:a4:13:ab:67:9f:e7:77:f4:61:9f:e9: 20:a1:31:cd:9e:77:ea:1b:f5:16:46:5e:f3:dc:38:86:09:97: da:76:9e:57:a7:21:57:c0:e6:6c:59:33:ec:c4:10:71:62:d9: 63:e4:5f:45:0c:88:cd:12:9e:6e:dd:fb:c0:59:82:1d:75:ac: ec:49:2c:77:2f:92:77:5f:18:42:6b:33:aa:69:7a:c5:55:e9: bc:35:a3:c1:45:64:b3:26:78:34:6e:c4:2d:b5:64:8c:89:14: 61:46:8f:cc:73:9b:0e:33:68:70:f9:ca:7e:39:3b:49:d7:ea: 2b:c4:94:0c:77:74:6e:1c:be:91:f8:df:3f:67:9b:75:d1:5b: ef:b7:6c:a7:b9:23:28:22:14:ac:14:63:82:0d:fb:3e:f6:c2: 57:a6:8b:15:b4:50:32:8c:61:d0:18:d7:21:54:63:1e:5f:30: b7:5b:b6:ef:9e:49:a4:42:44:28:fb:54:bb:26:b0:f2:50:48: d0:57:a3:d9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4aYkdSkSKrozQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MWNjMWUzNzAtNmVkNS00OTdmLWE5OTUtNGQ3ZWJjMTVjYTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUpnTQpuzx7eHXvIGH86Zg8RsxGjU63Ogvug HWycwol07NEIcQ5j3Zwhq5OnStwMH9x4sc9fxVwyVDUdtynArcnL+7wBS7psWQAZ 4d/Sls+z4X0PPOOhHJEgkd9hWTzQ4d5Y+s2ugZ59wV5bNdIQsf4xFicZhKNyq7vY 1OJq1oyFZ9CMARbQajzTeAdT4yhFnXzyCLNyiRMx3Yp+GZtn5nVLcBbN70qmnrhO PtxnkYwmPPuBIy59on3DHzhuV3yebi1sEI5E3lb9Wf98dTT/WygrdQq18M5jwKst Vne2zZ+Z8bkyhpdh+Y+qt8akm/6YQ5jcCWRGB4H+9lHYojLbMwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKP7SYMjHqdUyrcwreL8+wLYSA2/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWE1ZGExMzgtOWQyNi0z ZTdlLTk0YjYtYWI5OWM0Mzg3MTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAxNxtQneB6u16h0iLd92x6zKk29lNlo9YxsrUf2AkpTmhdNon7I4g+ BLqKbpkMRa/2DVrkYKs/ZdwqYOQypBOrZ5/nd/Rhn+kgoTHNnnfqG/UWRl7z3DiG CZfadp5XpyFXwOZsWTPsxBBxYtlj5F9FDIjNEp5u3fvAWYIddazsSSx3L5J3XxhC azOqaXrFVem8NaPBRWSzJng0bsQttWSMiRRhRo/Mc5sOM2hw+cp+OTtJ1+orxJQM d3RuHL6R+N8/Z5t10Vvvt2ynuSMoIhSsFGOCDfs+9sJXposVtFAyjGHQGNchVGMe XzC3W7bvnkmkQkQo+1S7JrDyUEjQV6PZ -----END CERTIFICATE-----Generated at Sun May 11 05:32:13 2025 by rpki-client