$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa796d64-0ef9-3391-be74-a11a52a4376f.roa File: aa796d64-0ef9-3391-be74-a11a52a4376f.roa (raw, json) Hash identifier: aiwq9XZOb0L3wzoJajbaMcBtwWopSW9os+8VhjRMHX0= Subject key identifier: 0E:05:70:2C:58:55:C7:FD:FD:32:0E:7C:98:FB:C1:84:07:08:E4:AE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F83BFFC73A3C0CFF61700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa796d64-0ef9-3391-be74-a11a52a4376f.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396550 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:83:bf:fc:73:a3:c0:cf:f6:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=d1227bab-b7f5-4297-9355-ef82e209e2ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:44:09:f5:2c:40:b1:fb:cd:52:bf:32:57:df: 73:e0:b9:39:9e:84:3e:b5:ce:0f:dd:11:33:80:ef: e0:82:f4:a7:bd:40:fd:74:11:5e:48:c5:72:29:98: bc:58:99:ba:e5:81:d1:ae:82:63:fc:d2:42:f6:2b: 5f:47:1e:52:43:57:35:2c:0d:d7:2a:61:4e:f6:9f: f6:0f:c4:43:ed:6d:12:bf:64:cf:94:fd:a6:b4:23: f3:ce:6a:f0:2f:56:25:04:c4:d1:0b:91:4f:7f:ed: 7c:9e:31:17:3d:5a:43:42:98:93:8c:5a:29:ce:57: eb:68:4e:63:a8:1d:d3:05:37:72:e8:16:1a:e7:f4: 0e:d1:26:97:9e:98:a8:31:32:ef:3e:aa:e6:ad:6f: b8:ce:47:c7:de:d1:8e:cd:3e:a0:91:c1:f4:a4:bd: 3a:af:35:25:e4:92:d2:e7:0d:0d:07:50:cc:a8:2c: c7:da:3c:aa:27:bc:17:5a:7f:b9:78:44:bc:2a:3e: 55:3e:61:6f:cf:ca:b3:e8:9a:14:04:b0:60:40:b7: be:89:14:ba:5d:65:8e:c0:67:d5:ac:7b:98:24:c1: 3c:05:8a:a1:11:b0:80:71:7f:39:1e:df:d6:26:6c: 53:f4:77:31:4a:4d:4c:18:9e:bd:a3:7e:80:1d:ba: ff:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:05:70:2C:58:55:C7:FD:FD:32:0E:7C:98:FB:C1:84:07:08:E4:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa796d64-0ef9-3391-be74-a11a52a4376f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:54:00:ba:1d:e6:b6:43:66:a7:89:0e:ef:3f:bc:24:f0:e9: a5:1a:53:4b:eb:2a:bd:e0:77:5f:9f:d7:67:18:02:c8:6b:99: 52:03:94:46:42:30:36:1f:e8:9d:84:c6:cf:d9:9f:d8:10:57: dc:2f:bb:2d:43:22:42:86:db:47:74:a5:03:8d:1e:5a:7c:c6: 3c:71:9c:d9:de:e0:ef:bc:73:a9:5d:08:20:2e:18:ba:4c:80: 64:96:f1:36:95:90:e0:45:c2:35:21:1f:2d:fa:87:9b:19:40: ea:99:0b:d0:a7:ab:37:2a:e9:2f:7e:b2:65:c3:2b:35:8a:d5: 43:bc:1a:e7:ab:53:d8:70:67:92:49:44:41:5f:8c:a7:96:9b: 57:0e:bd:25:1c:79:13:14:3c:b3:8d:7f:43:9a:d1:1f:8f:d6: 95:85:5a:36:01:64:20:06:88:04:5b:f8:e1:8d:e6:eb:10:cc: 8f:62:ba:47:b8:cf:2f:df:c6:37:fd:a9:b0:7b:9f:06:d3:2b: f3:e7:7b:2e:4b:db:c6:2b:97:a6:de:b4:6d:ed:07:46:0b:b4: 53:b5:bc:61:c3:6b:09:66:04:da:74:4b:96:11:1a:93:72:b0: 97:3d:90:fe:00:81:08:d9:61:43:63:88:50:ed:b7:e6:0e:9c: 7e:a7:fa:ba -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4O//HOjwM/2FwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZDEyMjdiYWItYjdmNS00Mjk3LTkzNTUtZWY4MmUyMDllMmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEQJ9SxAsfvNUr8yV99z4Lk5noQ+tc4P3REz gO/ggvSnvUD9dBFeSMVyKZi8WJm65YHRroJj/NJC9itfRx5SQ1c1LA3XKmFO9p/2 D8RD7W0Sv2TPlP2mtCPzzmrwL1YlBMTRC5FPf+18njEXPVpDQpiTjFopzlfraE5j qB3TBTdy6BYa5/QO0SaXnpioMTLvPqrmrW+4zkfH3tGOzT6gkcH0pL06rzUl5JLS 5w0NB1DMqCzH2jyqJ7wXWn+5eES8Kj5VPmFvz8qz6JoUBLBgQLe+iRS6XWWOwGfV rHuYJME8BYqhEbCAcX85Ht/WJmxT9HcxSk1MGJ69o36AHbr/rQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA4FcCxYVcf9/TIOfJj7wYQHCOSuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWE3OTZkNjQtMGVmOS0z MzkxLWJlNzQtYTExYTUyYTQzNzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBaVAC6Hea2Q2aniQ7vP7wk8OmlGlNL6yq94Hdfn9dnGALIa5lSA5RG QjA2H+idhMbP2Z/YEFfcL7stQyJChttHdKUDjR5afMY8cZzZ3uDvvHOpXQggLhi6 TIBklvE2lZDgRcI1IR8t+oebGUDqmQvQp6s3KukvfrJlwys1itVDvBrnq1PYcGeS SURBX4ynlptXDr0lHHkTFDyzjX9DmtEfj9aVhVo2AWQgBogEW/jhjebrEMyPYrpH uM8v38Y3/amwe58G0yvz53suS9vGK5em3rRt7QdGC7RTtbxhw2sJZgTadEuWERqT crCXPZD+AIEI2WFDY4hQ7bfmDpx+p/q6 -----END CERTIFICATE-----Generated at Sun May 11 06:17:41 2025 by rpki-client