$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b20fc41e-2cc8-3fe3-b3d4-b202c5793fbf.roa File: b20fc41e-2cc8-3fe3-b3d4-b202c5793fbf.roa (raw, json) Hash identifier: Kx9JKyG5mg/29GT+Lljlf12ayER77PvcRSge4nn5gHo= Subject key identifier: 93:B2:99:38:5B:59:E8:34:7B:7C:EF:42:B8:50:A1:89:50:9B:A5:3F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F81CCB8A1A06268652600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b20fc41e-2cc8-3fe3-b3d4-b202c5793fbf.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 20431 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:81:cc:b8:a1:a0:62:68:65:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=641f08d1-9038-4351-a23e-f0ef7d8940cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5b:36:da:71:71:e0:ef:02:e5:ab:a1:96:f1: f1:f3:c5:91:15:4e:38:d4:d2:bc:06:97:d7:35:e2: e2:3a:28:04:79:07:eb:60:de:c4:da:d9:00:dc:7b: 15:87:b8:e3:21:eb:45:59:95:02:5e:7d:b4:98:d5: 8f:6f:79:ac:ad:15:6c:1d:e4:96:08:be:5c:6f:54: b6:50:02:af:ef:1b:b7:fc:66:e0:b7:19:c5:7f:8a: cf:0c:61:f0:58:86:9c:05:49:c1:f2:84:3f:eb:96: 9f:e3:12:19:37:4b:6c:65:ed:11:7b:1f:31:bb:a3: ee:80:46:1d:3a:61:7b:4e:92:49:43:24:1e:57:2b: 91:d8:b1:4f:1f:3d:2d:46:a7:00:36:06:30:7e:3d: 5f:ae:b2:95:5d:26:3b:51:9b:28:9a:8c:96:bb:b8: 17:e6:6e:f0:a9:16:b1:57:29:36:55:44:8e:6b:f3: f8:27:7c:20:ac:72:00:81:8f:8c:b3:2a:f5:9a:29: 4d:5a:5f:04:72:99:1d:e8:bc:7b:b2:0e:2e:be:26: 78:b8:40:74:60:79:27:76:a7:4c:49:77:17:0a:fc: ce:0a:8b:e5:87:e9:49:9c:c1:f3:5e:07:1f:5a:a8: 8c:c4:2f:7e:4b:6b:73:65:49:62:21:50:13:22:ec: dc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B2:99:38:5B:59:E8:34:7B:7C:EF:42:B8:50:A1:89:50:9B:A5:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b20fc41e-2cc8-3fe3-b3d4-b202c5793fbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:46:53:28:30:75:35:7d:d3:40:1b:aa:32:83:26:f5:25:c1: 84:30:6e:a5:03:87:f0:d3:a9:d1:7e:c9:da:79:9e:6d:52:dc: 6f:e8:cc:fc:4d:20:94:da:2f:26:f8:ab:77:22:2c:96:1b:2f: 22:69:e9:a6:ed:2b:04:3b:5a:38:47:a5:3e:10:c6:67:da:23: b1:48:2b:ee:90:45:68:df:3d:fa:94:40:04:3b:68:ad:f6:02: 18:66:70:b4:b7:b4:91:26:2a:4f:61:e5:31:46:c3:ca:a9:12: 87:62:8b:c2:f3:ca:f9:8d:c2:40:85:d2:1f:51:9d:41:3f:d3: c3:0c:5f:dc:b8:ea:85:21:02:af:fc:5b:4e:0c:fc:6f:d6:2c: 6a:37:58:05:8c:93:ec:8a:03:09:d9:4a:0e:67:12:a3:28:91: 92:9b:6f:2a:40:ea:f7:5f:98:ec:4c:26:67:bc:dc:00:63:4f: 98:fd:01:8f:7a:f1:f5:cc:ba:b0:34:e9:6c:7a:02:40:d1:4e: 94:5f:88:09:1b:0f:d6:59:9c:71:8f:af:41:7c:6b:03:96:bd: 0c:22:c0:ee:62:39:3a:ab:bd:dd:f0:92:dc:6a:da:c8:8a:ce: ab:15:c1:f4:ef:cf:50:e6:6c:52:83:2a:67:85:47:de:1d:3f: a8:b0:19:17 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4HMuKGgYmhlJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NjQxZjA4ZDEtOTAzOC00MzUxLWEyM2UtZjBlZjdkODk0MGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ls22nFx4O8C5auhlvHx88WRFU441NK8BpfX NeLiOigEeQfrYN7E2tkA3HsVh7jjIetFWZUCXn20mNWPb3msrRVsHeSWCL5cb1S2 UAKv7xu3/GbgtxnFf4rPDGHwWIacBUnB8oQ/65af4xIZN0tsZe0Rex8xu6PugEYd OmF7TpJJQyQeVyuR2LFPHz0tRqcANgYwfj1frrKVXSY7UZsomoyWu7gX5m7wqRax Vyk2VUSOa/P4J3wgrHIAgY+Msyr1milNWl8Ecpkd6Lx7sg4uviZ4uEB0YHkndqdM SXcXCvzOCovlh+lJnMHzXgcfWqiMxC9+S2tzZUliIVATIuzc1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJOymThbWeg0e3zvQrhQoYlQm6U/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjIwZmM0MWUtMmNjOC0z ZmUzLWIzZDQtYjIwMmM1NzkzZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+RlMoMHU1fdNAG6oygyb1JcGEMG6lA4fw06nRfsnaeZ5tUtxv6Mz8 TSCU2i8m+Kt3IiyWGy8iaemm7SsEO1o4R6U+EMZn2iOxSCvukEVo3z36lEAEO2it 9gIYZnC0t7SRJipPYeUxRsPKqRKHYovC88r5jcJAhdIfUZ1BP9PDDF/cuOqFIQKv /FtODPxv1ixqN1gFjJPsigMJ2UoOZxKjKJGSm28qQOr3X5jsTCZnvNwAY0+Y/QGP evH1zLqwNOlsegJA0U6UX4gJGw/WWZxxj69BfGsDlr0MIsDuYjk6q73d8JLcatrI is6rFcH0789Q5mxSgypnhUfeHT+osBkX -----END CERTIFICATE-----Generated at Mon May 12 02:11:47 2025 by rpki-client