$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b215dec3-2cce-3bba-95b9-96c2dee5c30b.roa File: b215dec3-2cce-3bba-95b9-96c2dee5c30b.roa (raw, json) Hash identifier: E3iJuzxAJo+I9OE/kuBwJxl2gx3GkkpVlZ8+FeZX61I= Subject key identifier: 49:45:4A:FD:2F:94:93:EF:98:65:3E:A5:3E:D9:D0:86:4B:0F:AB:27 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8D9FD08AE02D4513B180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b215dec3-2cce-3bba-95b9-96c2dee5c30b.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 397202 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8d:9f:d0:8a:e0:2d:45:13:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=fb0a5a62-3b77-46a5-95b0-f6f6efbbf30d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7d:93:19:4b:8a:9e:d6:e9:5f:20:14:1c:4d: 48:10:77:8d:29:c6:bb:48:ef:82:c9:16:ac:d6:70: cf:c3:81:1f:4c:0a:b7:96:b7:a1:cb:8c:f2:de:8a: fb:17:b8:93:09:22:c1:35:ab:fe:6e:e6:a2:fc:49: 66:36:43:e5:61:40:df:00:e9:96:8e:be:0e:bd:3b: be:09:f9:86:d6:e5:a6:2b:12:ba:d7:82:ce:a4:8a: 32:74:33:63:87:44:d2:48:fd:80:83:2e:8b:54:b6: b6:88:1c:1c:a1:4b:86:0e:61:2f:83:7a:f7:3a:cb: 1e:7e:c2:38:71:bb:18:7d:0b:e8:61:07:66:53:76: 86:f9:cc:eb:6f:df:77:62:1e:f7:94:8f:67:1a:d8: 85:66:dd:92:51:f8:65:ca:f7:57:45:9a:12:d0:d5: 0d:42:f4:03:62:a5:1d:dc:da:a3:66:7d:28:c1:17: 3c:d6:7e:3c:30:00:fe:fc:d9:8b:b6:ae:a6:60:27: e4:d0:11:0e:88:bc:51:c3:a7:a1:d1:fb:95:e4:a7: 7d:07:8f:86:e5:de:4d:81:a6:fd:53:b8:f3:89:40: 5f:e6:1c:1b:c8:41:48:75:95:3e:63:59:72:b4:c2: e9:be:38:0d:0f:14:40:f0:d9:1e:f2:02:fe:67:bc: 80:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:45:4A:FD:2F:94:93:EF:98:65:3E:A5:3E:D9:D0:86:4B:0F:AB:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b215dec3-2cce-3bba-95b9-96c2dee5c30b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:5e:32:41:4f:d6:92:cc:77:39:6b:b2:79:21:52:12:50:7c: e7:4c:de:ad:4f:4b:7d:c7:6d:d0:f9:68:0f:07:39:7f:29:2c: 21:a5:8c:ad:04:86:45:40:9e:be:c0:eb:fa:ee:22:1e:d1:37: c7:11:94:ed:23:cb:0f:21:ed:dc:ce:cc:10:ce:a1:c6:0e:04: aa:7a:8c:ce:1f:eb:69:b8:5b:5a:f8:3f:64:b9:e9:ae:22:d5: 33:4e:44:1e:b4:b2:3c:8f:0b:43:ca:1e:d4:cb:48:eb:93:90: ab:f2:2a:db:bf:c3:61:19:2d:ae:e4:4e:fd:5f:e1:2e:6b:42: 1f:37:b7:49:f2:2a:5b:2c:2b:60:44:ef:3d:ed:7d:61:7f:8b: 59:fc:bd:6e:28:a8:b6:de:ca:88:f4:68:01:36:ed:07:98:e1: b8:20:a5:31:4d:92:87:ea:74:03:b7:43:c9:b4:1c:1b:1f:77: ce:8e:60:f8:3b:81:e2:0e:6e:c6:05:95:fa:88:32:52:7e:04: 62:8c:25:4d:0d:e2:d5:a8:2b:95:51:46:d8:ae:63:29:18:23: a1:2b:e3:42:37:71:9e:ce:9e:29:d0:2e:b4:9d:3a:f6:d2:12: d8:e4:78:9e:96:df:74:81:2d:19:95:25:34:a5:64:1c:d8:c0: 31:3b:ef:c9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P42f0IrgLUUTsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZmIwYTVhNjItM2I3Ny00NmE1LTk1YjAtZjZmNmVmYmJmMzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA632TGUuKntbpXyAUHE1IEHeNKca7SO+CyRas 1nDPw4EfTAq3lrehy4zy3or7F7iTCSLBNav+buai/ElmNkPlYUDfAOmWjr4OvTu+ CfmG1uWmKxK614LOpIoydDNjh0TSSP2Agy6LVLa2iBwcoUuGDmEvg3r3OssefsI4 cbsYfQvoYQdmU3aG+czrb993Yh73lI9nGtiFZt2SUfhlyvdXRZoS0NUNQvQDYqUd 3NqjZn0owRc81n48MAD+/NmLtq6mYCfk0BEOiLxRw6eh0fuV5Kd9B4+G5d5Ngab9 U7jziUBf5hwbyEFIdZU+Y1lytMLpvjgNDxRA8Nke8gL+Z7yAwQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFElFSv0vlJPvmGU+pT7Z0IZLD6snMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjIxNWRlYzMtMmNjZS0z YmJhLTk1YjktOTZjMmRlZTVjMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAtXjJBT9aSzHc5a7J5IVISUHznTN6tT0t9x23Q+WgPBzl/KSwhpYyt BIZFQJ6+wOv67iIe0TfHEZTtI8sPIe3czswQzqHGDgSqeozOH+tpuFta+D9kuemu ItUzTkQetLI8jwtDyh7Uy0jrk5Cr8irbv8NhGS2u5E79X+Eua0IfN7dJ8ipbLCtg RO897X1hf4tZ/L1uKKi23sqI9GgBNu0HmOG4IKUxTZKH6nQDt0PJtBwbH3fOjmD4 O4HiDm7GBZX6iDJSfgRijCVNDeLVqCuVUUbYrmMpGCOhK+NCN3Gezp4p0C60nTr2 0hLY5Hielt90gS0ZlSU0pWQc2MAxO+/J -----END CERTIFICATE-----Generated at Sun May 11 08:15:18 2025 by rpki-client