$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5a4ca7a-42c3-37c0-a62e-c45c68db6703.roa File: b5a4ca7a-42c3-37c0-a62e-c45c68db6703.roa (raw, json) Hash identifier: 3XrRz0XcxYegUkAqZXIkX69uQPpRRLRK0cx/+Av9umo= Subject key identifier: D8:FD:BE:71:D5:70:BE:21:FB:87:19:C5:F9:BA:F8:6B:01:B3:B1:F2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F872AECB715CE994D10C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5a4ca7a-42c3-37c0-a62e-c45c68db6703.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396613 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:87:2a:ec:b7:15:ce:99:4d:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=9364718b-ff26-4ca2-9b35-7277fc609095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f7:fd:d9:ae:b4:17:73:77:51:d6:3d:23:1a: a3:4b:2e:6b:47:8e:c7:da:40:d3:21:68:44:26:6d: af:3f:48:f9:b4:b6:24:15:31:53:bd:74:6d:f8:96: 5c:62:6c:e6:69:4d:d3:7b:0e:58:bf:63:db:4f:51: 06:54:34:13:78:4f:79:a9:1c:e4:57:c1:44:a4:94: 5e:10:40:cc:21:19:54:c5:c7:7c:16:02:7d:df:79: be:ee:45:0b:31:04:80:d8:1b:04:39:57:f4:94:ee: 64:c4:16:fd:c9:4e:9d:f5:78:88:51:56:06:89:e9: 80:57:c5:b4:e0:7a:80:c9:f0:6c:1f:4d:5c:3d:e4: f0:45:89:f9:5f:d0:da:d5:86:e2:16:72:3b:eb:e2: 2e:dd:28:0a:5a:98:55:1c:71:b7:58:2e:8a:5e:ea: 20:d6:2d:8c:6d:20:f7:e5:d4:cd:ce:cc:52:94:57: 98:c9:f8:c4:5f:94:3d:59:ca:36:aa:92:cf:18:5e: f9:60:2b:e2:ba:73:57:0e:a8:e9:ab:09:29:01:83: 73:31:9b:9b:a4:8c:f9:22:a3:4b:e3:ed:3e:ca:c0: ab:02:62:56:0c:01:5c:6f:51:43:d1:46:77:09:49: 99:9e:a1:2d:2c:51:db:3d:33:5d:5d:89:6a:e2:cb: 40:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FD:BE:71:D5:70:BE:21:FB:87:19:C5:F9:BA:F8:6B:01:B3:B1:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5a4ca7a-42c3-37c0-a62e-c45c68db6703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:1b:f7:6d:d5:90:41:e4:d1:05:51:ea:11:cd:57:18:20:5f: 2e:b3:90:65:6e:f9:a8:1e:2a:fb:97:01:ee:69:41:f7:fb:97: 91:ae:79:fa:16:5f:09:7f:ca:d5:ed:69:93:22:d9:50:2a:f4: 4b:7f:21:6e:08:3d:e0:74:8a:86:f8:d9:bd:34:81:1f:6c:63: ec:80:b9:43:ce:3d:22:78:66:56:82:3d:77:91:d7:cf:5f:95: 02:3c:95:b8:53:f1:55:db:2f:5e:05:fd:c3:f6:25:f2:d1:b4: 08:86:45:8a:6a:b2:cb:18:7f:ab:bb:2a:f9:32:93:52:bc:5e: cf:cc:4a:52:dd:c4:fe:c7:55:0f:46:3e:c4:db:29:bf:cf:01: ad:2a:3e:56:fb:9c:7c:d5:0c:b0:73:dc:d3:df:ed:6e:89:5e: b7:52:eb:23:c8:a6:d6:a7:af:cd:e3:50:55:27:81:88:37:38: 72:84:16:5d:ce:9e:3f:18:d3:36:29:76:03:66:f6:ca:c9:4c: 52:31:51:9c:e1:89:d6:ff:b8:50:36:78:97:b8:a9:a2:d8:a3: 5c:3e:c0:3e:c7:52:bc:42:ea:7c:bf:60:70:33:40:94:02:33: 21:5c:92:42:74:cc:96:9c:a0:00:49:a8:27:65:46:e7:ae:91: e7:5e:6d:b3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4cq7LcVzplNEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk OTM2NDcxOGItZmYyNi00Y2EyLTliMzUtNzI3N2ZjNjA5MDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPf92a60F3N3UdY9IxqjSy5rR47H2kDTIWhE Jm2vP0j5tLYkFTFTvXRt+JZcYmzmaU3Tew5Yv2PbT1EGVDQTeE95qRzkV8FEpJRe EEDMIRlUxcd8FgJ933m+7kULMQSA2BsEOVf0lO5kxBb9yU6d9XiIUVYGiemAV8W0 4HqAyfBsH01cPeTwRYn5X9Da1YbiFnI76+Iu3SgKWphVHHG3WC6KXuog1i2MbSD3 5dTNzsxSlFeYyfjEX5Q9Wco2qpLPGF75YCviunNXDqjpqwkpAYNzMZubpIz5IqNL 4+0+ysCrAmJWDAFcb1FD0UZ3CUmZnqEtLFHbPTNdXYlq4stArwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNj9vnHVcL4h+4cZxfm6+GsBs7HyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjVhNGNhN2EtNDJjMy0z N2MwLWE2MmUtYzQ1YzY4ZGI2NzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB8G/dt1ZBB5NEFUeoRzVcYIF8us5BlbvmoHir7lwHuaUH3+5eRrnn6 Fl8Jf8rV7WmTItlQKvRLfyFuCD3gdIqG+Nm9NIEfbGPsgLlDzj0ieGZWgj13kdfP X5UCPJW4U/FV2y9eBf3D9iXy0bQIhkWKarLLGH+ruyr5MpNSvF7PzEpS3cT+x1UP Rj7E2ym/zwGtKj5W+5x81Qywc9zT3+1uiV63UusjyKbWp6/N41BVJ4GINzhyhBZd zp4/GNM2KXYDZvbKyUxSMVGc4YnW/7hQNniXuKmi2KNcPsA+x1K8Qup8v2BwM0CU AjMhXJJCdMyWnKAASagnZUbnrpHnXm2z -----END CERTIFICATE-----Generated at Mon May 12 04:59:29 2025 by rpki-client