$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb809186-0a1a-3eb8-9a5f-50ae1b0c4a1d.roa File: bb809186-0a1a-3eb8-9a5f-50ae1b0c4a1d.roa (raw, json) Hash identifier: gejd19nPuhd1Dn6VkgMDQy2gVV2Dpibnxk77Lnjntc0= Subject key identifier: B9:33:05:10:59:0B:D2:EF:EC:BA:81:65:9F:B4:B3:C6:E6:8F:69:FF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F87F97B3238887B920080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb809186-0a1a-3eb8-9a5f-50ae1b0c4a1d.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 397197 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:87:f9:7b:32:38:88:7b:92:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=a877d313-5895-4adf-9e19-55e6aac9936a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7a:74:b8:e2:ca:b5:b0:f7:d5:7e:3e:95:2f: 24:3e:c3:db:c4:05:33:72:1d:ad:84:c1:69:87:ba: 12:e3:36:45:1b:27:d3:62:26:c9:09:ef:4a:58:18: 19:6b:83:03:cb:cc:ab:98:f6:f1:e3:4c:c1:36:05: 11:ac:22:ff:80:51:b2:25:59:05:f0:9a:08:ef:b1: b2:52:45:98:27:c6:11:46:87:ca:b0:c4:8a:e2:8c: 1b:bf:cd:2a:99:3f:3f:0e:a2:f2:2c:07:27:c1:5b: a1:1d:18:0a:15:d8:35:7e:ff:7a:0d:6d:1d:0a:0f: e0:25:36:5e:9b:46:a8:bd:fb:ba:bb:57:37:03:1f: 8b:ac:17:50:0e:da:a0:a1:12:35:7f:a9:54:d9:28: 2a:2f:de:4c:1b:10:14:11:c2:71:20:75:12:33:dd: 55:8b:20:96:54:dd:2a:98:c0:3b:0b:b0:ec:14:f8: c3:63:d6:1a:6f:28:c2:09:67:dd:77:69:61:2c:12: 8e:8d:7f:b2:e7:52:b6:a4:fc:ed:35:97:e8:51:48: a6:d0:c4:5a:e3:b6:66:75:b7:35:2e:d8:08:2e:bf: 81:63:fa:f5:80:4f:5d:ac:dc:6b:3b:a6:9c:58:52: c1:b8:1b:eb:1b:84:49:41:77:c8:93:aa:69:ef:58: bf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:33:05:10:59:0B:D2:EF:EC:BA:81:65:9F:B4:B3:C6:E6:8F:69:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb809186-0a1a-3eb8-9a5f-50ae1b0c4a1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:1e:d5:00:0d:16:97:c5:01:28:af:88:d6:6a:b1:50:7d:7c: e6:12:ff:9b:4d:54:d4:23:63:9d:2c:e2:e3:0c:38:dd:18:29: df:41:9d:27:52:1b:12:c7:a1:73:de:d9:ff:bc:52:84:7a:d4: 6f:36:91:73:9a:67:0f:b8:2f:01:56:0f:37:e0:7f:9d:70:6e: f6:52:a0:f1:00:40:f5:55:e5:72:f3:90:88:ac:25:62:63:d2: ec:c2:e8:5c:16:71:df:dc:69:27:2a:0f:b0:31:cf:12:d0:bc: 32:e8:f7:4f:70:09:62:8f:f4:d4:8a:38:1f:89:9b:e0:17:bf: 85:71:72:b8:78:5e:ce:8f:2d:4d:2c:17:3d:f0:a6:a4:d2:50: 89:84:d3:80:70:8e:09:50:26:1e:41:d8:54:3f:fa:e2:5d:02: c4:18:0d:d0:9b:2e:fc:11:43:9b:a0:ab:7f:83:34:88:5a:42: b0:27:f3:f7:20:5a:93:21:a5:d7:b4:d8:02:43:a0:ac:c0:05: 0d:7d:c1:97:2c:52:a5:5d:70:2e:97:54:aa:81:91:e1:a6:78: 51:0b:0c:94:b5:13:96:81:f7:98:df:c0:f2:fb:f3:e2:d3:5b: f3:fb:61:2a:be:54:4a:2d:f3:b6:d0:7a:8b:81:5d:1f:29:cf: 86:7a:94:d1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4f5ezI4iHuSAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YTg3N2QzMTMtNTg5NS00YWRmLTllMTktNTVlNmFhYzk5MzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73p0uOLKtbD31X4+lS8kPsPbxAUzch2thMFp h7oS4zZFGyfTYibJCe9KWBgZa4MDy8yrmPbx40zBNgURrCL/gFGyJVkF8JoI77Gy UkWYJ8YRRofKsMSK4owbv80qmT8/DqLyLAcnwVuhHRgKFdg1fv96DW0dCg/gJTZe m0aovfu6u1c3Ax+LrBdQDtqgoRI1f6lU2SgqL95MGxAUEcJxIHUSM91ViyCWVN0q mMA7C7DsFPjDY9YabyjCCWfdd2lhLBKOjX+y51K2pPztNZfoUUim0MRa47Zmdbc1 LtgILr+BY/r1gE9drNxrO6acWFLBuBvrG4RJQXfIk6pp71i/4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLkzBRBZC9Lv7LqBZZ+0s8bmj2n/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmI4MDkxODYtMGExYS0z ZWI4LTlhNWYtNTBhZTFiMGM0YTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAQHtUADRaXxQEor4jWarFQfXzmEv+bTVTUI2OdLOLjDDjdGCnfQZ0n UhsSx6Fz3tn/vFKEetRvNpFzmmcPuC8BVg834H+dcG72UqDxAED1VeVy85CIrCVi Y9LswuhcFnHf3GknKg+wMc8S0Lwy6PdPcAlij/TUijgfiZvgF7+FcXK4eF7Ojy1N LBc98Kak0lCJhNOAcI4JUCYeQdhUP/riXQLEGA3Qmy78EUOboKt/gzSIWkKwJ/P3 IFqTIaXXtNgCQ6CswAUNfcGXLFKlXXAul1SqgZHhpnhRCwyUtROWgfeY38Dy+/Pi 01vz+2EqvlRKLfO20HqLgV0fKc+GepTR -----END CERTIFICATE-----Generated at Sun May 11 05:38:39 2025 by rpki-client