$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c075850c-7b2c-3da9-bcc1-1856a9e7aee0.roa File: c075850c-7b2c-3da9-bcc1-1856a9e7aee0.roa (raw, json) Hash identifier: KkshK97q/lD+5bfbJxck3234zxkOz0uOf2jEbyMc6Wg= Subject key identifier: A9:28:2B:57:F4:EE:7D:0B:D9:CB:61:F8:7E:E6:92:6E:10:13:BB:5A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8B6128CA3E2EBDDC9AC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c075850c-7b2c-3da9-bcc1-1856a9e7aee0.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396557 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8b:61:28:ca:3e:2e:bd:dc:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=073f538f-4eb3-4084-8c8a-f041e6edd7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ca:50:2c:cb:b9:3e:d2:10:fb:87:b0:97:aa: 9d:a2:58:21:be:55:c4:19:9c:b8:22:de:09:65:da: f8:69:1a:c0:d3:6d:45:b0:3e:c2:4d:e9:73:cb:eb: e8:d9:be:b2:3d:34:59:56:31:3a:19:39:c7:c3:fc: ee:47:e3:69:18:53:7a:9d:02:c6:6d:d9:ae:33:e3: ab:61:3c:b3:dd:0d:f8:cd:ed:29:04:30:d0:77:85: 38:d9:9b:b3:15:28:95:39:9c:48:64:bd:0f:a3:42: bd:97:96:0e:4d:6b:92:84:28:1e:29:be:88:cc:e1: 74:ad:b4:0a:27:51:19:8f:b3:51:0e:af:59:e8:f6: 91:98:d0:25:23:18:55:da:1c:46:48:af:74:e2:2f: dd:67:8f:37:33:3d:bd:e4:35:58:31:45:86:0e:96: 69:bb:96:a7:b9:c5:b2:94:9e:42:36:16:1c:90:bf: 09:57:62:64:80:07:a0:24:a5:e8:48:e4:c3:a5:23: 5a:3e:72:39:3b:ec:95:38:75:cc:33:96:c4:14:90: 8d:1a:44:3b:62:3d:b5:36:6f:9d:5e:0e:f4:3b:c7: 07:6c:a7:e8:46:5b:a4:e5:e1:02:af:0d:be:67:52: 86:a5:43:7d:83:2c:ed:95:cb:c5:21:c7:de:41:b8: 26:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:28:2B:57:F4:EE:7D:0B:D9:CB:61:F8:7E:E6:92:6E:10:13:BB:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c075850c-7b2c-3da9-bcc1-1856a9e7aee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:8f:0f:d3:40:3d:5e:6c:45:4c:f1:02:7c:e9:46:f1:40:5a: 3d:27:3b:82:e3:3d:67:58:f8:60:92:71:19:fd:73:9a:f3:dd: 33:78:78:1d:59:ef:9a:50:fd:ff:ec:8c:ff:dd:15:25:af:24: be:01:1d:c7:5e:ad:8f:b0:70:ab:f9:01:d8:a5:ac:26:ab:21: 71:ad:a5:f0:3a:fc:81:7a:ef:c1:9e:b8:bc:23:a2:0a:1d:f6: 1d:1f:51:05:6d:f6:16:88:22:a5:d4:a8:16:7f:94:95:eb:a3: 47:d9:b1:6f:ee:af:07:a3:d1:f8:ae:13:1f:ad:12:40:da:69: a2:a3:33:5c:d9:0c:83:17:87:c7:5f:a0:ad:ad:77:8c:21:7d: 49:f6:42:3c:3f:cf:0b:7d:d2:f0:5e:00:de:1e:90:78:00:87: b5:ad:2f:30:91:bc:b1:5f:7a:26:f3:c5:5e:b7:01:41:2c:a7: b3:07:19:1e:6d:ed:40:e3:d6:f1:9e:4d:04:bc:4b:25:61:5d: c4:e5:f5:27:25:ae:e1:ef:62:68:07:57:29:54:5a:a1:1f:0d: a7:25:5c:c7:d1:70:c2:0c:1f:b1:07:09:99:09:2b:6b:ba:e3: 5d:87:6f:a6:9c:6f:a6:db:78:b3:58:8c:05:77:a5:49:c2:b3: bc:6d:3e:f7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4thKMo+Lr3cmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MDczZjUzOGYtNGViMy00MDg0LThjOGEtZjA0MWU2ZWRkN2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8pQLMu5PtIQ+4ewl6qdolghvlXEGZy4It4J Zdr4aRrA021FsD7CTelzy+vo2b6yPTRZVjE6GTnHw/zuR+NpGFN6nQLGbdmuM+Or YTyz3Q34ze0pBDDQd4U42ZuzFSiVOZxIZL0Po0K9l5YOTWuShCgeKb6IzOF0rbQK J1EZj7NRDq9Z6PaRmNAlIxhV2hxGSK904i/dZ483Mz295DVYMUWGDpZpu5anucWy lJ5CNhYckL8JV2JkgAegJKXoSOTDpSNaPnI5O+yVOHXMM5bEFJCNGkQ7Yj21Nm+d Xg70O8cHbKfoRluk5eECrw2+Z1KGpUN9gyztlcvFIcfeQbgm9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKkoK1f07n0L2cth+H7mkm4QE7taMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzA3NTg1MGMtN2IyYy0z ZGE5LWJjYzEtMTg1NmE5ZTdhZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBfjw/TQD1ebEVM8QJ86UbxQFo9JzuC4z1nWPhgknEZ/XOa890zeHgd We+aUP3/7Iz/3RUlryS+AR3HXq2PsHCr+QHYpawmqyFxraXwOvyBeu/Bnri8I6IK HfYdH1EFbfYWiCKl1KgWf5SV66NH2bFv7q8Ho9H4rhMfrRJA2mmiozNc2QyDF4fH X6CtrXeMIX1J9kI8P88LfdLwXgDeHpB4AIe1rS8wkbyxX3om88VetwFBLKezBxke be1A49bxnk0EvEslYV3E5fUnJa7h72JoB1cpVFqhHw2nJVzH0XDCDB+xBwmZCStr uuNdh2+mnG+m23izWIwFd6VJwrO8bT73 -----END CERTIFICATE-----Generated at Mon May 12 07:41:26 2025 by rpki-client