$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2229a3c-837f-3b08-b528-2fd0158fc8c2.roa File: c2229a3c-837f-3b08-b528-2fd0158fc8c2.roa (raw, json) Hash identifier: TpIbYVdr+UU0ohvqaUiH4c3TBl5xaefEmaced6YI7XY= Subject key identifier: D1:5B:32:BD:C6:86:2C:5A:A4:CC:BD:AA:CD:6C:0F:CA:E3:64:60:E3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8287BCF04633B4E08580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2229a3c-837f-3b08-b528-2fd0158fc8c2.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396547 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:82:87:bc:f0:46:33:b4:e0:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=438c2c17-dab6-47af-bb18-65c2f2ea5d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d3:9c:fb:42:db:ec:ef:24:9f:57:ff:c5:20: b5:7a:99:06:64:ed:08:35:cf:02:bd:f8:92:ce:cb: 87:1b:ea:ad:8b:95:52:93:1d:0a:af:b6:77:bd:94: 48:4a:61:c0:c3:7b:30:57:f8:94:f1:81:04:68:f0: 80:1d:b0:5a:5d:55:72:a9:50:9e:46:32:6d:4e:28: 43:32:b1:70:cc:66:db:c1:f8:2a:97:94:55:0a:41: d2:0e:c2:bd:8d:e5:14:bd:4c:64:27:6a:de:f2:1f: 0a:43:d5:c7:d3:11:7f:7b:cc:95:f5:a8:76:31:c7: 86:19:4f:41:e7:df:a9:a8:df:23:03:54:8a:d8:8f: 6f:e3:56:9c:b4:43:cf:25:63:f5:89:cd:f7:8b:68: ab:2d:c1:43:c7:3c:42:db:2e:ab:01:dc:a7:df:df: ad:64:2e:ff:2b:37:3c:ad:1c:7f:fd:ce:5e:46:89: 9b:86:7e:84:15:95:ee:69:c7:3a:60:51:73:82:e1: 6c:e9:4b:35:d7:e7:43:40:be:e7:c3:95:1b:32:16: 91:d6:7c:3e:fd:f4:12:b5:d1:64:59:fe:33:58:68: 8f:3a:c5:9a:02:4d:dd:b6:8f:85:6e:2f:55:8e:58: 55:ae:0c:c8:15:2d:fd:a4:70:61:c7:86:dd:a0:45: 9c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5B:32:BD:C6:86:2C:5A:A4:CC:BD:AA:CD:6C:0F:CA:E3:64:60:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2229a3c-837f-3b08-b528-2fd0158fc8c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:db:0d:7c:3a:83:16:9b:9b:d9:ab:81:a5:68:0f:69:e1:48: 50:e6:ed:a4:76:c9:a8:16:5b:c8:f8:bb:47:a1:2a:76:e9:1e: ea:2b:1c:76:7d:e2:a0:38:3d:35:82:d7:fd:9d:d2:24:bf:c2: 15:1a:74:bd:ba:d7:d5:2b:48:7c:0d:9e:1f:a9:a2:91:da:31: bb:8c:e3:5a:94:27:7f:c9:de:c2:70:91:ad:9b:7e:77:d2:69: 56:3b:61:9c:5b:c0:66:5b:92:94:b9:9f:84:69:c5:c7:31:bb: 92:09:e0:48:c9:15:aa:46:f0:53:fb:c6:82:c2:9a:cf:36:bd: f3:cc:b5:38:e8:08:39:ff:f8:9c:6a:e9:1e:51:53:1b:ef:c9: 7c:9d:58:a9:f2:e8:ff:0f:12:08:1e:b3:8d:c5:38:9b:2f:ca: 1e:90:88:03:08:4b:72:9b:41:ec:ef:41:df:85:c5:92:06:c7: 62:7f:75:ce:9d:18:d1:08:f2:11:eb:65:c5:d2:0e:5e:17:64: a1:64:96:b2:79:76:e3:19:c4:a7:b2:b8:e7:37:39:8d:58:bd: 67:86:e2:0d:ce:04:e8:50:79:9c:e3:4f:3b:97:5c:a2:d4:b9: 70:35:10:1e:3b:2a:26:ce:bf:08:78:34:c2:35:90:2b:0e:de: b5:cb:f1:b9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4KHvPBGM7TghYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NDM4YzJjMTctZGFiNi00N2FmLWJiMTgtNjVjMmYyZWE1ZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdOc+0Lb7O8kn1f/xSC1epkGZO0INc8CvfiS zsuHG+qti5VSkx0Kr7Z3vZRISmHAw3swV/iU8YEEaPCAHbBaXVVyqVCeRjJtTihD MrFwzGbbwfgql5RVCkHSDsK9jeUUvUxkJ2re8h8KQ9XH0xF/e8yV9ah2MceGGU9B 59+pqN8jA1SK2I9v41actEPPJWP1ic33i2irLcFDxzxC2y6rAdyn39+tZC7/Kzc8 rRx//c5eRombhn6EFZXuacc6YFFzguFs6Us11+dDQL7nw5UbMhaR1nw+/fQStdFk Wf4zWGiPOsWaAk3dto+Fbi9VjlhVrgzIFS39pHBhx4bdoEWcwwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNFbMr3GhixapMy9qs1sD8rjZGDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzIyMjlhM2MtODM3Zi0z YjA4LWI1MjgtMmZkMDE1OGZjOGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAo2w18OoMWm5vZq4GlaA9p4UhQ5u2kdsmoFlvI+LtHoSp26R7qKxx2 feKgOD01gtf9ndIkv8IVGnS9utfVK0h8DZ4fqaKR2jG7jONalCd/yd7CcJGtm353 0mlWO2GcW8BmW5KUuZ+EacXHMbuSCeBIyRWqRvBT+8aCwprPNr3zzLU46Ag5//ic aukeUVMb78l8nVip8uj/DxIIHrONxTibL8oekIgDCEtym0Hs70HfhcWSBsdif3XO nRjRCPIR62XF0g5eF2ShZJayeXbjGcSnsrjnNzmNWL1nhuINzgToUHmc4087l1yi 1LlwNRAeOyomzr8IeDTCNZArDt61y/G5 -----END CERTIFICATE-----Generated at Sun May 11 05:22:27 2025 by rpki-client