$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d016bbc2-5d65-3213-81b6-ce1e0c054fe3.roa File: d016bbc2-5d65-3213-81b6-ce1e0c054fe3.roa (raw, json) Hash identifier: gqkYqbmHJHTAw18Lkg4Qg6ipeuNBfiiz1SuWvVodHK4= Subject key identifier: 8C:C5:17:0E:79:E7:5B:12:C9:B4:FC:D3:95:10:E1:90:FE:40:BA:E5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F87DF6D53E7E76F912980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d016bbc2-5d65-3213-81b6-ce1e0c054fe3.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 397212 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:87:df:6d:53:e7:e7:6f:91:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=b680188e-0d17-4692-9b8f-22281dd0eecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:aa:42:60:8b:3c:66:2a:89:de:9f:dd:6a:2f: ea:5f:79:22:4c:0e:7f:96:68:8e:6f:99:af:db:67: 6a:4d:93:67:12:dc:ea:8f:57:c2:9d:4d:fc:6e:7f: 97:4e:56:3c:02:8e:0d:b3:05:ba:78:18:31:a3:81: 2a:b8:15:10:a8:ba:5a:20:9a:bc:ef:03:d3:28:43: 8f:12:6c:38:32:57:fb:6b:61:a2:2a:9c:9f:12:eb: dd:49:45:0b:d5:59:d5:84:34:69:3c:45:75:d4:b2: b9:d8:28:cf:84:24:b6:eb:4d:f9:7f:4d:7a:a4:34: ef:09:a8:18:1c:71:95:7a:78:ce:75:f4:70:fa:24: e5:f4:75:34:7d:e2:06:11:06:28:70:a7:d1:5a:0e: 41:30:9e:c2:a0:13:86:e5:95:da:56:ab:ea:8c:89: 51:99:6f:d5:94:3c:2a:95:6c:7e:98:31:aa:a5:53: bf:42:33:86:63:28:f2:0c:02:31:fa:6f:05:55:41: ef:a2:2d:f0:e5:82:35:4b:c8:80:57:d0:b1:1b:6e: 64:53:bc:8e:83:6f:9b:f3:3a:1f:3c:bb:dc:02:67: 1e:4d:7e:64:19:9d:6d:a9:83:74:43:67:d0:a5:51: 06:6d:6e:89:ae:3b:5e:c2:4f:53:b9:a2:73:4d:bc: ea:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C5:17:0E:79:E7:5B:12:C9:B4:FC:D3:95:10:E1:90:FE:40:BA:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d016bbc2-5d65-3213-81b6-ce1e0c054fe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:cf:ad:50:f5:62:c4:90:b8:b8:ee:74:97:04:d2:e8:50:3d: 45:25:b2:45:f9:25:0b:e5:25:e1:c2:4b:fa:15:a4:a7:68:54: 1e:e6:99:79:7f:3f:1b:01:64:c4:13:28:ab:d8:6d:d7:bf:a9: 3b:c4:38:ec:07:ab:a2:10:27:b5:91:2f:17:70:2f:1d:d1:e9: 0b:7d:29:e6:e7:dd:94:2f:e4:9d:6d:85:07:bb:93:ed:94:3b: 87:91:52:fb:99:c5:4f:71:fa:0f:38:06:c4:7f:92:fe:91:24: b7:15:ff:17:ff:a0:33:ff:35:19:28:b5:d3:96:49:e9:13:91: 21:ec:9a:6c:dc:79:c6:fc:20:a8:de:15:e6:b7:ca:92:fa:bf: 39:86:9e:9e:af:f9:57:59:fb:f5:8d:69:9b:53:f4:be:df:1b: 88:1d:8b:85:a2:12:9f:48:78:f7:66:7f:5f:33:57:56:4c:43: 70:59:ae:f1:96:52:77:5c:85:f5:64:d7:89:9d:51:7a:70:ad: e3:96:17:1b:2b:e1:b6:e1:87:0b:c7:ef:3f:9c:3a:c8:4e:26: f8:8e:77:ca:6d:9b:9b:d1:80:01:1c:d0:38:d1:58:ad:ec:9f: 15:86:98:b9:8b:66:69:17:96:36:bd:8b:5a:ae:4c:b3:a3:33: 4e:d4:1a:ea -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4ffbVPn52+RKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YjY4MDE4OGUtMGQxNy00NjkyLTliOGYtMjIyODFkZDBlZWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiapCYIs8ZiqJ3p/dai/qX3kiTA5/lmiOb5mv 22dqTZNnEtzqj1fCnU38bn+XTlY8Ao4NswW6eBgxo4EquBUQqLpaIJq87wPTKEOP Emw4Mlf7a2GiKpyfEuvdSUUL1VnVhDRpPEV11LK52CjPhCS26035f016pDTvCagY HHGVenjOdfRw+iTl9HU0feIGEQYocKfRWg5BMJ7CoBOG5ZXaVqvqjIlRmW/VlDwq lWx+mDGqpVO/QjOGYyjyDAIx+m8FVUHvoi3w5YI1S8iAV9CxG25kU7yOg2+b8zof PLvcAmceTX5kGZ1tqYN0Q2fQpVEGbW6Jrjtewk9TuaJzTbzqOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIzFFw5551sSybT805UQ4ZD+QLrlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDAxNmJiYzItNWQ2NS0z MjEzLTgxYjYtY2UxZTBjMDU0ZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAhz61Q9WLEkLi47nSXBNLoUD1FJbJF+SUL5SXhwkv6FaSnaFQe5pl5 fz8bAWTEEyir2G3Xv6k7xDjsB6uiECe1kS8XcC8d0ekLfSnm592UL+SdbYUHu5Pt lDuHkVL7mcVPcfoPOAbEf5L+kSS3Ff8X/6Az/zUZKLXTlknpE5Eh7Jps3HnG/CCo 3hXmt8qS+r85hp6er/lXWfv1jWmbU/S+3xuIHYuFohKfSHj3Zn9fM1dWTENwWa7x llJ3XIX1ZNeJnVF6cK3jlhcbK+G24YcLx+8/nDrITib4jnfKbZub0YABHNA40Vit 7J8Vhpi5i2ZpF5Y2vYtarkyzozNO1Brq -----END CERTIFICATE-----Generated at Sun May 11 06:15:11 2025 by rpki-client