$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df69f49d-da73-3fac-81df-78a8bc3c1b5a.roa File: df69f49d-da73-3fac-81df-78a8bc3c1b5a.roa (raw, json) Hash identifier: ekopVb14/A3+KOvf8qmmg2K5szRSK9JSomXOWedAkNo= Subject key identifier: 4D:7A:6F:7F:DD:76:AA:20:FE:C3:20:87:29:D1:D6:60:65:7F:78:BA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8A0977BB02B53F0ACCC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df69f49d-da73-3fac-81df-78a8bc3c1b5a.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396593 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8a:09:77:bb:02:b5:3f:0a:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=54e8087f-d763-43dc-8b56-8dcbc6c8dd5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:84:08:4d:2d:32:2a:f9:de:6e:e4:0b:83:b1: b6:37:67:1f:77:26:c1:71:de:ef:71:0d:a9:06:0f: d7:5d:b6:30:70:64:9f:d3:ae:ce:26:1b:6c:f1:12: 52:c7:3e:a8:64:e9:aa:c8:eb:6c:d9:bb:fc:13:53: 0b:66:d5:1a:f1:ff:b6:33:f1:ec:77:68:9e:c1:33: 93:09:c8:ae:d3:19:26:2e:0c:6f:7e:8e:98:2e:3e: 03:70:cd:d6:f3:c1:8b:2c:94:98:b6:06:9c:da:bd: 1b:41:de:c9:03:89:b1:27:90:91:3d:2f:24:e5:4d: 8f:d5:1d:4a:e8:82:ef:e3:eb:7e:39:7c:08:0f:b8: 9c:a5:e9:cb:c9:8f:7c:6d:af:b2:d1:a7:1c:9a:86: 96:8d:54:e0:97:4d:7c:bb:2e:08:42:f2:91:47:21: 43:88:b1:5a:11:0e:c6:e4:d7:d6:37:2a:26:3d:fa: e8:b5:39:e1:4e:28:e8:05:ad:0b:89:ca:c5:f4:f0: 67:d2:14:d7:99:1d:d5:d6:5b:0d:2e:a3:cc:30:e1: b4:ef:b9:8b:e0:8c:65:f0:f5:54:dc:fc:53:ac:96: f6:9c:7c:f7:8a:32:90:00:21:cd:82:f8:99:d4:d5: f8:5b:0b:cd:63:d0:06:bd:e9:73:2c:0e:52:11:c2: 91:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7A:6F:7F:DD:76:AA:20:FE:C3:20:87:29:D1:D6:60:65:7F:78:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df69f49d-da73-3fac-81df-78a8bc3c1b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:2a:5e:58:c0:81:d3:f6:00:3a:2c:19:92:c3:17:96:bc:1b: f3:3f:2c:e3:c3:6b:2d:4c:f3:0f:27:ff:10:96:33:a4:10:a1: 98:f3:b3:14:25:48:60:22:92:ac:a4:10:44:05:f3:5a:17:1f: e7:08:bf:32:47:7b:75:ec:2b:55:6c:02:4f:7f:e5:1f:81:44: 71:c2:6a:31:f4:20:d6:27:2e:a0:10:bb:85:75:d8:ef:be:ab: 9a:a2:40:35:21:e6:32:c1:ab:23:81:bc:62:2d:17:68:9a:43: 99:75:ed:71:58:d4:d0:2d:f5:52:69:a8:e0:c5:f5:6e:70:e3: bb:90:23:e0:da:58:71:33:2f:28:33:13:c7:e7:fd:bb:9e:a6: 18:7c:44:32:a2:6d:96:91:8f:18:75:42:cf:a5:37:b9:93:f0: 96:d4:9d:19:d7:da:67:3c:06:5b:50:59:97:c8:20:8f:e5:24: bc:1b:b7:4e:5f:aa:8a:a1:f9:fb:22:60:33:d9:5f:1d:c3:3f: bc:7a:99:19:4d:5a:8e:10:2f:26:41:b1:d9:32:17:fa:c0:9d: 53:cf:6c:26:7a:94:7b:ab:54:6d:f9:b9:ae:34:6a:ca:20:16: 01:d5:22:98:b8:20:3c:43:9b:ea:a3:5a:1c:58:ea:f5:0f:a0: 4a:09:59:b7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4oJd7sCtT8KzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NTRlODA4N2YtZDc2My00M2RjLThiNTYtOGRjYmM2YzhkZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oQITS0yKvnebuQLg7G2N2cfdybBcd7vcQ2p Bg/XXbYwcGSf067OJhts8RJSxz6oZOmqyOts2bv8E1MLZtUa8f+2M/Hsd2iewTOT Cciu0xkmLgxvfo6YLj4DcM3W88GLLJSYtgac2r0bQd7JA4mxJ5CRPS8k5U2P1R1K 6ILv4+t+OXwID7icpenLyY98ba+y0accmoaWjVTgl018uy4IQvKRRyFDiLFaEQ7G 5NfWNyomPfrotTnhTijoBa0LicrF9PBn0hTXmR3V1lsNLqPMMOG077mL4Ixl8PVU 3PxTrJb2nHz3ijKQACHNgviZ1NX4WwvNY9AGvelzLA5SEcKRjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE16b3/ddqog/sMghynR1mBlf3i6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGY2OWY0OWQtZGE3My0z ZmFjLTgxZGYtNzhhOGJjM2MxYjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBhKl5YwIHT9gA6LBmSwxeWvBvzPyzjw2stTPMPJ/8QljOkEKGY87MU JUhgIpKspBBEBfNaFx/nCL8yR3t17CtVbAJPf+UfgURxwmox9CDWJy6gELuFddjv vquaokA1IeYywasjgbxiLRdomkOZde1xWNTQLfVSaajgxfVucOO7kCPg2lhxMy8o MxPH5/27nqYYfEQyom2WkY8YdULPpTe5k/CW1J0Z19pnPAZbUFmXyCCP5SS8G7dO X6qKofn7ImAz2V8dwz+8epkZTVqOEC8mQbHZMhf6wJ1Tz2wmepR7q1Rt+bmuNGrK IBYB1SKYuCA8Q5vqo1ocWOr1D6BKCVm3 -----END CERTIFICATE-----Generated at Sun May 11 05:32:12 2025 by rpki-client