$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e231f553-6931-3ccd-8df6-351c3444d6b0.roa File: e231f553-6931-3ccd-8df6-351c3444d6b0.roa (raw, json) Hash identifier: QF/Jzw7M1AEUCFctzZCwPQXlFnZDZVVbRdqbsU5ese4= Subject key identifier: 7C:10:FE:66:0A:A1:E8:59:05:7F:DE:FB:F2:33:88:AC:6F:3E:92:6B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F81BB5EFA91C67A07B480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e231f553-6931-3ccd-8df6-351c3444d6b0.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 397206 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:81:bb:5e:fa:91:c6:7a:07:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=9b82b1a7-bb78-4c53-adc9-3fad12349b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8c:8f:92:37:fd:d0:29:7d:d3:ce:08:ef:56: 93:4b:fc:f0:a2:c8:18:0d:2b:ae:0c:42:42:c9:3c: c1:7c:a4:41:98:21:3f:22:05:fa:6d:3b:03:3d:76: 57:f7:8c:e2:3e:06:5c:2f:18:fe:55:54:ff:36:e9: 58:ac:82:db:0c:40:6b:d1:a5:40:0d:1b:f8:ca:43: 30:ee:1d:07:5e:cf:4a:c2:b0:3e:75:62:69:11:70: 2e:71:a3:09:48:b6:89:9a:6a:a2:95:67:0b:5a:f9: 64:c4:95:59:fd:5f:ca:a0:68:52:ba:c5:09:24:cd: ec:4d:4a:b3:54:ba:22:47:ca:32:f3:a8:ca:9d:29: bc:80:4a:3e:52:c7:12:b3:c9:fd:d5:6a:2c:61:81: 10:66:ec:fb:de:99:ee:f9:88:c6:6b:3d:5e:7f:47: ea:5f:ba:5f:99:d4:ad:39:4f:53:7c:38:7d:03:9a: 3c:8b:bd:ea:65:d7:6b:4b:b7:86:37:cc:59:d5:c0: 5a:f7:35:f3:5d:af:f4:64:0c:e1:07:8d:e7:43:7f: 15:0a:ea:36:d4:c4:75:8f:27:e5:40:8e:c5:4e:bd: d1:64:10:2d:ef:f8:8d:22:ae:ae:f8:e3:c9:f8:1e: 03:07:88:06:b1:44:94:e9:03:7b:24:dc:78:24:77: 0f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:10:FE:66:0A:A1:E8:59:05:7F:DE:FB:F2:33:88:AC:6F:3E:92:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e231f553-6931-3ccd-8df6-351c3444d6b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:27:b7:92:10:cd:e9:73:2a:93:ba:77:0e:17:be:98:e5:87: d1:b2:3c:66:fc:e3:89:d5:e1:ce:9a:12:07:79:98:be:37:3e: 50:6a:52:e7:81:24:0c:59:56:45:ec:9c:de:3e:9a:3d:9e:cc: 4f:ad:0c:81:06:80:19:f1:1f:79:4f:78:fa:df:be:72:f2:79: 6b:16:c6:07:29:2b:38:f1:c7:fe:a2:b0:4d:08:34:db:65:66: 03:72:47:8a:34:51:0e:62:c9:0c:cd:3f:50:4e:a3:cf:d1:8a: 64:3e:ae:f5:f1:d7:19:4c:46:30:0a:f0:49:d1:ea:2b:4e:50: 09:19:ca:f4:63:7f:38:96:a9:62:ce:14:67:37:94:3c:b0:bf: 4e:fa:a9:11:d6:40:af:27:73:d0:72:38:36:51:a3:63:3b:16: c8:b4:b3:d0:87:be:48:03:fc:fc:54:36:12:e3:95:ac:63:a7: 14:3c:ce:9f:bb:5a:c4:7d:87:87:0f:c0:db:1b:e2:50:09:a1: de:67:37:96:9a:2e:bc:8c:b9:81:f2:21:23:0e:ba:a9:a5:c5: c2:a7:04:99:9d:20:f8:a6:40:7c:d7:b1:f0:d4:92:90:92:b2: 11:35:ca:aa:a2:d9:e4:94:a5:62:93:bf:52:64:c8:ca:d6:9d: 64:75:5c:1d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4G7XvqRxnoHtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk OWI4MmIxYTctYmI3OC00YzUzLWFkYzktM2ZhZDEyMzQ5YjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoyPkjf90Cl9084I71aTS/zwosgYDSuuDEJC yTzBfKRBmCE/IgX6bTsDPXZX94ziPgZcLxj+VVT/NulYrILbDEBr0aVADRv4ykMw 7h0HXs9KwrA+dWJpEXAucaMJSLaJmmqilWcLWvlkxJVZ/V/KoGhSusUJJM3sTUqz VLoiR8oy86jKnSm8gEo+UscSs8n91WosYYEQZuz73pnu+YjGaz1ef0fqX7pfmdSt OU9TfDh9A5o8i73qZddrS7eGN8xZ1cBa9zXzXa/0ZAzhB43nQ38VCuo21MR1jyfl QI7FTr3RZBAt7/iNIq6u+OPJ+B4DB4gGsUSU6QN7JNx4JHcPzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHwQ/mYKoehZBX/e+/IziKxvPpJrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTIzMWY1NTMtNjkzMS0z Y2NkLThkZjYtMzUxYzM0NDRkNmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB3J7eSEM3pcyqTuncOF76Y5YfRsjxm/OOJ1eHOmhIHeZi+Nz5QalLn gSQMWVZF7JzePpo9nsxPrQyBBoAZ8R95T3j6375y8nlrFsYHKSs48cf+orBNCDTb ZWYDckeKNFEOYskMzT9QTqPP0YpkPq718dcZTEYwCvBJ0eorTlAJGcr0Y384lqli zhRnN5Q8sL9O+qkR1kCvJ3PQcjg2UaNjOxbItLPQh75IA/z8VDYS45WsY6cUPM6f u1rEfYeHD8DbG+JQCaHeZzeWmi68jLmB8iEjDrqppcXCpwSZnSD4pkB817Hw1JKQ krIRNcqqotnklKVik79SZMjK1p1kdVwd -----END CERTIFICATE-----Generated at Sun May 11 06:16:15 2025 by rpki-client