$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e3689023-3ce9-3c35-be7a-80f054d80922.roa File: e3689023-3ce9-3c35-be7a-80f054d80922.roa (raw, json) Hash identifier: PR7UsPJajh/kYoyTCbvjIb2/mZ4bP+zjyDC2v6ciOXQ= Subject key identifier: 44:98:34:6F:60:AD:E5:49:CE:F5:50:28:A5:93:83:C4:27:ED:86:DE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F849C1577B724B2AA3D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e3689023-3ce9-3c35-be7a-80f054d80922.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396566 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:84:9c:15:77:b7:24:b2:aa:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=e6f5af2e-ba4f-47ae-b239-ee86e66969cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:36:6f:88:6a:1b:b3:fa:73:28:0e:c0:e4:d6: 6b:10:73:d2:4c:d5:67:5d:7a:7d:e6:d4:4c:4b:a8: a9:1d:ca:3c:87:55:94:fa:13:6d:01:32:c9:e2:85: d6:61:d4:88:20:c2:0e:f0:d0:65:93:71:1c:8d:67: 86:78:1f:f5:b7:67:b5:76:f4:ed:d3:53:ee:4c:97: 95:fd:18:ff:c8:83:cd:72:a1:72:dc:e3:9f:01:24: b3:d0:b7:73:e3:65:72:b0:f0:82:d4:c6:46:4e:1e: 87:38:09:02:6e:02:5d:2e:7a:3d:f1:ad:8b:a1:f8: f0:da:85:6c:b0:26:5f:2f:10:ad:c3:bc:5b:01:3e: 3a:95:7b:f8:77:b4:46:80:30:40:a2:4f:4b:a0:be: ee:c3:60:8b:e7:d4:f3:76:97:9f:e2:60:67:da:83: b2:0b:66:10:65:73:6c:0e:0b:17:6d:5a:05:02:27: bb:f1:b9:25:74:15:ea:e2:23:3a:b8:fd:4f:c9:19: 5b:2c:9c:fb:70:34:c5:84:a3:91:b2:80:be:a7:72: cd:7f:ef:0d:91:bf:e3:62:7b:78:e6:f9:e7:25:43: 80:51:92:f8:3a:8d:c8:d7:18:54:7d:f8:4c:27:4b: 89:92:2a:21:b9:bd:08:9e:24:55:a6:02:95:3c:54: 63:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:98:34:6F:60:AD:E5:49:CE:F5:50:28:A5:93:83:C4:27:ED:86:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e3689023-3ce9-3c35-be7a-80f054d80922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:f5:c4:16:69:63:70:4b:88:e3:bc:a3:30:f3:46:16:ea:29: 11:27:c2:de:c4:fe:88:51:a7:6e:36:f0:b7:4e:d1:52:cb:fa: e0:69:ec:b7:b0:db:d9:ca:f2:bf:02:a8:f8:11:b3:fd:72:fc: f8:dd:05:c9:50:00:43:22:59:1e:53:e8:e6:a8:47:eb:1a:44: ff:a9:63:e4:77:69:61:e4:b7:47:c0:97:20:37:8d:85:07:39: 46:1e:be:47:57:c3:4b:9e:d8:80:69:9d:27:9f:72:92:4f:9b: f4:6c:1f:15:13:85:60:f8:f2:52:87:6c:7d:f1:05:2e:34:51: 25:1c:37:37:35:41:f4:bc:81:48:3e:87:e2:98:3d:a0:a4:a2: 05:36:a0:47:31:4f:79:4f:c4:68:a6:b8:7d:bc:ce:9e:22:c5: 4a:cc:9a:6f:e8:0c:3f:f6:52:0d:d5:06:f0:86:12:2a:93:49: ce:ed:e0:05:71:32:2f:2e:d2:35:81:af:f2:f2:f3:b3:35:54: 2b:24:18:7c:45:ab:cf:09:b2:a7:26:82:e8:54:e6:63:e5:5e: b5:db:b2:fd:ed:61:fd:b5:bd:d4:5b:b1:54:b2:25:c6:9d:6f: 80:f2:19:51:10:06:86:31:ab:ba:03:15:6e:b8:3c:ac:91:0f: e4:5b:cf:e6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4ScFXe3JLKqPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZTZmNWFmMmUtYmE0Zi00N2FlLWIyMzktZWU4NmU2Njk2OWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjZviGobs/pzKA7A5NZrEHPSTNVnXXp95tRM S6ipHco8h1WU+hNtATLJ4oXWYdSIIMIO8NBlk3EcjWeGeB/1t2e1dvTt01PuTJeV /Rj/yIPNcqFy3OOfASSz0Ldz42VysPCC1MZGTh6HOAkCbgJdLno98a2Lofjw2oVs sCZfLxCtw7xbAT46lXv4d7RGgDBAok9LoL7uw2CL59Tzdpef4mBn2oOyC2YQZXNs DgsXbVoFAie78bkldBXq4iM6uP1PyRlbLJz7cDTFhKORsoC+p3LNf+8Nkb/jYnt4 5vnnJUOAUZL4Oo3I1xhUffhMJ0uJkiohub0IniRVpgKVPFRjhwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFESYNG9greVJzvVQKKWTg8Qn7YbeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTM2ODkwMjMtM2NlOS0z YzM1LWJlN2EtODBmMDU0ZDgwOTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBa9cQWaWNwS4jjvKMw80YW6ikRJ8LexP6IUaduNvC3TtFSy/rgaey3 sNvZyvK/Aqj4EbP9cvz43QXJUABDIlkeU+jmqEfrGkT/qWPkd2lh5LdHwJcgN42F BzlGHr5HV8NLntiAaZ0nn3KST5v0bB8VE4Vg+PJSh2x98QUuNFElHDc3NUH0vIFI PofimD2gpKIFNqBHMU95T8Roprh9vM6eIsVKzJpv6Aw/9lIN1QbwhhIqk0nO7eAF cTIvLtI1ga/y8vOzNVQrJBh8RavPCbKnJoLoVOZj5V6127L97WH9tb3UW7FUsiXG nW+A8hlREAaGMau6AxVuuDyskQ/kW8/m -----END CERTIFICATE-----Generated at Sun May 11 06:10:28 2025 by rpki-client