$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f20ab0a5-f910-3ea8-a01e-bcb09ea221a3.roa File: f20ab0a5-f910-3ea8-a01e-bcb09ea221a3.roa (raw, json) Hash identifier: TFo5mGZq2P7FFFm/IsZYButhRaMZ0+MysUTnoxY23nk= Subject key identifier: 73:1C:CB:CC:EB:47:74:EF:6F:B2:04:42:38:DA:21:D4:32:DB:D5:D1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8845558337A89AE1D128 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f20ab0a5-f910-3ea8-a01e-bcb09ea221a3.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396588 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:88:45:55:83:37:a8:9a:e1:d1:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=92e80e83-7ab3-4230-b4f4-8837daee9fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ce:11:c6:07:34:8d:23:e8:65:5b:52:a3:24: 6e:08:69:6b:43:41:6e:a1:63:30:a0:bb:53:1a:a2: 0a:85:db:f7:3b:0c:bf:bd:04:08:b6:f9:9b:b9:78: 4d:4f:69:7e:18:27:28:a2:a1:b7:75:80:6c:45:f5: 18:7a:e5:b9:ca:70:a7:e4:68:af:4b:19:f3:5a:4e: c8:2a:3d:8f:54:87:7c:e6:d0:ab:72:8f:32:71:69: 40:04:ca:ad:80:02:a1:4c:23:d7:58:73:ca:18:f5: 5b:80:55:4e:a3:97:af:42:de:e2:a4:55:6f:1e:6e: dd:b7:fd:43:80:0c:7f:66:a6:eb:a7:a5:97:9f:77: 51:75:bb:b9:0a:60:19:f7:36:43:f5:48:de:65:c8: 9c:7e:aa:15:91:c0:c8:dd:c5:54:76:84:b7:88:6c: 35:4c:21:19:84:21:17:55:80:c3:ed:6a:b6:e4:5f: d3:2a:83:61:08:05:2c:2a:06:25:78:92:b1:b5:a9: 24:21:d2:2a:5f:05:2c:c4:ab:67:cb:b0:c0:e3:70: 8e:43:6d:cb:38:be:ba:5c:51:1a:40:91:b3:f9:29: f2:f8:cf:41:b5:8b:56:79:26:42:7c:ff:d9:75:53: d6:da:9b:ab:62:ec:02:2d:da:c4:b3:9d:a5:70:0a: 45:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1C:CB:CC:EB:47:74:EF:6F:B2:04:42:38:DA:21:D4:32:DB:D5:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f20ab0a5-f910-3ea8-a01e-bcb09ea221a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:1f:9b:67:60:dd:bd:65:05:bd:52:a6:ec:e4:1a:2b:10:16: c9:cf:91:0f:63:26:b6:69:82:20:8a:8d:c3:e8:bf:93:9c:f3: 96:87:a6:c0:24:0e:3c:62:35:49:1f:79:a7:eb:ed:a6:94:2c: 07:f2:8b:64:3f:94:be:26:0f:77:b8:65:be:6b:ef:9f:c8:3b: 1f:65:4b:cb:2d:47:31:08:7e:06:43:e7:75:e6:ee:c5:84:47: b1:31:ea:cc:fa:42:d7:e4:ce:19:85:53:dd:04:58:bb:71:59: 99:81:cd:eb:44:c1:e5:b8:ff:1e:b2:0d:e7:e0:30:ac:fd:22: 95:21:6d:d3:28:2a:cd:1a:45:27:94:2c:b1:af:65:4e:33:3f: 28:58:c8:71:73:8d:6d:da:2c:d0:23:5e:dc:2b:13:b9:ea:67: 80:b4:83:0a:48:97:d5:c1:de:d6:95:24:e1:4a:80:dd:5c:77: 44:e3:0f:b9:b4:3b:e1:c6:82:dc:26:e1:3d:06:a8:6c:a0:a8: 96:fa:89:eb:b7:6a:78:5a:e8:ea:26:49:63:b8:fb:43:e2:88: 79:e6:f6:03:a6:9a:ac:ac:82:ea:1c:f8:85:44:b4:11:27:bd: 83:99:19:a7:98:a1:4d:c2:fc:df:47:00:f8:1c:40:73:97:fe: 14:4c:88:4f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4hFVYM3qJrh0SgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk OTJlODBlODMtN2FiMy00MjMwLWI0ZjQtODgzN2RhZWU5ZmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc4Rxgc0jSPoZVtSoyRuCGlrQ0FuoWMwoLtT GqIKhdv3Owy/vQQItvmbuXhNT2l+GCcooqG3dYBsRfUYeuW5ynCn5GivSxnzWk7I Kj2PVId85tCrco8ycWlABMqtgAKhTCPXWHPKGPVbgFVOo5evQt7ipFVvHm7dt/1D gAx/Zqbrp6WXn3dRdbu5CmAZ9zZD9UjeZcicfqoVkcDI3cVUdoS3iGw1TCEZhCEX VYDD7Wq25F/TKoNhCAUsKgYleJKxtakkIdIqXwUsxKtny7DA43COQ23LOL66XFEa QJGz+Sny+M9BtYtWeSZCfP/ZdVPW2purYuwCLdrEs52lcApFmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHMcy8zrR3Tvb7IEQjjaIdQy29XRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjIwYWIwYTUtZjkxMC0z ZWE4LWEwMWUtYmNiMDllYTIyMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBrH5tnYN29ZQW9Uqbs5BorEBbJz5EPYya2aYIgio3D6L+TnPOWh6bA JA48YjVJH3mn6+2mlCwH8otkP5S+Jg93uGW+a++fyDsfZUvLLUcxCH4GQ+d15u7F hEexMerM+kLX5M4ZhVPdBFi7cVmZgc3rRMHluP8esg3n4DCs/SKVIW3TKCrNGkUn lCyxr2VOMz8oWMhxc41t2izQI17cKxO56meAtIMKSJfVwd7WlSThSoDdXHdE4w+5 tDvhxoLcJuE9BqhsoKiW+onrt2p4WujqJkljuPtD4oh55vYDppqsrILqHPiFRLQR J72DmRmnmKFNwvzfRwD4HEBzl/4UTIhP -----END CERTIFICATE-----Generated at Sun May 11 05:22:45 2025 by rpki-client