$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8dfa8ec-1f57-3431-962a-33787eea5e55.roa File: f8dfa8ec-1f57-3431-962a-33787eea5e55.roa (raw, json) Hash identifier: f6RK7LwafVxnQQU1vQSSWJ2wILYMSy+nJOo1jhcgJX4= Subject key identifier: 27:27:4F:5F:3D:66:A3:7F:E2:AC:4D:43:62:5A:53:56:5C:DE:44:1A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F832128F3470E35F51280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8dfa8ec-1f57-3431-962a-33787eea5e55.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396543 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:83:21:28:f3:47:0e:35:f5:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=2fe9af6f-7bf9-4a46-8897-918f359d96cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:02:9a:c3:4c:19:4f:53:ab:48:5d:2a:e5: 7c:27:00:bb:09:28:b7:2b:6f:c6:3c:ae:d0:31:34: ec:6e:a1:04:af:d0:2e:af:24:f2:19:06:cd:10:b0: 7d:c8:c3:9d:a5:e8:54:73:5d:bb:f9:9d:86:7c:a1: 40:5f:ed:71:cd:9f:1c:fa:96:d9:54:03:a6:e3:3d: d2:80:32:b7:be:c0:c8:bd:b1:3c:ff:48:9f:66:af: ec:e0:e2:5d:92:92:fb:15:4c:49:19:70:da:19:56: e8:6a:40:11:82:eb:0e:27:ef:a8:6c:a9:0e:c1:31: ed:a8:bd:c3:cc:c2:72:2a:ce:82:09:07:8c:49:4e: 7a:c6:e4:51:16:1f:a8:a4:5f:a5:bc:ed:81:f4:ae: 29:6a:57:ca:ae:19:fe:70:35:b2:2c:18:f7:1a:ef: 4b:15:39:25:1f:25:3b:3c:06:0c:15:de:4d:b0:cf: 10:03:fc:48:06:31:8e:53:fc:2e:f3:ad:e2:12:b7: 9b:5a:b2:c8:19:d2:80:39:92:e2:ce:8d:5a:84:34: 9b:a3:3f:23:41:49:5a:43:de:87:20:8e:04:b6:34: 70:71:4b:84:2c:37:96:2a:55:73:08:a8:c3:66:72: df:0b:0f:22:62:e2:7b:a5:96:c7:5d:6f:5d:a9:1c: a7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:27:4F:5F:3D:66:A3:7F:E2:AC:4D:43:62:5A:53:56:5C:DE:44:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8dfa8ec-1f57-3431-962a-33787eea5e55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:84:44:1f:29:24:cf:55:a7:37:3c:ca:e3:bd:d5:5f:24:06: a7:65:00:f3:1f:33:82:81:77:9e:ca:da:01:a4:7e:fa:36:02: b8:0d:ed:84:3a:08:d7:fe:36:9a:a4:60:22:33:04:42:c0:83: 93:d4:33:b8:3a:b5:76:4e:90:a1:6d:f3:88:35:57:a6:2c:a4: ee:02:e9:57:b9:b8:17:77:37:a8:96:82:f7:18:02:70:8d:96: bf:61:3b:ea:5b:bf:da:29:18:8f:20:de:8c:a3:9b:94:9c:fc: d6:07:8b:bc:a1:b6:55:02:28:3e:54:2c:81:78:61:5a:99:1d: aa:fa:de:71:43:7d:4d:8b:1f:d8:68:34:58:a1:11:e2:c3:e7: da:2a:a3:31:9f:b1:c4:df:30:d1:b7:f0:57:01:89:72:19:27: b0:78:8f:ad:0c:57:08:2f:34:1a:70:3e:17:ee:f0:1a:0c:42: 33:c1:7e:cd:df:35:58:a0:d0:4c:9e:cd:79:51:35:0c:fe:42: 4d:10:f8:e9:1d:c8:a0:8c:39:c6:6b:2a:fd:67:3f:5f:35:c0: f7:e4:cb:26:5e:f7:62:07:f2:f8:8a:26:36:44:30:bc:aa:5a: 6e:18:8e:93:de:57:83:ee:a7:a4:14:bc:eb:4a:8a:dc:37:5b: 76:c6:21:30 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4MhKPNHDjX1EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MmZlOWFmNmYtN2JmOS00YTQ2LTg4OTctOTE4ZjM1OWQ5NmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsogCmsNMGU9Tq0hdKuV8JwC7CSi3K2/GPK7Q MTTsbqEEr9AuryTyGQbNELB9yMOdpehUc127+Z2GfKFAX+1xzZ8c+pbZVAOm4z3S gDK3vsDIvbE8/0ifZq/s4OJdkpL7FUxJGXDaGVboakARgusOJ++obKkOwTHtqL3D zMJyKs6CCQeMSU56xuRRFh+opF+lvO2B9K4palfKrhn+cDWyLBj3Gu9LFTklHyU7 PAYMFd5NsM8QA/xIBjGOU/wu863iErebWrLIGdKAOZLizo1ahDSboz8jQUlaQ96H II4EtjRwcUuELDeWKlVzCKjDZnLfCw8iYuJ7pZbHXW9dqRynlQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCcnT189ZqN/4qxNQ2JaU1Zc3kQaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjhkZmE4ZWMtMWY1Ny0z NDMxLTk2MmEtMzM3ODdlZWE1ZTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBghEQfKSTPVac3PMrjvdVfJAanZQDzHzOCgXeeytoBpH76NgK4De2E OgjX/jaapGAiMwRCwIOT1DO4OrV2TpChbfOINVemLKTuAulXubgXdzeoloL3GAJw jZa/YTvqW7/aKRiPIN6Mo5uUnPzWB4u8obZVAig+VCyBeGFamR2q+t5xQ31Nix/Y aDRYoRHiw+faKqMxn7HE3zDRt/BXAYlyGSeweI+tDFcILzQacD4X7vAaDEIzwX7N 3zVYoNBMns15UTUM/kJNEPjpHcigjDnGayr9Zz9fNcD35MsmXvdiB/L4iiY2RDC8 qlpuGI6T3leD7qekFLzrSorcN1t2xiEw -----END CERTIFICATE-----Generated at Sun May 11 06:36:29 2025 by rpki-client