$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/02200ae9-3a06-31a9-a90d-6c381efab5ce.roa File: 02200ae9-3a06-31a9-a90d-6c381efab5ce.roa (raw, json) Hash identifier: SLktdJXrjT6x62RsoPrkLvl8jaACe9ZAY/x0a2Wm5nY= Subject key identifier: 3F:0C:ED:64:CA:35:BF:9F:42:18:EC:3A:ED:32:D4:BF:DE:F7:63:3A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8815A265A76CA1582BC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/02200ae9-3a06-31a9-a90d-6c381efab5ce.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 211369 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:88:15:a2:65:a7:6c:a1:58:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=24d60812-d114-42a3-b16d-b581cbb2acb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bf:4c:d2:79:d2:61:8e:00:7d:d5:02:9e:61: 3c:a1:49:f9:3c:b0:74:19:65:f3:62:6e:10:04:5d: 38:aa:97:48:9e:ca:02:2a:d0:e3:ea:c2:40:44:c5: ad:3a:f7:2c:b5:20:df:60:d4:06:84:fe:5d:4f:f4: e8:40:95:36:b3:01:0e:a3:94:49:c3:7f:8b:eb:c4: 3d:f9:a2:3f:af:55:16:e6:49:fd:27:91:b0:fa:a3: 69:7e:dd:3b:25:5d:33:47:14:f6:89:24:95:31:0d: 61:0f:01:df:a9:da:5a:28:c2:48:cb:6f:a2:3d:93: 89:5c:69:fc:22:c1:cb:b6:56:62:58:b9:83:4b:08: 4b:16:06:c5:37:4a:fe:a0:78:8c:60:cd:39:d8:76: 7d:5d:07:0c:cc:ad:09:26:a9:19:c2:97:5d:f9:30: c5:38:3a:c7:bd:6b:7e:a6:55:37:23:b7:0b:0e:4d: 2a:87:26:6c:cd:4a:e4:6e:9d:ac:ed:fa:d4:f6:92: 5f:dc:5b:64:9a:07:90:bf:55:d8:bb:2e:f3:95:7d: f9:d6:52:2c:80:9e:5c:6b:27:0c:af:ce:f7:b3:08: 7e:00:60:38:32:85:84:58:06:47:ed:02:e0:63:bd: f5:fd:6f:0e:a2:3b:8c:af:b5:c4:2b:2d:a5:69:8d: 2a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0C:ED:64:CA:35:BF:9F:42:18:EC:3A:ED:32:D4:BF:DE:F7:63:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/02200ae9-3a06-31a9-a90d-6c381efab5ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f8:c1:de:ec:43:47:66:a7:50:63:8a:32:88:3a:8c:88:94: 42:6b:c1:31:44:31:6f:fe:c0:60:70:88:0b:76:e1:9a:2b:b3: 4a:9e:81:08:7e:96:5c:8a:71:a2:ff:ff:5e:55:e0:c1:1b:e1: b2:e6:1b:e9:63:90:f5:2f:f3:23:b7:f6:7f:ee:94:de:7b:b8: fe:7a:70:a0:9c:83:0f:05:c0:6f:3d:d0:21:e6:19:16:9c:f0: 05:22:7c:45:dc:9f:f5:d6:41:e5:23:9b:bc:ce:28:df:5b:a4: 55:20:e3:42:1f:f0:b5:03:23:9b:6b:90:33:bf:b5:be:8e:39: 49:e4:33:89:e9:3c:1a:c1:03:8a:54:9e:d6:d4:24:ce:c2:ad: bd:07:bf:be:a0:bf:7d:a7:df:c8:40:90:91:85:18:39:b1:67: 26:1e:50:7b:f2:45:36:a4:65:d4:b5:1a:88:b6:4e:0b:e7:fc: 26:4d:bc:0a:12:1f:43:b8:09:85:4d:88:d4:57:2e:52:80:b9: 5a:bf:a5:14:d7:ff:69:e7:6e:c3:a1:74:ac:2a:c2:90:af:85: d6:b8:1d:68:4c:6c:e8:44:5e:3a:1a:21:4f:83:67:86:b6:63: ff:61:7f:62:96:5d:0d:b9:5e:d8:9a:24:cd:e0:e1:c2:bd:5a: 0d:e9:1d:f4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4gVomWnbKFYK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MjRkNjA4MTItZDExNC00MmEzLWIxNmQtYjU4MWNiYjJhY2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL9M0nnSYY4AfdUCnmE8oUn5PLB0GWXzYm4Q BF04qpdInsoCKtDj6sJARMWtOvcstSDfYNQGhP5dT/ToQJU2swEOo5RJw3+L68Q9 +aI/r1UW5kn9J5Gw+qNpft07JV0zRxT2iSSVMQ1hDwHfqdpaKMJIy2+iPZOJXGn8 IsHLtlZiWLmDSwhLFgbFN0r+oHiMYM052HZ9XQcMzK0JJqkZwpdd+TDFODrHvWt+ plU3I7cLDk0qhyZszUrkbp2s7frU9pJf3FtkmgeQv1XYuy7zlX351lIsgJ5caycM r873swh+AGA4MoWEWAZH7QLgY731/W8OojuMr7XEKy2laY0qmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD8M7WTKNb+fQhjsOu0y1L/e92M6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDIyMDBhZTktM2EwNi0z MWE5LWE5MGQtNmMzODFlZmFiNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAN+MHe7ENHZqdQY4oyiDqMiJRCa8ExRDFv/sBgcIgLduGaK7NKnoEI fpZcinGi//9eVeDBG+Gy5hvpY5D1L/Mjt/Z/7pTee7j+enCgnIMPBcBvPdAh5hkW nPAFInxF3J/11kHlI5u8zijfW6RVIONCH/C1AyOba5Azv7W+jjlJ5DOJ6TwawQOK VJ7W1CTOwq29B7++oL99p9/IQJCRhRg5sWcmHlB78kU2pGXUtRqItk4L5/wmTbwK Eh9DuAmFTYjUVy5SgLlav6UU1/9p527DoXSsKsKQr4XWuB1oTGzoRF46GiFPg2eG tmP/YX9ill0NuV7YmiTN4OHCvVoN6R30 -----END CERTIFICATE-----Generated at Sat Jun 7 04:09:44 2025 by rpki-client