$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19523cd6-18e4-370d-89bc-41844d5a5a37.roa File: 19523cd6-18e4-370d-89bc-41844d5a5a37.roa (raw, json) Hash identifier: W0PAZLx5mLOHDrJ86NcWiO0UWIiwVoBxNfGmbz4OG1E= Subject key identifier: 96:A0:3D:6B:D0:1E:BD:26:25:0F:CB:22:08:22:32:DE:68:E9:E8:85 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E006781031D1D7E619589B18 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19523cd6-18e4-370d-89bc-41844d5a5a37.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396576 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:78:10:31:d1:d7:e6:19:58:9b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=922e72e7-e015-4abf-ac2d-19b7426afbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:31:1d:5a:13:0d:9a:a0:de:ae:f1:77:ce:88: 3a:e0:56:92:b0:6f:0e:89:e5:5e:e1:23:00:d7:6d: 20:e9:70:18:ee:af:25:9a:2d:ad:0b:2f:f1:5a:14: 52:1a:89:48:61:06:47:5e:4f:82:a7:b2:26:0c:27: c9:9c:07:1b:d6:6d:eb:37:95:b9:f6:6d:90:ae:8d: 59:9a:fc:d5:0b:89:47:29:a0:37:ce:9b:cd:86:b5: 8b:81:0e:e1:7b:62:41:05:94:48:ac:14:33:fa:12: d0:10:19:3f:a8:31:6f:b0:3f:11:4c:59:fd:7d:df: 86:f5:f3:fe:cd:be:31:c1:9a:ab:c2:ef:12:d8:0a: 10:4c:29:29:87:11:81:78:b3:b2:12:e4:72:90:50: 7b:6c:91:3c:11:70:6b:b5:8c:9e:cb:7b:60:22:9f: 4b:6b:06:fd:00:7a:df:a8:2a:9c:36:44:85:07:6f: 76:32:6b:c0:b8:33:b0:94:66:0d:0b:7e:bd:54:91: 66:89:c8:4d:48:4a:77:e8:71:09:cb:19:d2:d1:1e: 2b:03:eb:78:8d:8f:7e:1a:36:15:e8:bd:15:a0:37: ce:13:98:6a:8c:99:ab:94:de:37:59:4e:e1:c2:1f: 41:92:05:d5:26:a4:19:b6:9b:4b:09:87:67:4c:68: e2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A0:3D:6B:D0:1E:BD:26:25:0F:CB:22:08:22:32:DE:68:E9:E8:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19523cd6-18e4-370d-89bc-41844d5a5a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ec:f8:13:ca:71:e8:9d:e7:fa:b6:da:b2:e5:a9:a8:d7:79: 5d:13:14:bd:80:f1:4b:b7:d1:b8:b5:5c:08:a7:c7:db:5a:30: 4a:07:1b:d0:1c:22:68:b3:07:0f:b1:6f:c1:a1:29:de:b0:88: c3:d6:cb:84:2f:72:8f:34:b8:27:e5:ff:32:c9:ad:ae:f8:af: 2f:a2:53:9d:14:01:03:ae:61:68:ba:a7:2e:57:85:c8:66:89: 54:25:31:e9:16:41:04:22:bc:81:c8:e9:de:50:3f:a5:24:46: 00:d0:f5:ff:ee:f0:94:73:d1:3f:e9:0a:bc:23:8e:d1:72:e4: e8:c6:73:65:c4:4f:f9:32:fb:94:a3:e6:be:b9:c2:e9:e1:e6: ec:1b:b9:0e:47:8a:bc:6b:12:68:7c:07:7f:0a:dc:00:97:4a: 9c:67:e4:eb:94:b7:1f:10:3e:5b:fa:24:58:df:2c:5f:90:92: d5:a3:3a:fb:47:62:07:9a:e3:2a:0c:70:11:a0:13:e6:31:e8: 5f:ce:fc:7d:d8:4c:cf:d7:39:9e:db:cb:f7:a5:95:ca:f7:ab: 58:4d:0c:d7:e2:99:c6:38:26:d0:3d:d9:53:f2:4d:ab:ab:eb: 8c:3a:a0:ba:c2:52:5f:1a:8f:20:9d:30:e1:42:04:01:d2:80: fd:08:6b:19 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBngQMdHX5hlYmxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk OTIyZTcyZTctZTAxNS00YWJmLWFjMmQtMTliNzQyNmFmYmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zEdWhMNmqDervF3zog64FaSsG8OieVe4SMA 120g6XAY7q8lmi2tCy/xWhRSGolIYQZHXk+Cp7ImDCfJnAcb1m3rN5W59m2Qro1Z mvzVC4lHKaA3zpvNhrWLgQ7he2JBBZRIrBQz+hLQEBk/qDFvsD8RTFn9fd+G9fP+ zb4xwZqrwu8S2AoQTCkphxGBeLOyEuRykFB7bJE8EXBrtYyey3tgIp9Lawb9AHrf qCqcNkSFB292MmvAuDOwlGYNC369VJFmichNSEp36HEJyxnS0R4rA+t4jY9+GjYV 6L0VoDfOE5hqjJmrlN43WU7hwh9BkgXVJqQZtptLCYdnTGji9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJagPWvQHr0mJQ/LIggiMt5o6eiFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTk1MjNjZDYtMThlNC0z NzBkLTg5YmMtNDE4NDRkNWE1YTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA57PgTynHonef6ttqy5amo13ldExS9gPFLt9G4tVwIp8fbWjBKBxvQ HCJoswcPsW/BoSnesIjD1suEL3KPNLgn5f8yya2u+K8volOdFAEDrmFouqcuV4XI ZolUJTHpFkEEIryByOneUD+lJEYA0PX/7vCUc9E/6Qq8I47RcuToxnNlxE/5MvuU o+a+ucLp4ebsG7kOR4q8axJofAd/CtwAl0qcZ+TrlLcfED5b+iRY3yxfkJLVozr7 R2IHmuMqDHARoBPmMehfzvx92EzP1zme28v3pZXK96tYTQzX4pnGOCbQPdlT8k2r q+uMOqC6wlJfGo8gnTDhQgQB0oD9CGsZ -----END CERTIFICATE-----Generated at Fri Apr 11 22:42:56 2025 by rpki-client