$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b82921e-6a27-38d4-b5a5-e15f8dea8e52.roa File: 1b82921e-6a27-38d4-b5a5-e15f8dea8e52.roa (raw, json) Hash identifier: 59tNf3shnC106+6y5damg8gxBFR16snQV+Gitm7fcfw= Subject key identifier: 7B:B6:B2:E8:E2:39:1F:B9:77:70:71:57:EE:6D:0F:D9:63:CF:EC:E1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E00684BDC55A3D39D53AB3C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b82921e-6a27-38d4-b5a5-e15f8dea8e52.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 397208 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:84:bd:c5:5a:3d:39:d5:3a:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=28ba4b66-ea88-4ff1-b09b-2f2ca51f0a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fa:10:60:3e:cb:54:ae:1c:28:2e:8b:28:ae: 38:8a:ef:2c:93:ab:89:e8:53:c7:9d:69:e2:5b:8a: 25:b6:5a:53:a8:c4:02:24:e5:ba:b8:ae:db:22:27: 36:f2:88:82:76:fe:ce:5b:d0:9d:69:43:1b:19:29: 2f:f8:c4:8f:25:75:60:3e:10:3f:f9:06:7b:38:b1: b3:b6:f9:c4:04:75:4e:99:d7:f7:0c:84:f0:8e:72: 03:70:6c:f5:79:3f:64:9a:c5:38:3f:76:4b:ea:2a: 27:43:28:4c:fb:84:e4:a9:5c:ff:09:bc:29:ce:38: 6d:27:be:1b:ca:ee:00:28:9d:6a:2a:0e:79:18:e9: 8a:e9:aa:ab:27:76:2a:51:51:ba:3a:4d:ed:c7:b8: f3:de:ac:ce:d5:cd:0b:14:b8:06:20:27:15:44:cb: ad:ee:be:16:df:a7:4d:02:31:f0:f1:fe:2a:32:fe: 28:10:83:51:cb:86:59:53:71:7a:62:27:2e:be:c7: 40:55:81:5d:34:31:5b:d5:8b:dc:e5:ee:b9:4f:59: a9:55:8d:5e:91:1b:f3:95:38:09:73:5c:d9:83:2e: 40:49:25:a3:77:be:5a:2f:f6:c7:f3:3d:91:93:72: 4e:53:07:7c:a4:d4:6d:9e:c2:cf:6c:bb:57:2c:32: 6b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B6:B2:E8:E2:39:1F:B9:77:70:71:57:EE:6D:0F:D9:63:CF:EC:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b82921e-6a27-38d4-b5a5-e15f8dea8e52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d1:c8:e8:af:a6:83:0c:d6:01:6e:08:85:28:c9:68:94:20: d5:c7:2e:01:c0:b0:79:36:c5:eb:65:98:99:71:8a:e7:3d:e2: 3d:4e:af:56:5a:ab:34:4c:7d:21:8c:a7:ba:7d:ad:2e:a5:30: 09:78:c9:55:1b:00:d9:16:4a:f0:f8:ad:2c:aa:d4:35:72:3f: a1:49:df:53:ef:e9:0d:e7:db:5b:f9:8a:b6:40:d1:7d:a2:90: 0c:58:d4:74:4e:04:5f:bd:8b:f5:e3:c1:e4:8b:93:21:34:c8: e1:eb:93:b0:3e:fa:38:3a:30:cc:7f:da:69:98:fb:e0:dd:88: 79:a6:80:ea:b1:01:d1:cb:96:9e:03:e0:30:86:64:7b:da:14: c7:e1:8e:27:a0:c9:cf:53:6e:32:41:e4:86:87:35:44:de:67: 40:45:13:35:a6:be:3d:a6:23:8f:43:35:f5:fb:90:b2:10:02: 15:77:43:f2:12:83:c0:fd:ee:be:01:d9:93:6d:c4:33:3c:17: c8:5f:3e:73:e9:cc:dc:f1:8d:5a:93:a3:b7:67:e5:ac:6a:d2: 20:6a:34:88:12:a1:c3:1c:b0:82:63:b2:6b:cd:38:b2:cf:70: 2f:2f:7a:70:a4:61:49:66:30:93:4b:18:0c:4a:b9:8e:dd:af: 80:c5:85:b5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBoS9xVo9OdU6s8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk MjhiYTRiNjYtZWE4OC00ZmYxLWIwOWItMmYyY2E1MWYwYThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfoQYD7LVK4cKC6LKK44iu8sk6uJ6FPHnWni W4oltlpTqMQCJOW6uK7bIic28oiCdv7OW9CdaUMbGSkv+MSPJXVgPhA/+QZ7OLGz tvnEBHVOmdf3DITwjnIDcGz1eT9kmsU4P3ZL6ionQyhM+4TkqVz/CbwpzjhtJ74b yu4AKJ1qKg55GOmK6aqrJ3YqUVG6Ok3tx7jz3qzO1c0LFLgGICcVRMut7r4W36dN AjHw8f4qMv4oEINRy4ZZU3F6YicuvsdAVYFdNDFb1Yvc5e65T1mpVY1ekRvzlTgJ c1zZgy5ASSWjd75aL/bH8z2Rk3JOUwd8pNRtnsLPbLtXLDJrywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHu2sujiOR+5d3BxV+5tD9ljz+zhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWI4MjkyMWUtNmEyNy0z OGQ0LWI1YTUtZTE1ZjhkZWE4ZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAZ0cjor6aDDNYBbgiFKMlolCDVxy4BwLB5NsXrZZiZcYrnPeI9Tq9W Wqs0TH0hjKe6fa0upTAJeMlVGwDZFkrw+K0sqtQ1cj+hSd9T7+kN59tb+Yq2QNF9 opAMWNR0TgRfvYv148Hki5MhNMjh65OwPvo4OjDMf9ppmPvg3Yh5poDqsQHRy5ae A+AwhmR72hTH4Y4noMnPU24yQeSGhzVE3mdARRM1pr49piOPQzX1+5CyEAIVd0Py EoPA/e6+AdmTbcQzPBfIXz5z6czc8Y1ak6O3Z+WsatIgajSIEqHDHLCCY7JrzTiy z3AvL3pwpGFJZjCTSxgMSrmO3a+AxYW1 -----END CERTIFICATE-----Generated at Sat Apr 12 02:03:38 2025 by rpki-client