$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b17fe67-f014-318e-a766-667fa5056720.roa File: 3b17fe67-f014-318e-a766-667fa5056720.roa (raw, json) Hash identifier: UsQBdutfULOY2o+gwt6O6OByPlJXf84Mk5LEiUsZEQY= Subject key identifier: 36:C3:93:78:E1:FD:39:29:1C:7B:A8:23:91:50:45:92:E7:A9:2F:1D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E0067D13591A37E6DCB2D820 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b17fe67-f014-318e-a766-667fa5056720.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396611 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:7d:13:59:1a:37:e6:dc:b2:d8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=df38cd80-7c0a-48a4-be74-e0545eeb5ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6c:88:f8:ff:72:52:f2:f5:3b:7a:13:ad:5d: 73:7d:fe:a2:4d:fa:b9:23:0a:bb:85:68:c8:23:b0: 98:b4:72:a7:19:f9:cc:8a:bd:af:1b:cd:03:53:45: b7:e1:bb:fe:fd:b2:24:00:f0:c5:84:7a:7a:d9:b6: 2f:87:f9:83:3f:92:a9:af:2f:ea:4d:42:7b:ed:60: df:f5:75:bf:d3:06:12:fc:0c:46:b6:ea:a3:48:37: 9c:c3:dd:40:a5:3b:db:7f:e1:cc:57:aa:61:30:f7: 60:1f:e7:6e:17:79:dc:16:b3:36:c2:26:9a:f3:f6: 7d:5a:1b:b0:9f:9e:91:f7:f3:2a:55:5e:bd:9c:00: f1:1b:b9:b2:cf:a5:95:e5:5b:33:0c:9a:30:c0:87: 56:74:c8:ee:c3:db:34:af:9d:c4:2d:ed:b0:70:a2: 5a:88:21:5b:2f:bc:37:00:c2:d9:2e:ab:67:1d:04: 4e:9c:14:42:25:5f:71:99:7b:23:ea:2c:76:e9:3d: bc:cc:0a:ff:f4:5b:e7:ca:b3:26:3e:69:00:b0:71: 91:8c:1a:d0:d6:b9:2a:cb:ef:10:5b:e3:26:34:fe: 0f:7a:88:0c:8f:1c:ed:6e:4f:70:5a:4e:44:74:f0: 6e:cd:78:38:69:41:d6:a7:7e:e4:41:06:7b:33:50: f1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C3:93:78:E1:FD:39:29:1C:7B:A8:23:91:50:45:92:E7:A9:2F:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b17fe67-f014-318e-a766-667fa5056720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:17:a7:a6:50:ba:9a:55:01:91:68:ce:21:19:8e:20:25:20: 7a:e6:cc:f7:17:a3:f1:83:95:1d:8a:a8:a5:90:1a:62:ae:25: 28:fe:7d:e1:40:6d:35:77:4c:0f:b9:04:07:78:27:9e:08:dc: 66:7f:76:bf:c2:82:6b:d5:91:fc:fa:07:02:f8:e0:0b:f3:8e: 93:31:7e:29:28:2c:fa:cf:1e:eb:6a:3d:e2:aa:17:4f:3e:5b: 6b:21:5b:6f:6c:a8:1c:fa:70:8b:a6:71:59:ae:a5:e3:64:dd: 76:7e:5b:e3:47:f1:d9:ca:98:37:c2:b8:2b:9a:fd:8e:62:09: b6:a1:11:13:0d:f6:b4:8f:1b:ba:a8:c8:01:be:84:48:e8:79: 79:82:a3:6c:b5:d5:e9:3c:a4:e9:3f:46:69:b5:cd:aa:a9:30: bf:f0:2a:ec:76:0b:80:95:c7:c5:1a:1c:c6:68:77:4b:fc:4e: 32:c9:38:68:36:bb:a1:fa:ca:ae:f3:4b:08:7e:c2:fc:4b:03: e2:24:60:c7:f7:96:f4:64:ce:5c:37:8c:7e:3c:c6:bd:31:80: c7:78:3b:12:15:b8:92:b7:aa:5a:d3:6f:c4:c4:60:92:ad:99: 0f:aa:c6:af:a8:38:ea:72:b6:2d:0e:02:cb:27:79:00:44:2d: 56:5f:7d:63 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBn0TWRo35tyy2CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZGYzOGNkODAtN2MwYS00OGE0LWJlNzQtZTA1NDVlZWI1ZmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWyI+P9yUvL1O3oTrV1zff6iTfq5Iwq7hWjI I7CYtHKnGfnMir2vG80DU0W34bv+/bIkAPDFhHp62bYvh/mDP5Kpry/qTUJ77WDf 9XW/0wYS/AxGtuqjSDecw91ApTvbf+HMV6phMPdgH+duF3ncFrM2wiaa8/Z9Whuw n56R9/MqVV69nADxG7myz6WV5VszDJowwIdWdMjuw9s0r53ELe2wcKJaiCFbL7w3 AMLZLqtnHQROnBRCJV9xmXsj6ix26T28zAr/9FvnyrMmPmkAsHGRjBrQ1rkqy+8Q W+MmNP4PeogMjxztbk9wWk5EdPBuzXg4aUHWp37kQQZ7M1DxvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDbDk3jh/TkpHHuoI5FQRZLnqS8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2IxN2ZlNjctZjAxNC0z MThlLWE3NjYtNjY3ZmE1MDU2NzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA/F6emULqaVQGRaM4hGY4gJSB65sz3F6Pxg5UdiqilkBpiriUo/n3h QG01d0wPuQQHeCeeCNxmf3a/woJr1ZH8+gcC+OAL846TMX4pKCz6zx7raj3iqhdP PltrIVtvbKgc+nCLpnFZrqXjZN12flvjR/HZypg3wrgrmv2OYgm2oRETDfa0jxu6 qMgBvoRI6Hl5gqNstdXpPKTpP0Zptc2qqTC/8CrsdguAlcfFGhzGaHdL/E4yyTho Nruh+squ80sIfsL8SwPiJGDH95b0ZM5cN4x+PMa9MYDHeDsSFbiSt6pa02/ExGCS rZkPqsavqDjqcrYtDgLLJ3kARC1WX31j -----END CERTIFICATE-----Generated at Fri Apr 11 23:56:42 2025 by rpki-client