$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4442cc6f-c033-353e-b293-a37287581ab8.roa File: 4442cc6f-c033-353e-b293-a37287581ab8.roa (raw, json) Hash identifier: Fz3oEh3h+o+b3aOfjPdi0gqFJ7BUqsxKY2jbizphuZw= Subject key identifier: BA:4F:A9:CB:3E:FC:58:4C:B1:56:07:26:53:85:E7:5C:B0:AA:26:0A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E0067EE7C367B6E5EAD95580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4442cc6f-c033-353e-b293-a37287581ab8.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396563 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:7e:e7:c3:67:b6:e5:ea:d9:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=3ccfce6e-17bc-40e1-a08c-c63cd178c734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:27:47:17:7e:b5:2a:25:38:22:ad:70:d3:e2: 32:75:c5:a1:a2:8f:9c:74:1c:02:e4:db:26:87:c9: 6b:d6:bc:74:d8:ea:ee:2f:09:df:13:b3:96:ca:cc: 27:bd:b7:9d:2c:af:3c:54:63:6f:69:04:df:84:b8: c6:3d:79:3c:a8:00:9f:1c:eb:79:97:ed:75:5d:f5: 00:77:78:fe:58:6d:77:42:96:b0:ae:95:b8:49:9a: dd:6b:59:d7:02:a1:82:28:2c:4f:69:74:4b:30:f7: cf:93:b2:e5:65:40:d0:3d:75:12:d6:9c:b1:b4:6e: 80:b2:a9:76:22:6f:0a:de:c6:4c:65:f8:5e:48:b6: fc:3e:f2:fb:b2:8d:77:e9:45:43:61:76:59:04:d2: 5e:99:91:f3:aa:24:b6:42:b2:c6:19:ce:91:95:77: 13:61:a5:53:8d:73:94:28:8a:f0:0d:7d:81:60:30: fa:aa:b1:be:84:73:a5:7b:48:95:62:0f:30:9c:24: 95:72:41:4c:7c:35:45:ad:33:d3:4a:16:ad:fc:54: 59:b1:73:bc:c0:96:cf:69:c6:be:21:58:89:21:96: ec:23:d8:e5:49:09:a6:a8:40:80:e6:88:e3:a6:49: e9:12:bf:8b:03:1d:34:cc:40:27:d2:e2:f8:88:4c: 16:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4F:A9:CB:3E:FC:58:4C:B1:56:07:26:53:85:E7:5C:B0:AA:26:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4442cc6f-c033-353e-b293-a37287581ab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:da:94:1c:9c:c8:77:80:38:e9:b8:bb:c4:ea:38:d0:c1:38: 1a:de:01:c0:d6:3c:87:a1:8b:ea:97:87:5a:b1:d6:8d:f1:51: 49:2f:48:66:33:77:d9:bb:f6:49:fa:41:da:c8:8b:03:64:b7: bb:69:e5:07:4e:f1:46:fb:8b:b0:be:e9:52:b0:83:97:f0:68: 31:a1:e3:3d:e3:12:5f:bc:5c:09:fa:bb:bc:cd:90:fd:9e:cb: 8c:73:d7:a7:ab:0a:23:9b:59:5b:be:b4:9f:d6:be:ee:98:ed: 43:72:4d:06:26:38:d3:dd:ea:8b:c6:75:2e:d7:45:e3:4f:16: cf:1d:b2:7c:07:ca:b2:94:be:37:d9:0a:10:49:08:18:27:9d: d5:25:7a:8e:40:48:71:49:bc:05:05:f4:15:d1:e7:81:47:66: c9:6b:ff:52:76:69:24:96:e5:6e:bc:d7:7a:2c:59:43:8b:f3: 93:4f:c5:e3:11:d5:10:ca:80:fa:8e:ff:e9:02:7d:ee:c0:41: b6:49:3d:b5:a8:3b:1c:b2:a5:be:82:c9:c6:e2:30:e9:b1:7c: 4c:9d:fa:d2:68:8b:6b:ef:f0:e9:33:d0:80:cc:6b:11:1d:ef: 04:08:a6:e0:d0:94:ba:14:61:6f:57:43:08:7d:50:fe:97:0c: 4c:ab:fa:67 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBn7nw2e25erZVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk M2NjZmNlNmUtMTdiYy00MGUxLWEwOGMtYzYzY2QxNzhjNzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCdHF361KiU4Iq1w0+IydcWhoo+cdBwC5Nsm h8lr1rx02OruLwnfE7OWyswnvbedLK88VGNvaQTfhLjGPXk8qACfHOt5l+11XfUA d3j+WG13QpawrpW4SZrda1nXAqGCKCxPaXRLMPfPk7LlZUDQPXUS1pyxtG6Asql2 Im8K3sZMZfheSLb8PvL7so136UVDYXZZBNJemZHzqiS2QrLGGc6RlXcTYaVTjXOU KIrwDX2BYDD6qrG+hHOle0iVYg8wnCSVckFMfDVFrTPTShat/FRZsXO8wJbPaca+ IViJIZbsI9jlSQmmqECA5ojjpknpEr+LAx00zEAn0uL4iEwWHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLpPqcs+/FhMsVYHJlOF51ywqiYKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDQ0MmNjNmYtYzAzMy0z NTNlLWIyOTMtYTM3Mjg3NTgxYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBg2pQcnMh3gDjpuLvE6jjQwTga3gHA1jyHoYvql4dasdaN8VFJL0hm M3fZu/ZJ+kHayIsDZLe7aeUHTvFG+4uwvulSsIOX8GgxoeM94xJfvFwJ+ru8zZD9 nsuMc9enqwojm1lbvrSf1r7umO1Dck0GJjjT3eqLxnUu10XjTxbPHbJ8B8qylL43 2QoQSQgYJ53VJXqOQEhxSbwFBfQV0eeBR2bJa/9SdmkkluVuvNd6LFlDi/OTT8Xj EdUQyoD6jv/pAn3uwEG2ST21qDscsqW+gsnG4jDpsXxMnfrSaItr7/DpM9CAzGsR He8ECKbg0JS6FGFvV0MIfVD+lwxMq/pn -----END CERTIFICATE-----Generated at Sat Apr 12 00:15:18 2025 by rpki-client