$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c9297fa-98b4-3381-9e3c-cd6e8b303481.roa File: 4c9297fa-98b4-3381-9e3c-cd6e8b303481.roa (raw, json) Hash identifier: 6CYmFTpupH8mIFLvBtNSOp/JfiC0j72MqqLnzQm0APg= Subject key identifier: 02:CA:2E:78:2F:18:7D:35:F8:A2:27:1D:E8:49:41:47:D2:12:6B:5F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E006848FB0B928CF3D3D0840 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c9297fa-98b4-3381-9e3c-cd6e8b303481.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396564 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:84:8f:b0:b9:28:cf:3d:3d:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=ff292719-780c-489c-96f8-215a668eca8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:17:0e:64:fc:a3:6f:71:74:4d:4e:9b:df:9f: 18:db:54:5a:c9:64:98:d8:aa:e0:94:e9:bd:c1:56: 55:61:60:92:ff:61:fb:63:f7:87:4d:ad:46:a4:91: 8b:7e:33:e4:8c:75:90:9b:f6:b9:53:b3:86:83:8b: e8:34:f2:f0:db:19:1c:92:4a:a9:51:12:80:90:c5: 25:1b:d2:42:a6:e5:ee:75:27:80:af:ab:06:27:8d: 8f:98:b5:7c:b0:85:72:68:21:76:16:ed:ec:58:3a: 20:c4:7c:27:16:bb:64:d7:fc:23:25:3a:8f:99:30: 28:43:7a:9e:14:a6:ad:c0:95:15:59:2b:93:21:28: dd:9d:72:ed:88:4e:bb:94:a2:cf:fa:52:4f:d2:cc: 88:57:d1:2b:81:83:ee:0d:b3:ef:b6:97:02:39:da: 51:3c:e3:01:c5:fa:36:3a:f9:ea:f4:64:9a:16:3e: 89:2c:c7:a6:36:40:b9:ae:ce:fa:ba:68:2a:87:33: 0d:12:51:14:d3:5f:9d:d1:fe:c6:22:d3:70:c4:ad: 05:fc:5a:a0:79:d0:97:11:5e:f5:97:a4:3c:90:38: 38:34:dc:f2:75:0a:57:3c:a3:e3:57:93:4f:0b:34: 84:55:ce:6f:ad:6e:4c:ec:15:c6:d2:7a:c4:be:7e: 17:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CA:2E:78:2F:18:7D:35:F8:A2:27:1D:E8:49:41:47:D2:12:6B:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c9297fa-98b4-3381-9e3c-cd6e8b303481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:c9:4c:57:f8:5f:90:2e:4c:ee:f9:81:66:c5:c1:e8:c3:a7: 1e:95:d6:22:8a:6a:6c:ef:c1:90:f5:81:a1:8f:1b:32:91:49: aa:e8:17:cf:83:e8:21:ef:d3:37:35:f9:99:29:c2:9d:14:10: 46:59:ba:d2:32:25:83:9d:da:cc:2b:da:52:c3:d7:d6:e1:64: d4:ef:e7:d5:65:35:7d:b8:9d:df:e1:3b:e2:10:bd:bb:84:07: b4:c8:21:29:f7:ac:fe:0c:43:d2:76:2d:35:46:d1:17:cd:a9: 42:47:62:17:91:ff:fa:9d:be:f2:f1:b0:f8:54:13:3a:38:5a: 30:90:54:3d:83:22:be:c3:cb:e2:c0:43:db:9e:16:35:8c:24: f1:43:25:b4:61:3a:19:74:6d:99:94:6e:3d:85:9b:c4:93:3f: b1:f5:e3:81:0e:37:71:1a:fe:e8:8c:b0:18:8d:96:46:18:11: 6a:f5:8d:2d:95:cd:a8:86:99:d6:b8:7e:32:8b:df:42:f7:57: 29:e6:35:6f:34:0e:13:d9:87:f8:01:6a:40:69:a0:bb:c9:b0: 33:cf:52:62:6c:24:fb:f7:f6:18:cc:d2:e9:f6:72:73:62:fc: af:58:64:15:a8:f4:84:84:bb:50:a5:9a:7c:d6:1a:73:28:8f: 37:98:1f:64 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBoSPsLkozz09CEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZmYyOTI3MTktNzgwYy00ODljLTk2ZjgtMjE1YTY2OGVjYThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxcOZPyjb3F0TU6b358Y21RayWSY2KrglOm9 wVZVYWCS/2H7Y/eHTa1GpJGLfjPkjHWQm/a5U7OGg4voNPLw2xkckkqpURKAkMUl G9JCpuXudSeAr6sGJ42PmLV8sIVyaCF2Fu3sWDogxHwnFrtk1/wjJTqPmTAoQ3qe FKatwJUVWSuTISjdnXLtiE67lKLP+lJP0syIV9ErgYPuDbPvtpcCOdpRPOMBxfo2 Ovnq9GSaFj6JLMemNkC5rs76umgqhzMNElEU01+d0f7GItNwxK0F/FqgedCXEV71 l6Q8kDg4NNzydQpXPKPjV5NPCzSEVc5vrW5M7BXG0nrEvn4XZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFALKLngvGH01+KInHehJQUfSEmtfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGM5Mjk3ZmEtOThiNC0z MzgxLTllM2MtY2Q2ZThiMzAzNDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDyUxX+F+QLkzu+YFmxcHow6celdYiimps78GQ9YGhjxsykUmq6BfP g+gh79M3NfmZKcKdFBBGWbrSMiWDndrMK9pSw9fW4WTU7+fVZTV9uJ3f4TviEL27 hAe0yCEp96z+DEPSdi01RtEXzalCR2IXkf/6nb7y8bD4VBM6OFowkFQ9gyK+w8vi wEPbnhY1jCTxQyW0YToZdG2ZlG49hZvEkz+x9eOBDjdxGv7ojLAYjZZGGBFq9Y0t lc2ohpnWuH4yi99C91cp5jVvNA4T2Yf4AWpAaaC7ybAzz1JibCT79/YYzNLp9nJz YvyvWGQVqPSEhLtQpZp81hpzKI83mB9k -----END CERTIFICATE-----Generated at Fri Apr 11 23:52:20 2025 by rpki-client