$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b721686-3bd0-30a8-abbb-e701f8eff2e1.roa File: 5b721686-3bd0-30a8-abbb-e701f8eff2e1.roa (raw, json) Hash identifier: Z/7c8r5Nk1saHd/HDDgGgblwxZJcnihlzv6Y27SfQKQ= Subject key identifier: 7A:59:6A:D8:F0:30:2E:6A:16:3A:F8:90:60:6B:E7:9A:1E:EB:27:AE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E006810DF7440AC3AC2C0B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b721686-3bd0-30a8-abbb-e701f8eff2e1.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396554 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:81:0d:f7:44:0a:c3:ac:2c:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=570938dd-bf30-4509-88aa-2bb3b32a47b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:d4:e3:16:bd:ba:59:45:95:15:6e:e3:4f: fd:90:e3:10:80:ce:ad:99:99:6b:36:8d:80:b3:60: a8:74:35:2f:5b:6a:d2:07:0e:c4:38:63:69:af:43: 9c:03:75:fc:f5:9b:38:64:6c:61:67:84:fb:ad:63: ac:37:0b:27:6d:59:12:ce:5f:b0:e1:45:c0:02:3c: 29:37:2b:6a:47:3b:8f:33:7a:ef:b0:25:8f:5e:db: 0a:74:de:80:c8:99:75:86:1f:31:e5:27:ab:d1:52: f7:80:af:67:7f:8c:07:d8:7b:40:81:32:51:93:b0: 35:fe:5b:ed:a9:4a:28:85:c3:a0:a9:7d:d5:90:af: f6:bf:a5:a9:53:12:81:ff:7a:ec:b6:b3:96:06:ef: ce:82:16:57:a2:c0:e4:26:cd:d0:c7:36:f4:75:65: 88:4d:14:6a:b2:80:8f:b3:17:ce:b7:92:1c:5d:bb: 7c:93:62:45:a6:4d:d2:8f:2d:b4:23:ae:db:42:d7: 13:e9:3c:b5:a7:60:a8:a5:85:97:88:af:c2:c9:ea: fa:e7:3a:7c:32:06:26:82:61:54:a8:ee:fd:f7:0b: d5:21:e1:23:19:a4:77:f9:36:a8:a8:99:5e:36:67: 55:f6:94:c1:fb:2a:1c:b5:6c:96:e3:fb:53:c4:8e: 8d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:59:6A:D8:F0:30:2E:6A:16:3A:F8:90:60:6B:E7:9A:1E:EB:27:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5b721686-3bd0-30a8-abbb-e701f8eff2e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:28:95:bb:57:61:cc:9f:00:1e:0e:d6:1d:6b:55:de:b6:8e: f8:09:10:d3:11:84:0a:16:30:c7:fd:f8:98:a0:24:a4:67:4c: 2a:8b:fb:20:aa:59:17:59:a0:89:37:5b:40:43:27:54:f9:c4: b1:81:80:ea:c0:1a:6f:38:a6:b7:2f:79:38:63:4a:2d:f6:ef: 0b:94:76:cf:44:c2:82:7a:50:3f:c7:0c:cb:30:d4:9f:65:69: 94:4d:c1:6a:42:ac:c3:22:9a:ab:8e:3a:01:90:35:1e:fc:69: 80:8a:2d:b6:83:66:cf:8a:d8:ad:9f:f3:64:1a:21:fd:09:03: 1a:dd:57:ed:21:60:01:69:a6:97:56:60:11:8f:b5:56:41:64: 27:6a:09:83:7f:f3:6a:48:11:85:fe:0c:d4:80:20:52:de:8b: 44:d7:aa:08:5d:47:63:02:c5:78:62:48:5b:0f:f2:29:17:d6: 7b:00:21:6f:5b:b6:a3:10:23:1a:c3:4f:b8:87:d8:c8:58:70: ac:a1:a9:fe:00:6b:f0:7d:f2:00:44:0c:8b:eb:a6:30:d2:f0: 08:d0:ae:7f:4a:3f:ec:e5:5d:7a:90:0b:fe:64:9d:4c:9c:c8: 29:d3:53:46:88:69:50:7c:d1:d4:28:79:50:9b:84:8e:25:ff: d1:f7:c8:b6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBoEN90QKw6wsC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk NTcwOTM4ZGQtYmYzMC00NTA5LTg4YWEtMmJiM2IzMmE0N2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwrU4xa9ullFlRVu40/9kOMQgM6tmZlrNo2A s2CodDUvW2rSBw7EOGNpr0OcA3X89Zs4ZGxhZ4T7rWOsNwsnbVkSzl+w4UXAAjwp NytqRzuPM3rvsCWPXtsKdN6AyJl1hh8x5Ser0VL3gK9nf4wH2HtAgTJRk7A1/lvt qUoohcOgqX3VkK/2v6WpUxKB/3rstrOWBu/OghZXosDkJs3Qxzb0dWWITRRqsoCP sxfOt5IcXbt8k2JFpk3Sjy20I67bQtcT6Ty1p2CopYWXiK/Cyer65zp8MgYmgmFU qO799wvVIeEjGaR3+TaoqJleNmdV9pTB+yoctWyW4/tTxI6NjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHpZatjwMC5qFjr4kGBr55oe6yeuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWI3MjE2ODYtM2JkMC0z MGE4LWFiYmItZTcwMWY4ZWZmMmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCKKJW7V2HMnwAeDtYda1Xeto74CRDTEYQKFjDH/fiYoCSkZ0wqi/sg qlkXWaCJN1tAQydU+cSxgYDqwBpvOKa3L3k4Y0ot9u8LlHbPRMKCelA/xwzLMNSf ZWmUTcFqQqzDIpqrjjoBkDUe/GmAii22g2bPititn/NkGiH9CQMa3VftIWABaaaX VmARj7VWQWQnagmDf/NqSBGF/gzUgCBS3otE16oIXUdjAsV4YkhbD/IpF9Z7ACFv W7ajECMaw0+4h9jIWHCsoan+AGvwffIARAyL66Yw0vAI0K5/Sj/s5V16kAv+ZJ1M nMgp01NGiGlQfNHUKHlQm4SOJf/R98i2 -----END CERTIFICATE-----Generated at Sat Apr 12 00:03:40 2025 by rpki-client