$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a168bf01-0c8b-3b5a-b925-ac31a99e6dae.roa File: a168bf01-0c8b-3b5a-b925-ac31a99e6dae.roa (raw, json) Hash identifier: FBYsDK6tD9TXvT9jUe84TRVvIT6iE/Iu7nDFXI/fzXU= Subject key identifier: 3F:C9:A5:A3:09:38:43:08:28:BA:29:E1:B4:12:70:A4:71:D3:9D:FC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E006788068F7AF0B2D3CFDF0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a168bf01-0c8b-3b5a-b925-ac31a99e6dae.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 20362 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:78:80:68:f7:af:0b:2d:3c:fd:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=4cabf46d-44b3-4d9b-b4d6-f6e17c789e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:28:ea:89:7b:08:84:4d:24:d3:71:84:9b:98: 74:f3:f0:b5:fd:5d:7f:dc:d0:19:f7:f0:ca:af:81: 85:a1:b3:74:b8:08:38:1a:24:7b:7f:a8:bd:ef:c5: 35:97:ac:8f:56:29:92:fe:63:65:39:87:9a:20:03: 21:d7:a6:60:b6:68:2b:87:f7:bd:28:e2:a9:ac:0e: 38:fd:e2:39:f6:56:0a:3d:18:ec:a2:8e:6e:8a:00: b2:f6:ab:1e:49:06:27:8d:5f:18:a5:f7:1f:92:b5: b0:e5:52:74:9f:18:fd:6c:78:80:3e:d6:dc:ae:aa: 23:99:29:7b:3c:20:94:53:27:d5:32:ca:14:7e:e2: 39:92:0b:d6:d1:4d:3e:78:d4:39:32:bf:32:bb:b9: b5:6f:f4:a3:b9:a6:84:f1:3c:11:f7:e8:a0:0b:4a: fc:9f:36:6a:ad:4c:5e:3b:dc:b9:5b:c9:6b:00:1b: 9a:27:6f:f1:e0:0e:15:04:05:79:45:f3:40:ea:a4: e6:00:7d:b7:0a:3a:9b:47:4e:60:98:a5:ab:3f:bc: fc:80:7d:ce:88:54:a0:40:ce:81:55:b5:4c:99:38: e4:8b:e9:c9:6a:89:bd:b3:7d:7f:51:65:dc:cf:f0: 10:73:77:4e:0a:ab:6b:0d:a4:b5:1a:bf:c1:8f:c2: 35:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C9:A5:A3:09:38:43:08:28:BA:29:E1:B4:12:70:A4:71:D3:9D:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a168bf01-0c8b-3b5a-b925-ac31a99e6dae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:8f:c1:41:1a:41:2d:58:fd:48:12:df:b9:53:e4:88:be:3c: ed:1b:c4:ce:13:d2:56:c9:c2:68:f7:1c:ab:9a:ec:fb:fe:d3: d6:fc:82:74:e1:16:6b:c1:b1:db:ca:8a:36:ec:51:ae:20:95: b8:65:bc:62:9d:49:1d:f7:35:33:d0:b9:0b:98:a8:09:80:1e: f0:ed:36:14:4a:62:a7:c8:98:fa:0a:42:6c:5f:5c:8f:7e:ca: 78:16:48:f4:94:fb:5d:54:91:f4:2b:7a:24:5a:22:5f:f4:5c: 70:a5:09:11:58:f3:8c:2d:38:9b:c6:8d:6b:87:70:dd:dd:98: 51:80:c9:7c:fb:70:a3:ec:4b:8e:82:e4:06:64:00:db:b0:82: b4:db:7f:2c:01:39:ed:88:eb:af:2d:69:3e:44:a1:ca:6c:07: 91:e9:05:00:48:22:22:6c:40:c1:0c:b1:15:b2:4b:8a:72:f8: fe:c0:7a:54:ff:4d:60:c1:8f:43:c9:8a:ee:09:fd:47:ee:6d: dd:1d:9b:6e:d8:f9:c5:79:7e:a1:c2:54:ad:2e:ac:f5:51:84: ea:ab:8b:18:fc:df:b8:8f:85:52:e9:63:82:3d:09:72:ff:ea: 1b:4b:c3:f7:34:67:81:f4:2e:79:51:12:33:00:c4:e4:c5:0d: 04:59:7f:5a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBniAaPevCy08/fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk NGNhYmY0NmQtNDRiMy00ZDliLWI0ZDYtZjZlMTdjNzg5ZTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSjqiXsIhE0k03GEm5h08/C1/V1/3NAZ9/DK r4GFobN0uAg4GiR7f6i978U1l6yPVimS/mNlOYeaIAMh16Zgtmgrh/e9KOKprA44 /eI59lYKPRjsoo5uigCy9qseSQYnjV8YpfcfkrWw5VJ0nxj9bHiAPtbcrqojmSl7 PCCUUyfVMsoUfuI5kgvW0U0+eNQ5Mr8yu7m1b/SjuaaE8TwR9+igC0r8nzZqrUxe O9y5W8lrABuaJ2/x4A4VBAV5RfNA6qTmAH23CjqbR05gmKWrP7z8gH3OiFSgQM6B VbVMmTjki+nJaom9s31/UWXcz/AQc3dOCqtrDaS1Gr/Bj8I15wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD/JpaMJOEMIKLop4bQScKRx0538MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTE2OGJmMDEtMGM4Yi0z YjVhLWI5MjUtYWMzMWE5OWU2ZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAlj8FBGkEtWP1IEt+5U+SIvjztG8TOE9JWycJo9xyrmuz7/tPW/IJ0 4RZrwbHbyoo27FGuIJW4ZbxinUkd9zUz0LkLmKgJgB7w7TYUSmKnyJj6CkJsX1yP fsp4Fkj0lPtdVJH0K3okWiJf9FxwpQkRWPOMLTibxo1rh3Dd3ZhRgMl8+3Cj7EuO guQGZADbsIK0238sATntiOuvLWk+RKHKbAeR6QUASCIibEDBDLEVskuKcvj+wHpU /01gwY9DyYruCf1H7m3dHZtu2PnFeX6hwlStLqz1UYTqq4sY/N+4j4VS6WOCPQly /+obS8P3NGeB9C55URIzAMTkxQ0EWX9a -----END CERTIFICATE-----Generated at Fri Apr 11 23:53:25 2025 by rpki-client