$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c075850c-7b2c-3da9-bcc1-1856a9e7aee0.roa File: c075850c-7b2c-3da9-bcc1-1856a9e7aee0.roa (raw, json) Hash identifier: dKnAAlX43QSVNSIdvmJXMTVyQwPy/l73NIcJb05c7Wk= Subject key identifier: 56:2F:A8:22:59:1B:1C:B8:DF:C4:CA:5B:1E:AA:8E:65:C7:8D:EE:E8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E00682CC27A65C18B553A400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c075850c-7b2c-3da9-bcc1-1856a9e7aee0.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396557 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:82:cc:27:a6:5c:18:b5:53:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=86ae5d0e-ea7b-4546-b2bb-00dff7247110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ac:39:81:8d:48:d0:70:7a:99:77:5e:ee:d7: 81:d3:bf:66:cd:6b:f6:9a:f8:bd:2e:d9:90:57:e1: f6:c9:de:da:a7:ba:2c:44:4e:1f:69:de:15:eb:b2: 32:17:38:3c:c9:cb:3b:ab:f5:ad:da:30:c8:82:2e: 54:71:40:82:6a:78:60:b7:82:41:35:4f:0c:64:ac: 00:c4:8b:58:e6:7c:bf:70:c2:12:91:01:26:ea:21: 67:ce:96:52:f2:ae:a9:1a:9e:ab:52:70:56:1a:5d: 69:c4:21:07:f9:db:3f:f3:68:41:b0:2c:5f:1f:c6: 39:5c:67:e5:05:6b:21:7b:83:c6:2f:38:b2:0b:02: 08:aa:52:35:e9:21:5e:78:bb:83:95:d6:21:b8:c6: b3:77:32:a0:61:78:4b:f2:27:e5:94:d7:8b:9b:65: d8:96:d1:78:94:65:ad:14:55:38:fe:05:ef:79:b1: 77:cf:0a:b0:01:d4:49:bc:b6:ad:a4:4d:dd:c9:a4: 74:70:75:b7:31:7e:3c:51:57:08:f6:8b:70:a9:bb: 20:25:1e:d1:7e:b3:94:e6:c3:66:81:11:42:88:74: e2:f5:b8:c0:c4:09:67:7a:2b:6e:5d:a6:90:92:a8: 80:4a:35:9b:0f:b5:80:f9:8d:33:28:60:9d:aa:5d: 2a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2F:A8:22:59:1B:1C:B8:DF:C4:CA:5B:1E:AA:8E:65:C7:8D:EE:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c075850c-7b2c-3da9-bcc1-1856a9e7aee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:70:f5:f0:d4:de:de:91:37:b0:f0:cd:a6:e5:33:44:bd:8e: 77:46:29:e6:04:db:67:1f:b6:1b:3e:5f:d1:cc:1b:cf:c0:e4: b1:04:a3:bb:46:5f:82:0b:cf:d9:45:2b:ad:16:50:51:e9:52: 72:c2:bc:c7:87:8c:6b:5a:95:79:7f:26:bd:d9:72:00:75:f5: 95:39:d0:8f:19:64:81:6d:19:43:b2:d5:58:8e:e8:30:a5:58: 0c:5f:75:ab:6c:40:ab:c0:cb:8e:5d:7b:82:66:62:2f:d7:12: 47:ae:d1:4e:a8:6a:db:67:b7:8e:48:83:84:63:e1:09:22:1a: f6:ec:1b:9d:12:9d:ef:6f:9e:f5:8b:e0:15:d4:3d:f3:b2:00: 29:1f:c7:1d:aa:f3:7b:68:5d:04:a2:df:8a:f7:14:77:ab:35: 2d:3f:73:8b:46:9b:02:00:b7:5b:4c:58:c2:82:64:29:50:52: 7f:cc:0d:f7:9a:e1:92:ae:73:47:ff:be:5c:c9:e2:dd:39:1f: 8d:f2:bc:1b:d6:c2:9a:54:27:6c:3c:dc:8a:dd:f3:5a:83:06: a1:69:10:26:60:e1:cd:37:ae:27:c3:0f:8f:7e:37:18:d1:9e: b6:b3:0b:92:95:49:8c:dc:a2:dd:f7:8d:22:ff:08:a7:91:7b: 49:5f:ee:0f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBoLMJ6ZcGLVTpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ODZhZTVkMGUtZWE3Yi00NTQ2LWIyYmItMDBkZmY3MjQ3MTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6w5gY1I0HB6mXde7teB079mzWv2mvi9LtmQ V+H2yd7ap7osRE4fad4V67IyFzg8ycs7q/Wt2jDIgi5UcUCCanhgt4JBNU8MZKwA xItY5ny/cMISkQEm6iFnzpZS8q6pGp6rUnBWGl1pxCEH+ds/82hBsCxfH8Y5XGfl BWshe4PGLziyCwIIqlI16SFeeLuDldYhuMazdzKgYXhL8ifllNeLm2XYltF4lGWt FFU4/gXvebF3zwqwAdRJvLatpE3dyaR0cHW3MX48UVcI9otwqbsgJR7RfrOU5sNm gRFCiHTi9bjAxAlneituXaaQkqiASjWbD7WA+Y0zKGCdql0q+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFYvqCJZGxy438TKWx6qjmXHje7oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzA3NTg1MGMtN2IyYy0z ZGE5LWJjYzEtMTg1NmE5ZTdhZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBAcPXw1N7ekTew8M2m5TNEvY53RinmBNtnH7YbPl/RzBvPwOSxBKO7 Rl+CC8/ZRSutFlBR6VJywrzHh4xrWpV5fya92XIAdfWVOdCPGWSBbRlDstVYjugw pVgMX3WrbECrwMuOXXuCZmIv1xJHrtFOqGrbZ7eOSIOEY+EJIhr27BudEp3vb571 i+AV1D3zsgApH8cdqvN7aF0Eot+K9xR3qzUtP3OLRpsCALdbTFjCgmQpUFJ/zA33 muGSrnNH/75cyeLdOR+N8rwb1sKaVCdsPNyK3fNagwahaRAmYOHNN64nww+PfjcY 0Z62swuSlUmM3KLd940i/winkXtJX+4P -----END CERTIFICATE-----Generated at Sat Apr 12 01:36:30 2025 by rpki-client