$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8dfa8ec-1f57-3431-962a-33787eea5e55.roa File: f8dfa8ec-1f57-3431-962a-33787eea5e55.roa (raw, json) Hash identifier: qZbMFs8incjfuMI6xKj7MMvajdGxUg9E4Nufy6v3qQk= Subject key identifier: 84:F5:B8:D2:D7:25:46:55:48:F7:C3:A2:B5:66:80:19:85:37:13:A8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E0067B23E1115FD6B7705240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8dfa8ec-1f57-3431-962a-33787eea5e55.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396543 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:7b:23:e1:11:5f:d6:b7:70:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=41d41030-1bcf-4f72-82c7-3b420de78c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:03:48:03:fc:6e:e8:cf:ec:83:e3:0a:f1:88: 1f:b4:11:9e:93:31:39:a2:b2:45:63:49:b3:96:8b: 15:3e:4f:fa:c0:8e:0e:4f:21:95:d0:0e:6c:53:ad: ba:53:c9:06:1d:18:34:c5:fc:d6:d4:af:e2:65:42: 7f:b3:e2:25:95:f7:57:68:6f:b3:f5:f1:a6:fb:11: dc:b2:ab:65:7b:67:56:e6:cd:f9:59:0d:d9:b0:de: a3:be:a1:2c:c7:b4:b3:a7:a5:88:78:5d:c2:2b:2a: 99:f0:38:c8:bb:5b:d6:d5:bb:29:06:d9:26:87:b4: a2:57:b5:f1:63:6b:9d:b2:34:02:8e:64:83:32:b5: 20:11:28:5f:33:13:81:83:01:68:0f:95:d4:7b:65: d3:09:0c:6d:19:60:02:08:81:48:cc:36:a8:f8:14: 9e:a6:d9:96:3b:c1:e8:db:a9:b8:b2:39:f8:40:77: 95:67:3b:c1:a2:52:06:26:84:a2:c0:a8:d2:ee:5b: 82:0b:d8:97:72:fa:15:ed:fd:86:59:57:6c:11:e4: f6:5a:90:3c:56:69:f5:34:c3:56:53:66:28:f0:8c: c7:be:2b:b6:90:f1:16:4f:94:1a:12:16:02:d9:b5: 73:dd:3e:a0:9c:29:0f:20:ef:2b:87:87:0f:bd:8f: 9a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F5:B8:D2:D7:25:46:55:48:F7:C3:A2:B5:66:80:19:85:37:13:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8dfa8ec-1f57-3431-962a-33787eea5e55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:9f:54:03:89:0c:2c:be:87:ff:e5:d2:fd:d8:3d:9d:25:7c: 9d:8a:b0:4c:5e:7f:86:27:6f:d9:06:e7:e6:bb:86:28:81:9e: 48:88:51:c7:da:84:a3:74:26:dd:2b:92:8d:3e:cd:90:ed:44: 86:ef:7a:20:5e:cd:ed:03:ab:37:01:88:76:db:f4:30:44:ab: 17:bc:ab:1e:22:1a:5d:6b:70:4b:a0:19:da:a8:0e:c5:6b:9f: 44:57:17:ec:00:78:a9:dc:ca:3b:3b:89:bd:36:da:8a:c2:6f: 65:ad:b9:86:96:8a:da:26:32:68:fc:c8:74:28:2b:80:29:23: 88:ff:70:cc:ba:ed:09:10:2d:d5:29:85:ea:23:54:15:33:a9: 18:25:6f:46:78:7c:8c:b7:48:91:dd:94:22:a9:26:b0:8d:3d: 2b:6b:8c:8f:99:26:f7:34:f6:6b:c1:9b:3a:04:a9:3f:cb:3d: 51:49:57:05:08:85:c0:00:a1:d6:9a:0d:d9:7c:03:cb:03:ce: a0:c3:8a:a2:5a:dd:3f:05:b6:3e:45:2e:d7:b4:80:66:25:c8: 3b:0c:7d:19:19:e5:17:cd:1e:1f:52:a0:c4:fc:d7:47:44:e1: 78:20:91:bf:7c:0c:09:29:f7:99:a2:8b:1b:3a:7b:b8:8d:3e: ba:0f:1e:02 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBnsj4RFf1rdwUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk NDFkNDEwMzAtMWJjZi00ZjcyLTgyYzctM2I0MjBkZTc4YzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkANIA/xu6M/sg+MK8YgftBGekzE5orJFY0mz losVPk/6wI4OTyGV0A5sU626U8kGHRg0xfzW1K/iZUJ/s+IllfdXaG+z9fGm+xHc sqtle2dW5s35WQ3ZsN6jvqEsx7Szp6WIeF3CKyqZ8DjIu1vW1bspBtkmh7SiV7Xx Y2udsjQCjmSDMrUgEShfMxOBgwFoD5XUe2XTCQxtGWACCIFIzDao+BSeptmWO8Ho 26m4sjn4QHeVZzvBolIGJoSiwKjS7luCC9iXcvoV7f2GWVdsEeT2WpA8Vmn1NMNW U2Yo8IzHviu2kPEWT5QaEhYC2bVz3T6gnCkPIO8rh4cPvY+aewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIT1uNLXJUZVSPfDorVmgBmFNxOoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjhkZmE4ZWMtMWY1Ny0z NDMxLTk2MmEtMzM3ODdlZWE1ZTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB2n1QDiQwsvof/5dL92D2dJXydirBMXn+GJ2/ZBufmu4YogZ5IiFHH 2oSjdCbdK5KNPs2Q7USG73ogXs3tA6s3AYh22/QwRKsXvKseIhpda3BLoBnaqA7F a59EVxfsAHip3Mo7O4m9NtqKwm9lrbmGloraJjJo/Mh0KCuAKSOI/3DMuu0JEC3V KYXqI1QVM6kYJW9GeHyMt0iR3ZQiqSawjT0ra4yPmSb3NPZrwZs6BKk/yz1RSVcF CIXAAKHWmg3ZfAPLA86gw4qiWt0/BbY+RS7XtIBmJcg7DH0ZGeUXzR4fUqDE/NdH ROF4IJG/fAwJKfeZoosbOnu4jT66Dx4C -----END CERTIFICATE-----Generated at Fri Apr 11 22:32:59 2025 by rpki-client