$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5a4ca7a-42c3-37c0-a62e-c45c68db6703.roa File: b5a4ca7a-42c3-37c0-a62e-c45c68db6703.roa (raw, json) Hash identifier: 2aY2OOBf4n8iuisWS3OaazzbS9sx9stHivFc5p9/Yx0= Subject key identifier: 65:00:A9:08:60:EA:9F:5B:A4:FC:57:BE:E5:37:BD:EC:89:DC:37:EE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E0067ECDC1118B33F01A2980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5a4ca7a-42c3-37c0-a62e-c45c68db6703.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396613 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:7e:cd:c1:11:8b:33:f0:1a:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=ab09b271-635a-4457-9dc0-486f2c4ce6ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6e:0c:da:1c:f1:3f:a9:fd:3e:b1:18:18:08: 67:83:51:63:b2:bf:ca:d0:83:d6:75:aa:43:68:74: c4:0f:bb:37:87:a5:59:a3:be:bc:e6:48:35:e6:85: fd:a0:0d:64:b4:7c:88:2e:09:a3:c8:42:32:80:bc: ab:0e:6a:4f:81:f0:ed:25:3f:ff:c5:a6:c2:ff:69: 6a:6c:16:b9:c4:8a:ad:65:8e:13:59:74:42:79:ba: f1:2f:3f:ab:1c:db:ab:61:aa:05:2f:63:5f:8a:82: 0f:23:35:03:6f:d3:d2:08:c5:a1:6a:c6:9e:d3:60: 57:b6:f4:94:c6:c5:28:85:01:96:f8:e2:ee:e3:d0: e1:0a:88:e0:8e:8e:b3:2e:f8:80:a4:2d:c5:88:1a: 2f:bd:65:68:ab:e3:68:af:58:13:d0:32:c7:00:1a: 50:de:5d:1e:8a:47:5a:63:36:de:05:cd:3f:1d:b9: b0:6f:b6:5b:23:2d:24:59:59:bc:68:95:6c:27:69: 2a:d9:df:7d:14:6b:8b:ae:bb:e8:8f:b0:25:62:7f: 9d:24:0f:f1:0e:51:b4:a9:8b:96:4a:0f:90:66:72: 90:45:0f:69:d4:e7:b0:4d:4c:2c:47:0b:cc:18:0f: 88:48:06:29:fa:50:cd:6d:45:77:42:b4:b6:24:e2: c9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:00:A9:08:60:EA:9F:5B:A4:FC:57:BE:E5:37:BD:EC:89:DC:37:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5a4ca7a-42c3-37c0-a62e-c45c68db6703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:65:02:1b:72:cb:c7:73:73:de:ef:c7:d5:83:3a:f0:3c:c8: c8:04:eb:b0:8e:03:3b:87:4c:f3:21:a7:fc:5f:48:b7:bc:7d: c8:b0:10:af:32:b2:ff:25:7a:25:a2:bf:64:93:b9:be:0f:40: dd:b5:26:0d:cc:7f:c8:f3:71:80:90:72:6f:ff:90:e8:ff:05: a0:c3:eb:17:6f:ee:e9:17:45:dc:f3:78:16:52:4e:d1:84:59: 07:02:ee:b8:9b:a2:d0:91:33:53:52:eb:45:92:26:7b:1b:cc: cd:20:35:67:4c:59:30:41:88:50:cb:b3:6d:8c:41:af:a1:2c: 2b:9d:99:da:35:5e:d9:7f:00:43:dd:01:0a:ab:e6:d9:db:58: 75:bd:33:3b:65:54:9d:a1:e3:87:77:08:b1:58:0c:dc:0e:6d: de:84:3d:72:b5:30:be:60:2d:0b:49:29:4c:19:63:67:10:6c: 49:9c:93:73:0e:4d:4c:6f:47:fa:8f:28:7e:bd:c9:83:75:63: 72:59:67:b3:57:fb:8c:f3:83:27:13:6c:f5:cc:a8:ad:06:f1: d8:e1:57:cb:24:1e:cb:77:5e:62:b8:c6:aa:cc:da:16:32:01: ac:10:e2:ba:f1:43:9b:30:5f:0a:06:3c:47:95:13:bc:1b:fa: 30:95:e2:fc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBn7NwRGLM/AaKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk YWIwOWIyNzEtNjM1YS00NDU3LTlkYzAtNDg2ZjJjNGNlNmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W4M2hzxP6n9PrEYGAhng1Fjsr/K0IPWdapD aHTED7s3h6VZo7685kg15oX9oA1ktHyILgmjyEIygLyrDmpPgfDtJT//xabC/2lq bBa5xIqtZY4TWXRCebrxLz+rHNurYaoFL2NfioIPIzUDb9PSCMWhasae02BXtvSU xsUohQGW+OLu49DhCojgjo6zLviApC3FiBovvWVoq+Nor1gT0DLHABpQ3l0eikda YzbeBc0/Hbmwb7ZbIy0kWVm8aJVsJ2kq2d99FGuLrrvoj7AlYn+dJA/xDlG0qYuW Sg+QZnKQRQ9p1OewTUwsRwvMGA+ISAYp+lDNbUV3QrS2JOLJIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGUAqQhg6p9bpPxXvuU3veyJ3DfuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjVhNGNhN2EtNDJjMy0z N2MwLWE2MmUtYzQ1YzY4ZGI2NzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBlZQIbcsvHc3Pe78fVgzrwPMjIBOuwjgM7h0zzIaf8X0i3vH3IsBCv MrL/JXolor9kk7m+D0DdtSYNzH/I83GAkHJv/5Do/wWgw+sXb+7pF0Xc83gWUk7R hFkHAu64m6LQkTNTUutFkiZ7G8zNIDVnTFkwQYhQy7NtjEGvoSwrnZnaNV7ZfwBD 3QEKq+bZ21h1vTM7ZVSdoeOHdwixWAzcDm3ehD1ytTC+YC0LSSlMGWNnEGxJnJNz Dk1Mb0f6jyh+vcmDdWNyWWezV/uM84MnE2z1zKitBvHY4VfLJB7Ld15iuMaqzNoW MgGsEOK68UObMF8KBjxHlRO8G/owleL8 -----END CERTIFICATE-----Generated at Mon Apr 28 00:22:34 2025 by rpki-client