$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dab43f4f-91c1-3990-b625-979d518dd1bd.roa File: dab43f4f-91c1-3990-b625-979d518dd1bd.roa (raw, json) Hash identifier: F+xyA9F82WKZkZnZqz+am343ADsvPfPfIh3mFFQ9keg= Subject key identifier: 83:EF:52:55:76:60:3E:5E:B9:12:1C:38:4D:20:37:54:6E:7A:64:34 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E006805DC668141F4E182240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dab43f4f-91c1-3990-b625-979d518dd1bd.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 36622 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:80:5d:c6:68:14:1f:4e:18:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=8dd854c6-cde5-4eb5-8205-21d38f2bf5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d0:e4:b1:26:59:0e:df:2f:b2:29:94:2f:c7: 49:c5:61:90:c9:d7:42:b7:ba:30:68:30:2f:e9:54: 8b:ba:0c:58:72:5f:9e:e8:25:9c:00:40:79:1d:50: a0:33:5b:71:ee:4e:0c:01:dd:2b:12:20:af:07:58: d1:b1:b1:b5:c2:6b:12:6b:5a:68:cc:0e:7c:12:9d: 4a:53:d6:ed:bc:05:b8:2a:87:e6:c9:6b:41:9b:4b: 32:19:4e:19:34:83:15:22:15:f9:3c:56:34:65:14: 0f:a3:cf:f7:5a:e9:6b:ea:52:0b:b4:cd:99:fa:2b: c0:92:22:91:97:09:40:78:31:e6:1e:68:51:b1:55: ca:1b:ad:81:7a:79:38:08:50:37:5a:d0:a1:c6:0b: 50:91:12:0c:0c:74:3c:37:13:18:b3:f5:5a:c2:0e: d7:4c:4b:03:b1:37:ff:78:ec:6a:dc:e5:cb:37:9a: db:12:93:19:45:b1:ce:9f:83:ec:6d:15:26:d6:b3: 00:d5:e2:c5:e7:e1:44:3e:d4:d9:8a:88:84:34:48: 2e:ea:16:30:45:2f:7f:e3:5d:72:28:a5:12:bf:6f: ca:28:7b:31:b6:2a:55:57:92:dc:b7:97:c4:dd:18: 0b:21:ae:48:30:4f:e0:45:6c:2b:ae:dc:cd:1f:76: e8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EF:52:55:76:60:3E:5E:B9:12:1C:38:4D:20:37:54:6E:7A:64:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dab43f4f-91c1-3990-b625-979d518dd1bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:cf:79:12:2d:4b:83:95:be:b8:f8:95:8f:d7:5e:0d:20:20: 0f:fe:10:fa:c7:97:82:73:5c:d1:f6:56:5b:7d:99:aa:db:65: c8:83:5d:9f:4a:d9:2f:10:d7:9e:9d:70:83:ad:90:77:5a:fa: ac:59:d1:bc:f5:f3:e3:6d:9d:52:ef:92:e6:1a:24:fc:72:10: bd:df:b8:62:09:9c:18:e2:af:ae:f3:84:0a:15:03:47:19:fe: 68:c7:61:02:7d:d9:10:20:fe:93:f1:97:16:8f:79:12:97:22: 5a:0b:50:4b:fd:06:f9:85:6c:1c:16:e7:fd:c7:7e:38:6c:b1: 00:3a:c3:0c:3f:96:0b:af:7d:06:ad:96:68:13:2a:02:09:fe: f5:30:47:2e:99:73:fc:2b:17:3c:bd:2b:a5:91:9d:63:5c:be: 2d:eb:85:54:67:8e:f0:ce:3b:f8:d8:06:18:37:6a:24:79:72: 77:4f:44:53:61:ff:42:40:9b:b9:e9:37:93:01:a9:c4:ea:45: b4:28:b3:dc:1f:6e:b5:6d:b3:15:c0:6f:d1:5c:0a:fe:73:34: ae:af:4c:ce:48:65:93:4c:4e:21:48:32:86:c9:ce:3b:f2:09: 27:e6:05:7d:3a:c3:da:79:2a:3f:a6:21:58:25:08:a3:53:18: dc:0e:29:08 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBoBdxmgUH04YIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk OGRkODU0YzYtY2RlNS00ZWI1LTgyMDUtMjFkMzhmMmJmNWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdDksSZZDt8vsimUL8dJxWGQyddCt7owaDAv 6VSLugxYcl+e6CWcAEB5HVCgM1tx7k4MAd0rEiCvB1jRsbG1wmsSa1pozA58Ep1K U9btvAW4KofmyWtBm0syGU4ZNIMVIhX5PFY0ZRQPo8/3Wulr6lILtM2Z+ivAkiKR lwlAeDHmHmhRsVXKG62Benk4CFA3WtChxgtQkRIMDHQ8NxMYs/Vawg7XTEsDsTf/ eOxq3OXLN5rbEpMZRbHOn4PsbRUm1rMA1eLF5+FEPtTZioiENEgu6hYwRS9/411y KKUSv2/KKHsxtipVV5Lct5fE3RgLIa5IME/gRWwrrtzNH3boZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIPvUlV2YD5euRIcOE0gN1RuemQ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGFiNDNmNGYtOTFjMS0z OTkwLWI2MjUtOTc5ZDUxOGRkMWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA6z3kSLUuDlb64+JWP114NICAP/hD6x5eCc1zR9lZbfZmq22XIg12f StkvENeenXCDrZB3WvqsWdG89fPjbZ1S75LmGiT8chC937hiCZwY4q+u84QKFQNH Gf5ox2ECfdkQIP6T8ZcWj3kSlyJaC1BL/Qb5hWwcFuf9x344bLEAOsMMP5YLr30G rZZoEyoCCf71MEcumXP8Kxc8vSulkZ1jXL4t64VUZ47wzjv42AYYN2okeXJ3T0RT Yf9CQJu56TeTAanE6kW0KLPcH261bbMVwG/RXAr+czSur0zOSGWTTE4hSDKGyc47 8gkn5gV9OsPaeSo/piFYJQijUxjcDikI -----END CERTIFICATE-----Generated at Sun Apr 27 17:55:18 2025 by rpki-client