$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/00c2e509-59ad-3e90-96ec-399e1bf0a9e9.roa File: 00c2e509-59ad-3e90-96ec-399e1bf0a9e9.roa (raw, json) Hash identifier: saOKhNFzOHGFX4FFLFQxPnhXvDl3oFZ8nV1F1yS43P4= Subject key identifier: 1A:1C:72:95:69:13:9D:D4:36:50:E5:FB:77:9E:32:84:2E:32:D0:E3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8B08C8EE981CDE1BF6A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/00c2e509-59ad-3e90-96ec-399e1bf0a9e9.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396542 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8b:08:c8:ee:98:1c:de:1b:f6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=9190653c-01ba-423d-92ed-ef7f1ee6bf0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:98:dc:91:b4:11:77:8b:2c:b6:75:5c:e0:34: f6:cb:80:9b:35:6f:b0:c8:a7:f5:98:a6:b6:1e:fa: 8d:4f:0a:20:09:d3:34:e5:78:c4:1b:af:dc:7e:d9: f6:c3:b7:21:4b:da:ab:ca:63:76:27:9e:dc:0b:a8: 8a:3b:2f:e2:16:44:0a:24:8f:33:45:e2:27:0a:02: 10:4c:96:ea:5a:97:de:31:dd:c6:d3:09:88:ea:3a: 60:9e:16:e7:07:a7:28:e9:65:b3:16:b0:83:ff:8b: 93:86:cd:46:ef:17:6c:ae:cb:9e:e2:4d:07:69:2d: 84:8a:cf:23:85:93:85:01:d2:da:9b:a9:49:8e:62: 72:47:23:4b:c6:ae:1f:ce:c1:86:76:14:6f:43:2a: 92:8f:4b:11:02:1a:dd:5d:43:70:ae:20:21:65:5b: 6f:b0:f6:25:52:2d:ec:0f:58:7f:54:50:2b:be:07: f9:e6:5d:08:24:68:28:c9:13:4c:d7:ef:55:52:59: 6a:46:3f:65:d1:f0:a1:d6:47:83:63:f9:3b:16:94: 3c:9c:01:05:d0:4b:c8:a2:84:49:46:86:34:42:51: 1e:0e:a5:87:32:16:22:42:cf:57:51:82:4c:68:bb: 80:84:b9:f3:27:1b:75:7f:6d:20:9e:3c:c9:1d:ea: dd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1C:72:95:69:13:9D:D4:36:50:E5:FB:77:9E:32:84:2E:32:D0:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/00c2e509-59ad-3e90-96ec-399e1bf0a9e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:7d:97:d7:7d:7a:79:50:cf:76:a7:85:8f:eb:f8:89:f0:72: ab:9b:86:bd:90:90:1e:70:71:c9:22:ad:4a:cc:3f:bd:db:da: 62:82:c7:5c:ef:32:c3:b4:56:7e:0a:7a:cb:dd:1a:7e:4c:3f: 2e:12:9f:7d:31:cd:44:4b:dd:c8:66:ec:81:ab:3e:4f:54:3d: 5a:cb:bb:77:d8:d4:ea:ad:a0:ad:9d:3b:55:4c:62:7d:ec:4e: 74:2c:14:74:59:ac:14:d0:2b:d9:a9:f4:1b:ab:65:ba:18:b4: 3c:7b:54:dd:3f:70:6c:21:61:e2:69:83:8d:9c:5b:0d:f8:3e: 16:dd:8c:4f:ef:3c:10:fb:0d:85:d8:59:dd:47:1f:78:f0:2b: ac:26:6a:75:2d:0d:1b:c2:33:86:ec:e2:3e:2f:c9:35:e5:a0: 64:33:04:53:9f:1d:b6:b2:99:11:8e:52:c6:c5:d7:42:b7:c6: 0f:de:ae:28:81:c8:06:70:1c:fa:8d:90:28:3e:1e:c6:31:d8: 40:55:fa:af:d0:98:12:ea:32:9d:ef:c7:78:0b:69:92:d1:0e: e8:a3:5c:4e:a0:90:8c:03:70:8e:94:10:15:f0:67:da:ed:46: 89:c8:a0:eb:8b:5a:5f:f0:8a:fc:7e:94:e8:fd:31:6c:6b:7f: 60:4b:79:f7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4sIyO6YHN4b9qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk OTE5MDY1M2MtMDFiYS00MjNkLTkyZWQtZWY3ZjFlZTZiZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5jckbQRd4sstnVc4DT2y4CbNW+wyKf1mKa2 HvqNTwogCdM05XjEG6/cftn2w7chS9qrymN2J57cC6iKOy/iFkQKJI8zReInCgIQ TJbqWpfeMd3G0wmI6jpgnhbnB6co6WWzFrCD/4uThs1G7xdsrsue4k0HaS2Eis8j hZOFAdLam6lJjmJyRyNLxq4fzsGGdhRvQyqSj0sRAhrdXUNwriAhZVtvsPYlUi3s D1h/VFArvgf55l0IJGgoyRNM1+9VUllqRj9l0fCh1keDY/k7FpQ8nAEF0EvIooRJ RoY0QlEeDqWHMhYiQs9XUYJMaLuAhLnzJxt1f20gnjzJHerdowIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBoccpVpE53UNlDl+3eeMoQuMtDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDBjMmU1MDktNTlhZC0z ZTkwLTk2ZWMtMzk5ZTFiZjBhOWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAyfZfXfXp5UM92p4WP6/iJ8HKrm4a9kJAecHHJIq1KzD+929pigsdc 7zLDtFZ+CnrL3Rp+TD8uEp99Mc1ES93IZuyBqz5PVD1ay7t32NTqraCtnTtVTGJ9 7E50LBR0WawU0CvZqfQbq2W6GLQ8e1TdP3BsIWHiaYONnFsN+D4W3YxP7zwQ+w2F 2FndRx948CusJmp1LQ0bwjOG7OI+L8k15aBkMwRTnx22spkRjlLGxddCt8YP3q4o gcgGcBz6jZAoPh7GMdhAVfqv0JgS6jKd78d4C2mS0Q7oo1xOoJCMA3COlBAV8Gfa 7UaJyKDri1pf8Ir8fpTo/TFsa39gS3n3 -----END CERTIFICATE-----Generated at Sun May 11 08:18:08 2025 by rpki-client