$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/07212462-01b3-3438-9a02-06b16dbcb051.roa File: 07212462-01b3-3438-9a02-06b16dbcb051.roa (raw, json) Hash identifier: 7V9mrU7Xf1zl6pUoQbjnN0VCyXe33VeqLuYNyGcb9lA= Subject key identifier: 32:98:9D:DD:8B:07:B2:24:25:85:B4:3D:73:A4:E4:AB:EC:57:CD:68 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F89BBF32F7D7C21AB1180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/07212462-01b3-3438-9a02-06b16dbcb051.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396573 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:89:bb:f3:2f:7d:7c:21:ab:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=86c5b2c2-ade7-4074-880e-2f508ebefe3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5f:ce:fd:ee:ef:cc:a9:a9:a8:26:43:c4:93: e9:38:b2:c1:96:81:b3:60:40:1b:d4:d6:3a:47:e3: 5d:86:c3:1c:4f:40:42:53:22:f8:e5:e0:39:0a:8b: ad:a5:5e:c6:67:ea:7b:e5:30:26:a2:41:e6:af:73: 6a:74:43:42:53:57:3a:44:54:b8:ae:97:a5:40:9d: 83:f4:9c:92:b1:6d:db:71:61:1d:cc:6e:dc:c1:f5: 8a:1b:a4:1c:e5:d1:f1:01:23:e7:67:94:c8:a0:a5: be:6e:8e:2f:94:f6:a1:a4:c4:d9:27:99:62:4d:dd: 7c:54:c1:52:9f:bd:ae:18:69:10:94:25:02:59:11: 4c:ea:12:88:81:79:85:0c:c4:17:f4:19:09:9c:06: 2b:71:12:07:77:b7:6e:56:63:04:eb:e2:af:11:b1: ce:88:09:a7:37:a5:55:25:4a:f0:10:e7:61:5c:9e: f5:ef:89:71:36:e2:3d:5f:6d:7b:24:b8:59:c7:a3: a6:64:b8:cb:77:3c:f9:7f:68:1a:98:7f:30:23:86: 5a:85:5f:f8:45:02:38:55:21:df:7a:9d:bd:a1:74: b2:46:d8:e7:88:27:82:6f:e1:19:99:7a:94:81:d5: 21:c7:28:72:8f:91:45:f0:21:46:2a:d2:3d:64:7b: b3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:98:9D:DD:8B:07:B2:24:25:85:B4:3D:73:A4:E4:AB:EC:57:CD:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/07212462-01b3-3438-9a02-06b16dbcb051.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:6c:be:d5:5a:b9:c8:f1:08:5d:44:2f:5d:50:54:c4:99:71: d9:82:2d:75:5e:7b:38:f6:31:ad:cd:9c:a5:fb:0d:99:5a:c8: 2c:19:d5:75:eb:98:ae:1b:a7:fb:98:f1:1d:40:4a:41:67:31: c7:66:46:22:aa:53:2f:10:22:6b:68:ee:46:69:26:17:d0:ea: a2:53:f4:59:42:7c:52:91:32:a0:13:b6:61:c5:b8:8e:75:76: ec:37:74:83:ad:00:92:51:bd:5d:63:99:b6:1c:83:0d:f1:9c: ff:1b:a2:44:dd:d4:72:fc:c6:3c:aa:c8:ed:6f:20:60:d4:6b: 25:a7:b9:16:f3:cb:49:72:e8:89:f9:0f:b5:27:25:f0:dc:16: e1:ea:54:67:70:d8:5e:ec:51:c0:19:33:39:43:e5:d6:45:38: bd:46:21:ec:6e:bf:c5:a6:6b:d6:28:03:c2:1d:92:8e:d9:a6: 69:d3:4c:22:bf:90:1f:5f:62:8a:c2:1e:8f:94:d9:2e:39:2b: 06:89:13:93:4b:18:74:5b:bf:e1:1f:e3:43:83:8c:7d:18:34: 1d:b5:df:1b:e4:d6:dd:50:51:d5:37:06:70:80:76:23:9c:05: af:0d:e4:a0:30:f3:b5:ab:3d:2a:9c:07:28:96:49:c2:53:f2: 1c:2e:2b:a1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4m78y99fCGrEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ODZjNWIyYzItYWRlNy00MDc0LTg4MGUtMmY1MDhlYmVmZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV/O/e7vzKmpqCZDxJPpOLLBloGzYEAb1NY6 R+NdhsMcT0BCUyL45eA5CoutpV7GZ+p75TAmokHmr3NqdENCU1c6RFS4rpelQJ2D 9JySsW3bcWEdzG7cwfWKG6Qc5dHxASPnZ5TIoKW+bo4vlPahpMTZJ5liTd18VMFS n72uGGkQlCUCWRFM6hKIgXmFDMQX9BkJnAYrcRIHd7duVmME6+KvEbHOiAmnN6VV JUrwEOdhXJ7174lxNuI9X217JLhZx6OmZLjLdzz5f2gamH8wI4ZahV/4RQI4VSHf ep29oXSyRtjniCeCb+EZmXqUgdUhxyhyj5FF8CFGKtI9ZHuzJwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDKYnd2LB7IkJYW0PXOk5KvsV81oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDcyMTI0NjItMDFiMy0z NDM4LTlhMDItMDZiMTZkYmNiMDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBPbL7VWrnI8QhdRC9dUFTEmXHZgi11Xns49jGtzZyl+w2ZWsgsGdV1 65iuG6f7mPEdQEpBZzHHZkYiqlMvECJraO5GaSYX0OqiU/RZQnxSkTKgE7ZhxbiO dXbsN3SDrQCSUb1dY5m2HIMN8Zz/G6JE3dRy/MY8qsjtbyBg1Gslp7kW88tJcuiJ +Q+1JyXw3Bbh6lRncNhe7FHAGTM5Q+XWRTi9RiHsbr/FpmvWKAPCHZKO2aZp00wi v5AfX2KKwh6PlNkuOSsGiROTSxh0W7/hH+NDg4x9GDQdtd8b5NbdUFHVNwZwgHYj nAWvDeSgMPO1qz0qnAcolknCU/IcLiuh -----END CERTIFICATE-----Generated at Sun May 11 05:50:08 2025 by rpki-client