$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/095e1ffa-66c8-33a3-80c7-9718b3e96603.roa File: 095e1ffa-66c8-33a3-80c7-9718b3e96603.roa (raw, json) Hash identifier: /YFTC1TKaEXV1pajA6Sqx3qmKvpmZuKr1+2t7XTGhDU= Subject key identifier: 0F:3D:3D:0E:C2:C0:80:27:1D:F6:4A:02:CF:04:7D:60:07:C9:26:A5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F82D16D5CEBB95B139600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/095e1ffa-66c8-33a3-80c7-9718b3e96603.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396589 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:82:d1:6d:5c:eb:b9:5b:13:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=a5d45bf7-64d0-4d90-ad7c-bb48e10ae66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f2:31:22:a5:6a:54:5d:b4:18:8d:32:71:41: 4f:bb:c2:17:58:92:aa:80:f4:64:78:fb:e3:a7:01: 5d:28:4a:0b:a3:d4:93:ab:ff:67:b3:94:9f:7a:e2: 5d:39:ff:76:53:ae:82:64:95:e8:ee:25:f4:c8:10: 7d:66:e0:98:04:db:9c:4f:af:60:21:6d:6e:2b:78: 4a:86:ed:cf:f2:71:cf:37:2e:16:37:e6:2e:b2:48: 98:b6:af:d8:8f:f0:18:f1:22:91:09:76:9f:0f:a0: 1f:a0:a9:8f:22:14:bc:be:e1:14:6e:e2:c3:5c:42: d6:94:af:6b:5b:e0:2a:52:8e:43:76:ff:a0:61:56: 7d:fa:b1:b4:f9:55:47:40:c6:6a:f3:0c:56:1a:6d: bd:4d:71:8c:93:44:50:68:77:54:04:22:f2:61:8a: 13:02:35:a3:96:45:9f:d8:a2:b1:83:0f:5c:86:6a: 50:46:4d:a9:68:71:06:cc:9a:00:fb:0c:48:bf:0b: 18:9c:76:4c:0a:d0:5a:20:33:c1:ca:74:5b:d9:0e: ea:e8:ff:82:e1:59:ad:08:f2:05:64:3b:41:17:0b: 38:49:ee:26:30:e4:fe:53:eb:cf:8e:9e:a8:9b:2c: 79:71:db:cc:f2:ef:d5:9e:a6:32:94:a3:f6:b5:df: 52:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3D:3D:0E:C2:C0:80:27:1D:F6:4A:02:CF:04:7D:60:07:C9:26:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/095e1ffa-66c8-33a3-80c7-9718b3e96603.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:0a:83:03:93:7b:5d:00:35:e5:bf:6c:ae:35:ab:ee:37:05: b7:81:6c:ef:a8:91:a3:87:95:86:43:03:76:be:18:3a:7b:15: b6:c9:09:43:3e:99:20:b2:fe:ae:6d:9a:09:c9:0f:69:6d:53: fa:6e:2a:4a:6e:09:9c:0f:b6:4d:41:9e:31:52:c9:e4:92:d9: b6:a8:bc:fc:ef:90:50:05:5a:dd:67:ed:a1:95:b8:d1:ff:11: 8f:ee:ac:8c:58:19:7a:81:a3:78:1f:07:de:19:48:fb:24:54: e5:88:98:9a:ed:10:2c:26:75:5a:af:2f:0c:94:a2:ba:28:13: 7e:56:2f:0b:2b:87:42:e6:8b:35:05:7a:15:58:52:2b:d6:a3: 3d:af:c0:a5:8d:5e:ff:f0:a0:17:f0:28:e5:0d:70:29:f5:42: 4d:37:2c:3b:27:5d:4b:21:22:19:6c:89:17:10:56:5e:58:a5: 51:b2:53:14:2c:53:59:39:e4:3d:cb:39:72:08:a7:50:d9:d1: ec:83:d1:7b:8d:7b:96:32:49:d7:14:3a:fb:48:04:3e:ea:df: 32:45:f3:25:04:34:40:a2:43:5f:78:33:1b:ae:ef:78:64:d1: f6:c6:18:39:38:ea:ce:98:5e:2b:34:32:58:9b:d3:7e:a9:06: a4:be:26:80 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4LRbVzruVsTlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YTVkNDViZjctNjRkMC00ZDkwLWFkN2MtYmI0OGUxMGFlNjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/IxIqVqVF20GI0ycUFPu8IXWJKqgPRkePvj pwFdKEoLo9STq/9ns5SfeuJdOf92U66CZJXo7iX0yBB9ZuCYBNucT69gIW1uK3hK hu3P8nHPNy4WN+YuskiYtq/Yj/AY8SKRCXafD6AfoKmPIhS8vuEUbuLDXELWlK9r W+AqUo5Ddv+gYVZ9+rG0+VVHQMZq8wxWGm29TXGMk0RQaHdUBCLyYYoTAjWjlkWf 2KKxgw9chmpQRk2paHEGzJoA+wxIvwsYnHZMCtBaIDPBynRb2Q7q6P+C4VmtCPIF ZDtBFws4Se4mMOT+U+vPjp6omyx5cdvM8u/VnqYylKP2td9SQwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA89PQ7CwIAnHfZKAs8EfWAHySalMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDk1ZTFmZmEtNjZjOC0z M2EzLTgwYzctOTcxOGIzZTk2NjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBtCoMDk3tdADXlv2yuNavuNwW3gWzvqJGjh5WGQwN2vhg6exW2yQlD Ppkgsv6ubZoJyQ9pbVP6bipKbgmcD7ZNQZ4xUsnkktm2qLz875BQBVrdZ+2hlbjR /xGP7qyMWBl6gaN4HwfeGUj7JFTliJia7RAsJnVary8MlKK6KBN+Vi8LK4dC5os1 BXoVWFIr1qM9r8CljV7/8KAX8CjlDXAp9UJNNyw7J11LISIZbIkXEFZeWKVRslMU LFNZOeQ9yzlyCKdQ2dHsg9F7jXuWMknXFDr7SAQ+6t8yRfMlBDRAokNfeDMbru94 ZNH2xhg5OOrOmF4rNDJYm9N+qQakviaA -----END CERTIFICATE-----Generated at Sun May 11 05:30:27 2025 by rpki-client