$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b631392-a580-3432-98c8-2b6576544515.roa File: 0b631392-a580-3432-98c8-2b6576544515.roa (raw, json) Hash identifier: cReU7Uefgf1IC/OPC4BH0lllal7zRkm8i+HmI1zG7NQ= Subject key identifier: FD:09:4B:EE:65:45:5B:04:F0:E8:1C:3F:FB:27:F1:32:8C:06:71:D0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F83E080666ED0D75C5900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b631392-a580-3432-98c8-2b6576544515.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396592 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:83:e0:80:66:6e:d0:d7:5c:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=b25f1779-dc3e-485b-b1a8-33415206fa65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ec:7b:8b:9d:e3:42:e9:57:8f:88:93:d3:c2: e8:a5:45:1f:58:a7:f2:27:85:e7:cd:06:90:b8:d3: c2:13:b9:dc:cd:4e:3c:a4:51:c1:ee:c9:32:f0:da: 29:b0:ed:06:c4:31:1b:54:23:b7:19:69:e8:af:71: 99:06:66:14:27:be:4e:91:ca:12:5d:3d:0d:6b:a6: fc:37:c0:ff:31:94:82:b7:76:70:aa:c5:cd:04:57: 2c:d3:65:3a:2e:7a:71:c9:61:3d:e7:fd:a6:da:ad: 38:fc:08:89:29:28:42:e4:55:dd:d1:61:f4:2d:c6: c6:9b:32:3a:77:12:8e:db:f1:9f:5c:8d:2e:95:fe: be:61:fb:c9:80:d5:34:d2:5a:69:2b:69:36:36:77: 27:83:0a:a9:3e:07:8a:ad:c8:f7:74:cc:a2:b7:b6: 40:07:49:ea:f2:f1:a0:1a:b6:28:35:7b:b4:cb:0a: 67:68:8b:90:3d:a0:b7:fb:98:34:a4:8c:e2:03:48: bd:20:61:8b:7b:ea:fe:9e:7e:20:1c:74:f3:7b:53: 5b:8a:3b:f5:44:77:32:24:35:ee:50:11:08:85:45: 81:07:07:5f:f5:8c:33:63:48:15:2b:85:15:32:c7: 50:82:4e:26:ac:64:94:65:f8:c2:39:a6:52:0d:33: 97:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:09:4B:EE:65:45:5B:04:F0:E8:1C:3F:FB:27:F1:32:8C:06:71:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b631392-a580-3432-98c8-2b6576544515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:3a:5d:ca:84:40:15:c7:69:82:a5:dd:5c:0a:65:26:63:77: b8:da:ec:97:7c:41:ea:9c:ae:f3:b4:32:31:78:48:33:9f:f0: 57:59:f9:7b:48:39:10:67:49:f5:fa:de:84:89:93:44:14:b0: 3c:a6:4e:2c:f0:ac:8d:13:f6:29:7d:47:43:00:06:03:2e:88: 1f:63:fd:75:44:38:7d:0f:4b:fe:13:9b:ff:cf:e1:fe:b6:a1: 1c:ae:51:21:13:f5:17:04:be:dd:c4:51:de:9b:d2:e8:99:01: 9f:d0:45:77:f5:f3:60:b9:a5:7f:c4:57:3d:a8:31:93:3a:60: f7:12:52:ac:01:04:3b:5b:f2:73:6e:59:d6:dc:88:04:aa:da: 1d:0d:2e:fb:0e:8e:ef:95:c3:b5:d2:2b:20:0d:f5:06:85:f3: 7a:4b:2f:bf:90:29:11:ce:35:6a:0d:a4:5c:e7:8b:fe:9d:73: 50:55:87:55:79:a5:3a:a7:5e:e8:db:6a:d6:10:17:de:49:58: 71:dd:85:3f:cd:06:a3:1a:3c:7e:6b:2e:f6:41:10:51:69:1c: 25:64:60:00:dd:3f:45:05:86:ee:f3:f8:f6:a2:e9:a2:c4:5d: 53:90:01:85:7b:df:cc:10:42:40:50:93:34:e9:3a:47:74:de: 75:35:b5:e5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4PggGZu0NdcWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YjI1ZjE3NzktZGMzZS00ODViLWIxYTgtMzM0MTUyMDZmYTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+x7i53jQulXj4iT08LopUUfWKfyJ4XnzQaQ uNPCE7nczU48pFHB7sky8NopsO0GxDEbVCO3GWnor3GZBmYUJ75OkcoSXT0Na6b8 N8D/MZSCt3ZwqsXNBFcs02U6LnpxyWE95/2m2q04/AiJKShC5FXd0WH0LcbGmzI6 dxKO2/GfXI0ulf6+YfvJgNU00lppK2k2NncngwqpPgeKrcj3dMyit7ZAB0nq8vGg GrYoNXu0ywpnaIuQPaC3+5g0pIziA0i9IGGLe+r+nn4gHHTze1Nbijv1RHcyJDXu UBEIhUWBBwdf9YwzY0gVK4UVMsdQgk4mrGSUZfjCOaZSDTOXjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP0JS+5lRVsE8OgcP/sn8TKMBnHQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGI2MzEzOTItYTU4MC0z NDMyLTk4YzgtMmI2NTc2NTQ0NTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA4Ol3KhEAVx2mCpd1cCmUmY3e42uyXfEHqnK7ztDIxeEgzn/BXWfl7 SDkQZ0n1+t6EiZNEFLA8pk4s8KyNE/YpfUdDAAYDLogfY/11RDh9D0v+E5v/z+H+ tqEcrlEhE/UXBL7dxFHem9LomQGf0EV39fNguaV/xFc9qDGTOmD3ElKsAQQ7W/Jz blnW3IgEqtodDS77Do7vlcO10isgDfUGhfN6Sy+/kCkRzjVqDaRc54v+nXNQVYdV eaU6p17o22rWEBfeSVhx3YU/zQajGjx+ay72QRBRaRwlZGAA3T9FBYbu8/j2oumi xF1TkAGFe9/MEEJAUJM06TpHdN51NbXl -----END CERTIFICATE-----Generated at Sun May 11 07:35:12 2025 by rpki-client