$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f1b1e97-2489-3d9a-b658-7894e5aec93e.roa File: 0f1b1e97-2489-3d9a-b658-7894e5aec93e.roa (raw, json) Hash identifier: Vo6p7o0kGdcyeSaW4hVhLaWXeeNDvMGIqCwphujiF/o= Subject key identifier: B5:F5:38:F8:D2:A8:A4:F6:0C:EC:A8:40:89:C4:51:34:C3:2F:78:C2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F82250D6393F26979C940 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f1b1e97-2489-3d9a-b658-7894e5aec93e.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396605 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:82:25:0d:63:93:f2:69:79:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=f420eb23-c454-49a3-96eb-14639a442fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:34:8d:44:79:b1:1c:55:dc:a9:08:18:ae:fa: 6c:11:99:60:a6:8b:f3:be:f1:be:77:eb:db:ae:05: ef:8c:b4:92:69:16:09:ca:77:11:05:a8:1c:e3:4d: 36:13:f4:36:f3:95:00:5f:4e:62:12:f1:16:e7:de: 52:c8:ac:47:c0:e5:99:95:b4:a8:d0:bf:98:3a:65: 95:e9:31:5a:e9:04:cf:c5:a1:b8:d1:dc:f7:89:17: 41:8f:27:ad:a6:23:1e:7d:9c:de:d8:db:d0:a1:62: 1d:df:23:e6:a2:99:c0:b8:ba:9d:6a:f0:44:7a:22: bb:91:4e:8b:59:c0:e0:4b:a7:9f:5a:1c:6a:8f:1a: dd:98:16:38:92:0a:ed:2c:c1:66:b8:95:8a:4a:16: a4:d7:ba:09:79:50:e8:71:b6:3b:5d:67:be:6b:f2: f6:99:e0:e6:0b:e0:73:da:ce:25:f4:c4:92:19:e1: 8a:f9:1f:6a:10:e4:c5:d6:e6:e1:29:98:24:fe:41: 19:58:fc:64:0e:6d:3d:ad:11:3c:4c:5e:2c:58:76: 51:39:f0:dc:ed:24:8c:6d:7b:8c:76:59:51:a0:a7: 42:61:81:34:5a:db:e5:50:22:55:78:a6:b1:9d:96: 64:d0:65:56:ca:15:19:7e:f1:48:6f:0a:df:cd:96: 7e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F5:38:F8:D2:A8:A4:F6:0C:EC:A8:40:89:C4:51:34:C3:2F:78:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f1b1e97-2489-3d9a-b658-7894e5aec93e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:84:43:c5:bd:20:58:e7:dc:30:1c:dc:8b:cb:63:e1:fe:5f: b3:e6:d2:cc:94:e8:80:4f:1b:dc:7e:5f:6d:63:25:43:fe:2e: 2d:f8:11:64:4d:bf:ba:1b:b4:5c:96:fc:f5:ca:0d:c7:a9:51: 30:d2:2d:76:38:4c:cc:13:d7:4f:ca:bb:32:88:fa:8f:63:ab: e8:72:48:4c:bc:7b:ab:e1:c9:20:35:84:2d:70:64:46:37:e6: 04:54:a7:b2:45:e3:42:cf:4e:ef:48:bb:7b:b8:05:18:93:07: 00:02:bd:15:68:a0:fb:d4:73:4a:0a:cf:03:46:47:02:ff:e0: 0c:01:f7:a3:9b:80:1f:dc:77:63:81:b5:21:0d:35:51:12:ab: 7c:44:81:7a:03:de:72:4a:48:78:53:13:2e:71:f3:07:2c:fb: 66:63:1a:87:b1:2f:f4:ce:e5:d7:ed:8c:30:92:88:20:07:57: 8d:c8:74:69:aa:f8:92:cf:e6:b7:0a:77:45:dc:5d:31:b6:b6: 42:78:54:6d:d3:ee:91:55:6c:7b:0a:87:b9:f4:98:ee:7b:37: 3b:38:47:af:40:c4:db:f6:ee:72:55:2b:b4:bf:5b:54:ef:c1: 0f:51:b4:33:33:33:ba:0d:32:54:38:8c:f0:2a:fd:b8:57:e9: 6a:f9:04:30 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4IlDWOT8ml5yUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZjQyMGViMjMtYzQ1NC00OWEzLTk2ZWItMTQ2MzlhNDQyZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jSNRHmxHFXcqQgYrvpsEZlgpovzvvG+d+vb rgXvjLSSaRYJyncRBagc4002E/Q285UAX05iEvEW595SyKxHwOWZlbSo0L+YOmWV 6TFa6QTPxaG40dz3iRdBjyetpiMefZze2NvQoWId3yPmopnAuLqdavBEeiK7kU6L WcDgS6efWhxqjxrdmBY4kgrtLMFmuJWKShak17oJeVDocbY7XWe+a/L2meDmC+Bz 2s4l9MSSGeGK+R9qEOTF1ubhKZgk/kEZWPxkDm09rRE8TF4sWHZROfDc7SSMbXuM dllRoKdCYYE0WtvlUCJVeKaxnZZk0GVWyhUZfvFIbwrfzZZ+hwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLX1OPjSqKT2DOyoQInEUTTDL3jCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGYxYjFlOTctMjQ4OS0z ZDlhLWI2NTgtNzg5NGU1YWVjOTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAThEPFvSBY59wwHNyLy2Ph/l+z5tLMlOiATxvcfl9tYyVD/i4t+BFk Tb+6G7Rclvz1yg3HqVEw0i12OEzME9dPyrsyiPqPY6vockhMvHur4ckgNYQtcGRG N+YEVKeyReNCz07vSLt7uAUYkwcAAr0VaKD71HNKCs8DRkcC/+AMAfejm4Af3Hdj gbUhDTVREqt8RIF6A95ySkh4UxMucfMHLPtmYxqHsS/0zuXX7YwwkoggB1eNyHRp qviSz+a3CndF3F0xtrZCeFRt0+6RVWx7Coe59Jjuezc7OEevQMTb9u5yVSu0v1tU 78EPUbQzMzO6DTJUOIzwKv24V+lq+QQw -----END CERTIFICATE-----Generated at Sun May 11 08:35:21 2025 by rpki-client