$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f3ad2b4-9337-3ee6-91d4-72b2889a7d41.roa File: 0f3ad2b4-9337-3ee6-91d4-72b2889a7d41.roa (raw, json) Hash identifier: cMBZfMWu5w/zigK9V75h0yJGoiMc7z8McPYtysCIaQs= Subject key identifier: AE:A5:7C:A1:8D:7B:18:12:23:CA:09:6A:59:07:95:4B:7D:5D:D7:20 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8CB0B40B0D53D6563E10 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f3ad2b4-9337-3ee6-91d4-72b2889a7d41.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 211369 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8c:b0:b4:0b:0d:53:d6:56:3e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=a5572ce5-b0db-4b28-b1b6-32765485bae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3e:47:39:40:b2:b2:ea:48:af:ed:c0:fc:b6: 98:f6:48:5a:c2:ce:d2:65:ca:1a:8f:86:fd:92:66: 38:ef:06:70:27:f5:dd:28:3b:77:07:db:d2:3b:a8: a7:b0:6a:e9:36:38:92:70:a8:82:39:71:11:ef:ef: 30:9e:d9:7a:e8:10:e2:9e:a3:b5:3f:ff:05:2d:c1: 43:7c:e1:ac:69:f3:36:77:d9:05:34:8f:85:f5:71: 9d:65:a7:60:6f:b4:c2:62:98:94:27:ff:aa:91:72: 3b:1b:f8:df:5c:5d:80:15:40:17:cc:30:f7:5b:24: aa:92:70:48:c7:75:83:8d:ac:f0:bb:f8:83:52:cd: 63:56:0c:28:89:2c:f0:4e:30:d3:87:45:5f:00:bb: 69:f5:77:c5:89:3a:3e:f1:a6:64:9f:25:3c:48:4a: a1:82:72:1c:10:e1:b4:0b:f5:44:f9:03:f4:98:97: 1e:3c:36:e4:ba:47:85:b4:4a:f2:30:22:60:d6:6e: 1f:a5:7a:56:0f:37:66:ce:a0:33:b9:5b:d1:00:2f: 6f:be:d8:b7:cf:a6:21:2d:32:f5:63:19:b0:8f:ee: bb:ff:08:91:e1:68:f6:aa:ad:cf:cb:49:4d:a4:7d: 13:8a:e7:60:4f:84:a1:88:3a:13:29:63:2c:e4:30: ef:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A5:7C:A1:8D:7B:18:12:23:CA:09:6A:59:07:95:4B:7D:5D:D7:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f3ad2b4-9337-3ee6-91d4-72b2889a7d41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:55:bf:ee:74:63:6c:23:81:c5:fc:87:c3:88:cd:41:f2:8e: 42:b0:66:83:be:8f:5b:8f:ca:2d:08:e8:48:8b:e7:e0:1d:b6: 6c:4f:c0:f6:b2:3e:89:52:be:54:cc:3b:44:44:59:ab:66:7d: 4e:7c:be:c9:bc:61:d6:6c:12:04:69:98:ed:db:9a:ff:22:d6: 16:1b:83:23:03:a3:3d:54:6c:3a:e9:22:95:12:f6:42:27:d0: ff:45:4e:5d:c2:e7:6f:6c:b2:aa:5d:a0:e6:36:fb:f8:50:d3: 94:7d:2d:0e:c5:5b:49:cf:ba:63:98:ea:23:94:e4:2b:b5:bb: 32:2d:92:1f:bf:bd:ea:6c:a4:19:81:ff:eb:c0:f3:6d:20:39: dd:e2:ba:61:66:97:30:52:f3:d2:c7:2a:0b:b1:9d:7e:4b:49: e4:8d:f3:01:40:86:64:f5:fc:e0:a4:8f:78:c5:95:ec:b9:ab: aa:40:f2:c0:0c:49:4f:ce:9e:94:ef:a9:5f:70:a2:b1:e7:c2: 00:2b:23:91:cf:f9:0c:48:28:83:d9:d4:24:12:d0:96:ab:3b: 20:75:42:a2:40:0c:6f:bb:1b:8a:a0:fe:c0:a4:77:39:8d:3a: 11:34:20:17:c6:56:91:95:3a:15:13:ee:59:ea:1f:fc:c6:14: 24:97:06:1b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4ywtAsNU9ZWPhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YTU1NzJjZTUtYjBkYi00YjI4LWIxYjYtMzI3NjU0ODViYWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj5HOUCysupIr+3A/LaY9khaws7SZcoaj4b9 kmY47wZwJ/XdKDt3B9vSO6insGrpNjiScKiCOXER7+8wntl66BDinqO1P/8FLcFD fOGsafM2d9kFNI+F9XGdZadgb7TCYpiUJ/+qkXI7G/jfXF2AFUAXzDD3WySqknBI x3WDjazwu/iDUs1jVgwoiSzwTjDTh0VfALtp9XfFiTo+8aZknyU8SEqhgnIcEOG0 C/VE+QP0mJcePDbkukeFtEryMCJg1m4fpXpWDzdmzqAzuVvRAC9vvti3z6YhLTL1 Yxmwj+67/wiR4Wj2qq3Py0lNpH0TiudgT4ShiDoTKWMs5DDvcwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK6lfKGNexgSI8oJalkHlUt9XdcgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGYzYWQyYjQtOTMzNy0z ZWU2LTkxZDQtNzJiMjg4OWE3ZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBkVb/udGNsI4HF/IfDiM1B8o5CsGaDvo9bj8otCOhIi+fgHbZsT8D2 sj6JUr5UzDtERFmrZn1OfL7JvGHWbBIEaZjt25r/ItYWG4MjA6M9VGw66SKVEvZC J9D/RU5dwudvbLKqXaDmNvv4UNOUfS0OxVtJz7pjmOojlOQrtbsyLZIfv73qbKQZ gf/rwPNtIDnd4rphZpcwUvPSxyoLsZ1+S0nkjfMBQIZk9fzgpI94xZXsuauqQPLA DElPzp6U76lfcKKx58IAKyORz/kMSCiD2dQkEtCWqzsgdUKiQAxvuxuKoP7ApHc5 jToRNCAXxlaRlToVE+5Z6h/8xhQklwYb -----END CERTIFICATE-----Generated at Sun May 11 05:36:18 2025 by rpki-client