$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16cd8f54-9a22-392d-94f9-e74075a35f83.roa File: 16cd8f54-9a22-392d-94f9-e74075a35f83.roa (raw, json) Hash identifier: 9JEez8/oA1+0MydznFoBmEwPGRG4vpeqRcew3qvc4a8= Subject key identifier: A4:A2:88:57:92:01:B7:DC:2C:53:43:59:60:9C:2E:75:82:83:A6:ED Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8074719BD8C89195F330 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16cd8f54-9a22-392d-94f9-e74075a35f83.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396599 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:80:74:71:9b:d8:c8:91:95:f3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=cc59c7d9-88b0-4810-9fed-2e0f551963db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:13:11:e4:b0:e2:a4:8b:f7:f7:f8:b5:ba: 9a:10:79:bc:22:a6:fd:5c:26:19:9a:60:96:bd:df: 59:ab:cd:7d:a7:81:7a:12:f1:56:a5:88:e1:2c:cb: ae:23:fd:33:89:f1:5d:20:c6:f5:d3:ee:bd:aa:4d: 88:b4:06:72:43:74:9a:fb:f1:45:c8:f6:b6:57:09: ea:b0:97:10:53:ff:cc:93:a7:45:f7:47:51:63:ab: 86:51:93:28:12:bb:12:f0:21:3a:02:3b:cd:f2:54: b9:7a:9b:42:bf:f1:6c:27:a2:02:05:13:1f:c5:a0: 1b:36:4f:88:0f:79:a2:f3:ba:9f:68:66:d2:1d:07: 55:5c:85:19:66:19:42:eb:df:b6:a2:b1:04:90:90: 10:96:82:f7:c8:af:2b:dd:17:ee:dd:c7:83:45:17: fe:e4:70:9d:69:a7:71:a9:8f:a5:5a:da:85:01:0f: 5f:d0:c6:60:ef:6c:c4:f0:1a:d7:8d:7c:57:df:69: 92:68:45:f0:21:0d:62:7e:46:67:d8:ae:96:bf:9b: e3:6d:b3:a4:77:26:f9:8f:80:a0:83:56:bd:69:b7: 58:34:5d:3c:a4:e9:5b:8c:35:cb:93:60:47:ae:67: 56:a7:a1:d5:78:b1:aa:97:84:ff:1e:73:45:38:23: 1b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A2:88:57:92:01:B7:DC:2C:53:43:59:60:9C:2E:75:82:83:A6:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16cd8f54-9a22-392d-94f9-e74075a35f83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:0f:19:80:c8:fc:4e:da:4f:18:09:7e:ad:49:25:cb:64:20: f6:7d:b8:97:f1:75:f4:a6:33:98:2a:b7:e2:83:33:4a:a5:b9: 93:71:3e:c9:67:c9:c6:fa:34:e8:c2:3e:77:14:f9:df:2d:cc: 72:1b:22:02:c5:21:f7:05:39:fc:96:8f:46:47:20:fd:10:75: fb:cd:a6:2a:00:39:58:34:da:7d:04:69:b5:4a:f6:f1:27:ea: 21:67:d1:02:b7:c6:5c:e7:d3:5f:47:73:e0:2b:f6:c6:8f:f2: 82:4c:fc:4c:ba:89:6b:9e:d0:62:47:6d:39:7b:a6:1b:d7:81: e7:b5:86:3d:3b:4e:40:48:ad:4e:af:6b:bd:a1:0d:62:50:f8: 1e:4f:7a:3b:34:64:2a:1e:a0:9e:98:19:50:fc:5f:f8:71:1c: 8b:fa:bf:66:cd:05:02:9c:04:09:73:bc:13:5d:7e:9e:3b:2d: bc:25:83:61:67:ac:19:33:68:5b:96:61:1a:36:8a:63:96:f4: bf:76:89:be:7d:86:ac:33:3a:96:57:7b:74:c4:9d:53:df:1d: 29:ce:c2:9d:71:dd:44:25:b3:11:0b:ed:e4:69:4e:7c:04:51: a2:80:63:2d:bd:80:b5:1d:32:bd:2d:74:ac:b2:b8:88:6d:17: b5:39:8c:76 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4B0cZvYyJGV8zAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk Y2M1OWM3ZDktODhiMC00ODEwLTlmZWQtMmUwZjU1MTk2M2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIMTEeSw4qSL9/f4tbqaEHm8Iqb9XCYZmmCW vd9Zq819p4F6EvFWpYjhLMuuI/0zifFdIMb10+69qk2ItAZyQ3Sa+/FFyPa2Vwnq sJcQU//Mk6dF90dRY6uGUZMoErsS8CE6AjvN8lS5eptCv/FsJ6ICBRMfxaAbNk+I D3mi87qfaGbSHQdVXIUZZhlC69+2orEEkJAQloL3yK8r3Rfu3ceDRRf+5HCdaadx qY+lWtqFAQ9f0MZg72zE8BrXjXxX32mSaEXwIQ1ifkZn2K6Wv5vjbbOkdyb5j4Cg g1a9abdYNF08pOlbjDXLk2BHrmdWp6HVeLGql4T/HnNFOCMbCwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKSiiFeSAbfcLFNDWWCcLnWCg6btMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTZjZDhmNTQtOWEyMi0z OTJkLTk0ZjktZTc0MDc1YTM1ZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQByDxmAyPxO2k8YCX6tSSXLZCD2fbiX8XX0pjOYKrfigzNKpbmTcT7J Z8nG+jTowj53FPnfLcxyGyICxSH3BTn8lo9GRyD9EHX7zaYqADlYNNp9BGm1Svbx J+ohZ9ECt8Zc59NfR3PgK/bGj/KCTPxMuolrntBiR205e6Yb14HntYY9O05ASK1O r2u9oQ1iUPgeT3o7NGQqHqCemBlQ/F/4cRyL+r9mzQUCnAQJc7wTXX6eOy28JYNh Z6wZM2hblmEaNopjlvS/dom+fYasMzqWV3t0xJ1T3x0pzsKdcd1EJbMRC+3kaU58 BFGigGMtvYC1HTK9LXSssriIbRe1OYx2 -----END CERTIFICATE-----Generated at Sun May 11 06:32:57 2025 by rpki-client