$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21c8994c-b7a9-3921-a776-411828754690.roa File: 21c8994c-b7a9-3921-a776-411828754690.roa (raw, json) Hash identifier: Xf2wTPj/BxqsosYtfdA1XdfxUi1zOu1dOZdkOGsI85s= Subject key identifier: F5:37:19:BA:77:55:EA:86:A2:71:23:64:9B:41:06:8B:4A:69:74:95 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F89653C4FF8F020A58C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21c8994c-b7a9-3921-a776-411828754690.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396614 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:89:65:3c:4f:f8:f0:20:a5:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=d61eb4a1-1eb9-4a26-a1a5-700611f7da6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:38:b0:f1:d0:2b:50:cc:50:0c:5b:a5:3c:7e: 94:b2:0a:e5:fb:1c:9d:d9:54:99:d9:6c:e9:49:6d: 9e:cf:d4:33:2c:77:21:a2:f0:89:18:86:77:05:c6: e4:c1:78:78:9d:8d:f7:cc:da:38:a4:da:6d:0c:c5: c9:8a:00:58:5e:1c:58:57:b3:8a:47:10:43:ff:f7: ca:d1:15:be:35:75:e3:20:a4:a2:5c:fb:3f:ed:0c: 62:88:f7:ca:e4:ac:f1:48:29:86:d3:8d:ce:a9:da: 56:a8:ba:ef:ba:73:1d:ee:0e:80:06:64:5d:e5:2a: f0:e9:22:53:49:7b:5b:ed:8a:fe:04:44:30:23:7e: 0b:87:f6:28:84:fb:1b:f5:46:99:e3:17:c2:77:ea: 96:f9:8f:05:9a:ed:86:d6:69:1c:1e:2d:3f:04:b8: f4:4c:3a:51:93:a1:bf:03:54:16:61:53:d0:07:2a: 77:d9:c0:82:85:fe:da:c7:dd:e6:be:f9:d3:02:c9: 4b:42:16:57:4e:38:be:0d:3d:96:19:f1:0c:6e:90: ca:39:5a:83:1b:d8:54:11:b0:2c:79:7e:a0:65:50: df:3c:a6:df:be:8b:df:c4:30:37:25:32:ee:c3:43: eb:fc:46:b7:b2:78:e2:9c:cb:14:98:64:2d:aa:33: ca:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:37:19:BA:77:55:EA:86:A2:71:23:64:9B:41:06:8B:4A:69:74:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21c8994c-b7a9-3921-a776-411828754690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:9c:f0:9a:fc:a1:40:2d:ba:89:cb:44:5a:4b:75:a9:a2:d7: d9:01:06:9c:d9:d0:e7:64:73:91:3a:45:8f:85:25:ee:74:71: e9:2d:3e:df:f9:07:27:cc:6e:f5:e6:50:8a:1b:26:cb:cd:73: 07:94:70:07:9f:d7:a0:42:3c:4b:0e:ed:71:08:12:d9:ca:92: 9b:0e:af:8f:1e:88:58:da:e3:ef:1a:bd:33:4f:2d:58:4e:67: ae:13:b7:31:af:5a:94:0c:eb:10:c7:0e:99:7c:69:f2:fb:0f: ed:08:7c:b8:c1:38:e9:06:f0:d2:c8:df:33:5a:8f:71:a5:7a: fd:7f:72:30:47:31:e3:7a:db:b9:31:58:4b:1c:99:19:59:83: 47:ac:fd:0f:27:5c:60:f2:a7:d0:35:ec:b9:e2:94:2c:86:a5: c1:a3:f1:b7:87:49:98:90:d2:50:75:77:05:b3:42:be:f5:e3: d2:3b:4a:d5:af:c8:82:0b:71:1b:4d:46:b0:df:2b:ce:47:5e: a6:d5:f1:d0:3d:fc:2c:61:48:46:f6:c1:83:cd:fc:b9:ee:c5: b9:a3:53:c0:77:98:b4:b1:a5:de:6e:f7:b1:e3:cd:f0:ea:cf: c6:95:13:e9:62:d5:4d:bd:1b:78:f5:2c:b0:56:3a:75:89:ff: 6f:cc:b1:0b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4llPE/48CCljAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZDYxZWI0YTEtMWViOS00YTI2LWExYTUtNzAwNjExZjdkYTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9jiw8dArUMxQDFulPH6Usgrl+xyd2VSZ2Wzp SW2ez9QzLHchovCJGIZ3BcbkwXh4nY33zNo4pNptDMXJigBYXhxYV7OKRxBD//fK 0RW+NXXjIKSiXPs/7QxiiPfK5KzxSCmG043OqdpWqLrvunMd7g6ABmRd5Srw6SJT SXtb7Yr+BEQwI34Lh/YohPsb9UaZ4xfCd+qW+Y8Fmu2G1mkcHi0/BLj0TDpRk6G/ A1QWYVPQByp32cCChf7ax93mvvnTAslLQhZXTji+DT2WGfEMbpDKOVqDG9hUEbAs eX6gZVDfPKbfvovfxDA3JTLuw0Pr/Ea3snjinMsUmGQtqjPKNwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPU3Gbp3VeqGonEjZJtBBotKaXSVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjFjODk5NGMtYjdhOS0z OTIxLWE3NzYtNDExODI4NzU0NjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBznPCa/KFALbqJy0RaS3WpotfZAQac2dDnZHOROkWPhSXudHHpLT7f +QcnzG715lCKGybLzXMHlHAHn9egQjxLDu1xCBLZypKbDq+PHohY2uPvGr0zTy1Y TmeuE7cxr1qUDOsQxw6ZfGny+w/tCHy4wTjpBvDSyN8zWo9xpXr9f3IwRzHjetu5 MVhLHJkZWYNHrP0PJ1xg8qfQNey54pQshqXBo/G3h0mYkNJQdXcFs0K+9ePSO0rV r8iCC3EbTUaw3yvOR16m1fHQPfwsYUhG9sGDzfy57sW5o1PAd5i0saXebvex483w 6s/GlRPpYtVNvRt49SywVjp1if9vzLEL -----END CERTIFICATE-----Generated at Sun May 11 05:56:08 2025 by rpki-client