$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23fecb44-7421-362d-ba40-5b6c6d7a3112.roa File: 23fecb44-7421-362d-ba40-5b6c6d7a3112.roa (raw, json) Hash identifier: Hz17PTWNEl2QHBH/ol/dmJVH5QUfJkudblJtUYiOBVg= Subject key identifier: 0F:A4:B9:CE:79:35:A6:1F:7E:C2:AA:EC:F2:CB:13:78:F5:AA:6D:29 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8231024A762F5AA44780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23fecb44-7421-362d-ba40-5b6c6d7a3112.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396602 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:82:31:02:4a:76:2f:5a:a4:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=d63dc2c8-2884-4e36-803b-29b513cb3f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ae:ef:79:ce:91:71:34:b9:53:b8:45:63:5f: 82:ce:6a:f5:fe:fe:38:a9:73:13:f5:5a:dd:b8:25: f9:9e:a3:ef:65:d1:59:eb:80:e2:46:b3:1f:79:19: e3:fd:47:c0:97:e9:6f:e6:a5:12:bd:49:7d:b9:29: d5:ac:50:9e:17:22:40:13:5a:ae:e8:1a:e6:c9:4a: 27:e1:ed:50:a6:8c:62:e0:4f:91:17:e4:59:da:51: 5f:30:c7:51:4d:2f:d1:13:fd:6d:fb:c4:82:3b:83: 8f:46:f3:41:4e:82:e4:4c:ac:e5:a1:56:be:f5:fa: 9c:d8:40:f3:cf:d0:1a:a5:6d:50:75:49:bc:e9:74: 0c:37:6b:43:66:eb:48:45:e7:99:ad:c2:f0:c5:22: 5e:15:f7:12:50:20:76:c7:7b:37:08:43:7b:f2:d4: f4:52:08:a8:61:c0:05:ba:e3:94:60:db:73:5a:80: 57:d8:96:42:de:32:10:38:98:7c:2e:eb:43:69:49: c6:a7:67:a8:85:bd:78:cb:ce:29:9e:d4:06:5b:c9: 55:2d:ee:aa:82:b5:ba:4e:ed:76:72:a6:4e:4c:0c: df:e1:a3:f8:1e:44:ab:4a:8a:92:73:71:af:a3:c4: 70:49:0f:ac:a4:f3:c3:20:3b:86:ee:0d:d1:35:d8: 1a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A4:B9:CE:79:35:A6:1F:7E:C2:AA:EC:F2:CB:13:78:F5:AA:6D:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23fecb44-7421-362d-ba40-5b6c6d7a3112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:fc:9e:ef:b4:a8:05:c2:41:ef:41:35:39:30:ea:9e:c8:72: 84:69:57:55:1d:a9:76:7d:ba:74:38:9e:5b:f9:5c:23:ee:e2: 94:2c:89:c9:95:01:0a:d8:40:de:e1:8a:20:b1:41:8b:22:0f: 86:58:17:bd:7d:36:be:fd:d6:6e:21:1a:40:6e:30:c6:84:7b: bf:88:65:7e:14:44:24:00:35:4c:f0:b0:82:80:6f:dd:72:7d: fe:3e:04:17:49:57:47:7c:31:5f:3d:c9:f3:fb:b0:bc:90:01: fc:f8:94:ef:3c:4a:00:06:86:15:4d:ca:90:ba:49:53:8a:b3: 3b:ad:42:25:1c:55:2f:5e:f6:a1:99:34:c1:74:ec:05:e8:50: 2c:e1:84:e3:16:50:0d:7f:f7:3f:05:de:38:81:28:64:29:87: 10:73:ea:e1:5d:f8:0e:15:75:62:90:e3:ec:64:e6:a6:18:bd: 5f:c0:a5:00:a9:8b:4f:b2:54:ba:f4:ea:d0:e5:69:c5:68:c5: eb:4c:68:b4:65:c4:c4:5c:d5:0c:c4:37:ee:37:37:4c:9b:b5: 5e:2c:e6:4c:0e:e1:a2:7d:ec:0f:f6:47:02:cd:e7:55:87:77: 98:06:dc:4c:8a:7d:11:06:4c:e3:6d:63:12:06:9e:84:34:b1: b1:4b:80:98 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4IxAkp2L1qkR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZDYzZGMyYzgtMjg4NC00ZTM2LTgwM2ItMjliNTEzY2IzZjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq7vec6RcTS5U7hFY1+Czmr1/v44qXMT9Vrd uCX5nqPvZdFZ64DiRrMfeRnj/UfAl+lv5qUSvUl9uSnVrFCeFyJAE1qu6BrmyUon 4e1Qpoxi4E+RF+RZ2lFfMMdRTS/RE/1t+8SCO4OPRvNBToLkTKzloVa+9fqc2EDz z9AapW1QdUm86XQMN2tDZutIReeZrcLwxSJeFfcSUCB2x3s3CEN78tT0UgioYcAF uuOUYNtzWoBX2JZC3jIQOJh8LutDaUnGp2eohb14y84pntQGW8lVLe6qgrW6Tu12 cqZOTAzf4aP4HkSrSoqSc3Gvo8RwSQ+spPPDIDuG7g3RNdgaJwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA+kuc55NaYffsKq7PLLE3j1qm0pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjNmZWNiNDQtNzQyMS0z NjJkLWJhNDAtNWI2YzZkN2EzMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAa/J7vtKgFwkHvQTU5MOqeyHKEaVdVHal2fbp0OJ5b+Vwj7uKULInJ lQEK2EDe4YogsUGLIg+GWBe9fTa+/dZuIRpAbjDGhHu/iGV+FEQkADVM8LCCgG/d cn3+PgQXSVdHfDFfPcnz+7C8kAH8+JTvPEoABoYVTcqQuklTirM7rUIlHFUvXvah mTTBdOwF6FAs4YTjFlANf/c/Bd44gShkKYcQc+rhXfgOFXVikOPsZOamGL1fwKUA qYtPslS69OrQ5WnFaMXrTGi0ZcTEXNUMxDfuNzdMm7VeLOZMDuGifewP9kcCzedV h3eYBtxMin0RBkzjbWMSBp6ENLGxS4CY -----END CERTIFICATE-----Generated at Sun May 11 06:35:22 2025 by rpki-client