$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ecd9ebd-5aca-3470-b0e7-3d749e98d3de.roa File: 3ecd9ebd-5aca-3470-b0e7-3d749e98d3de.roa (raw, json) Hash identifier: 7ukwEKiIQlFSpxxl3U0L4CzkQQp6Hb8JyKmROh5WkhU= Subject key identifier: DB:4F:A1:79:F3:43:D3:C4:02:86:D4:8C:02:9D:07:45:AC:69:6E:3F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F80EF8382A9899DD3CFC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ecd9ebd-5aca-3470-b0e7-3d749e98d3de.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396540 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:80:ef:83:82:a9:89:9d:d3:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=67314ce0-5b02-4e4b-9692-d2976a239c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b2:b5:56:03:58:f0:c4:fc:20:fe:8b:76:09: b3:4a:e9:7a:23:6e:82:5e:c9:79:db:2d:5e:1a:06: f0:60:b2:26:20:07:cb:4a:ae:b6:6a:b9:52:13:41: 5e:8b:11:3d:84:c8:27:30:bb:b9:98:47:9a:ea:bb: 49:54:86:0e:29:02:4e:46:94:56:d4:1e:63:a1:49: 05:9e:e3:b7:e9:8d:3b:44:89:08:c2:0a:2e:af:a5: f3:d1:fd:85:39:32:da:b5:1a:17:25:b1:2e:83:15: c2:f5:d3:49:3f:12:c4:7b:24:a5:16:d4:8d:11:ea: bd:61:f7:76:79:3f:83:2a:8b:0b:76:b8:be:00:4c: a8:4a:66:b6:d4:26:cd:9d:5f:26:2b:9e:bc:de:65: 15:f8:55:41:73:e9:18:1e:e1:03:6d:cc:4c:74:b7: 8f:86:e2:f1:3a:60:68:0a:e7:14:7a:76:f6:35:ac: 82:ba:f5:ad:23:26:ff:71:a1:ac:68:6a:b6:32:a1: 89:7b:11:db:1d:86:92:50:79:56:5f:bc:41:ee:99: 07:6e:fb:56:74:36:a7:d5:b1:d3:f7:d3:c9:d4:c5: 6c:3d:95:cd:77:17:85:2f:6c:61:9b:d8:c7:06:27: 7e:26:1f:6e:db:c5:fa:a5:ec:cb:18:d5:d5:a3:f6: 62:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4F:A1:79:F3:43:D3:C4:02:86:D4:8C:02:9D:07:45:AC:69:6E:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ecd9ebd-5aca-3470-b0e7-3d749e98d3de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:61:2f:dd:a7:39:84:25:33:cf:72:b5:4d:61:72:b0:12:3c: 7b:c4:ff:28:95:92:eb:4b:11:75:32:61:c6:8b:df:fc:b4:c2: 33:70:ab:0a:06:1f:7f:8a:c4:10:b3:99:4f:b8:33:7f:61:72: 84:88:04:81:41:e8:ac:f4:60:b5:fd:4d:6b:14:4f:d5:0a:1d: a8:11:c3:8c:45:75:14:9b:3f:e7:6f:ed:b0:4b:3a:ee:8d:b1: 27:d9:ea:d1:71:19:72:66:53:c1:fc:9e:ee:a8:b5:65:97:1d: ca:3c:a4:c8:5d:14:62:64:8d:b6:7b:c5:03:71:27:9d:ee:8d: 46:89:02:ba:c9:fb:42:45:ba:db:b9:f9:ef:5b:7d:97:aa:26: 9a:20:5c:76:bb:4b:77:40:a3:47:34:f8:8b:e3:8a:36:8c:34: f4:25:71:b6:43:47:32:0c:02:97:7a:00:c9:6d:f3:60:8f:84: a9:49:38:de:a8:e1:90:d4:8f:2d:3e:9b:4a:94:70:01:51:5d: bd:8a:31:56:71:34:57:8f:31:76:fb:4b:8f:3b:9b:72:51:d7: a8:82:7f:75:fb:51:32:16:15:24:79:a2:ed:5b:0d:05:7d:59: 62:7c:1d:65:8c:fd:67:3a:f1:4a:be:29:8c:7a:4a:d1:5b:e1: f6:43:ff:fe -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4Dvg4KpiZ3Tz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NjczMTRjZTAtNWIwMi00ZTRiLTk2OTItZDI5NzZhMjM5YzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLK1VgNY8MT8IP6LdgmzSul6I26CXsl52y1e GgbwYLImIAfLSq62arlSE0FeixE9hMgnMLu5mEea6rtJVIYOKQJORpRW1B5joUkF nuO36Y07RIkIwgour6Xz0f2FOTLatRoXJbEugxXC9dNJPxLEeySlFtSNEeq9Yfd2 eT+DKosLdri+AEyoSma21CbNnV8mK5683mUV+FVBc+kYHuEDbcxMdLePhuLxOmBo CucUenb2NayCuvWtIyb/caGsaGq2MqGJexHbHYaSUHlWX7xB7pkHbvtWdDan1bHT 99PJ1MVsPZXNdxeFL2xhm9jHBid+Jh9u28X6pezLGNXVo/ZiXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNtPoXnzQ9PEAobUjAKdB0WsaW4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2VjZDllYmQtNWFjYS0z NDcwLWIwZTctM2Q3NDllOThkM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAcYS/dpzmEJTPPcrVNYXKwEjx7xP8olZLrSxF1MmHGi9/8tMIzcKsK Bh9/isQQs5lPuDN/YXKEiASBQeis9GC1/U1rFE/VCh2oEcOMRXUUmz/nb+2wSzru jbEn2erRcRlyZlPB/J7uqLVllx3KPKTIXRRiZI22e8UDcSed7o1GiQK6yftCRbrb ufnvW32XqiaaIFx2u0t3QKNHNPiL44o2jDT0JXG2Q0cyDAKXegDJbfNgj4SpSTje qOGQ1I8tPptKlHABUV29ijFWcTRXjzF2+0uPO5tyUdeogn91+1EyFhUkeaLtWw0F fVlifB1ljP1nOvFKvimMekrRW+H2Q//+ -----END CERTIFICATE-----Generated at Sun May 11 05:34:59 2025 by rpki-client