$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/444d083e-2f0e-34b2-b23f-81cb2c647d6f.roa File: 444d083e-2f0e-34b2-b23f-81cb2c647d6f.roa (raw, json) Hash identifier: W4tC+XejqOduKtgroHtYFw1a66hlgtKegMjKupYDeck= Subject key identifier: 4E:1B:1B:6F:7D:C2:B3:AC:AC:0F:63:66:86:59:B7:64:AB:53:DF:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8C315971ADA1DD5C6400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/444d083e-2f0e-34b2-b23f-81cb2c647d6f.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396567 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8c:31:59:71:ad:a1:dd:5c:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=8df9449e-c45c-4b16-9208-dc1d5b8a2517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:92:6e:1b:ac:13:6e:25:58:30:f8:21:3d:bc: d0:25:ca:82:03:fc:15:43:86:f1:af:23:70:60:6a: 87:35:84:32:01:cf:32:b8:20:af:2d:04:c4:3d:42: fa:6a:41:26:21:3e:3f:3d:c8:2d:02:e9:67:3d:ff: 46:30:07:ff:85:fb:34:2f:ff:40:07:81:03:95:55: 10:e6:f9:8d:28:06:56:bf:d7:38:40:35:63:b0:b8: 4b:16:54:33:6e:66:d3:13:c2:1e:62:e4:07:84:13: f8:f3:6d:3c:c6:99:e3:b9:6e:ea:57:5b:e3:4a:75: bc:62:4c:58:7d:14:90:9a:2a:ad:17:8a:7c:ff:73: 81:17:ba:c0:85:c0:82:45:e0:12:18:a7:e7:35:b7: f7:24:93:81:29:d2:d2:78:1a:34:2e:39:c5:5f:37: 5f:3c:f8:a0:b0:d4:22:11:d9:a5:2b:ed:b1:3c:2c: a5:cd:70:37:1f:19:75:74:d9:43:8b:bd:08:48:2a: 2c:d3:2b:96:4e:6d:dd:89:05:56:a7:0d:a0:72:b1: f5:69:80:b5:18:c5:96:7b:f2:09:4d:6a:70:f7:ac: 61:90:d3:4b:50:6b:83:c9:be:9f:1b:1d:f8:b5:9b: 3a:12:f9:da:c4:83:1e:c5:f8:9d:e8:e6:e6:98:45: a7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1B:1B:6F:7D:C2:B3:AC:AC:0F:63:66:86:59:B7:64:AB:53:DF:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/444d083e-2f0e-34b2-b23f-81cb2c647d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:8b:00:cc:d5:6c:97:d5:aa:15:a8:a0:0b:a7:39:2d:dd:12: 83:e8:bb:0d:cb:c3:b2:bf:51:cb:7a:a4:8c:83:e7:28:31:70: 82:3f:db:76:d5:6a:7b:fd:21:53:db:7c:7b:44:17:b3:96:f2: 36:d4:a2:92:b4:da:85:69:c7:aa:ea:20:68:85:f2:2f:fe:33: 04:69:b4:01:03:00:83:0c:63:0d:38:4c:19:45:f5:7c:59:03: 9f:ae:da:a2:aa:4d:23:dd:b7:1d:d8:23:8d:ab:50:2b:83:2e: 42:6b:d4:54:64:b5:4e:f7:d1:cc:33:c9:ac:c3:c3:26:fa:40: 91:4b:95:31:8f:33:04:19:09:4f:10:66:4b:ac:03:31:c0:a7: 02:8e:15:72:00:5a:f4:8e:a2:8f:52:17:96:8f:14:3b:03:7b: cd:f1:4d:32:f1:48:e6:96:a2:96:fb:ee:6d:ea:62:61:5d:1f: ab:f2:1d:f1:9c:03:86:43:22:4d:51:7c:c3:06:3c:70:a2:47: ae:e3:40:1c:15:8c:08:7b:0f:91:98:5e:33:89:95:64:2a:af: 87:94:7a:c7:d5:55:0a:32:0e:1f:ff:5b:a9:30:cb:2c:11:b1: 19:1a:58:57:28:c7:75:94:fe:a2:fc:d5:47:cc:ee:cc:a1:9d: 01:f1:27:bf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4wxWXGtod1cZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk OGRmOTQ0OWUtYzQ1Yy00YjE2LTkyMDgtZGMxZDViOGEyNTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55JuG6wTbiVYMPghPbzQJcqCA/wVQ4bxryNw YGqHNYQyAc8yuCCvLQTEPUL6akEmIT4/PcgtAulnPf9GMAf/hfs0L/9AB4EDlVUQ 5vmNKAZWv9c4QDVjsLhLFlQzbmbTE8IeYuQHhBP48208xpnjuW7qV1vjSnW8YkxY fRSQmiqtF4p8/3OBF7rAhcCCReASGKfnNbf3JJOBKdLSeBo0LjnFXzdfPPigsNQi EdmlK+2xPCylzXA3Hxl1dNlDi70ISCos0yuWTm3diQVWpw2gcrH1aYC1GMWWe/IJ TWpw96xhkNNLUGuDyb6fGx34tZs6EvnaxIMexfid6ObmmEWnHwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE4bG299wrOsrA9jZoZZt2SrU987MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDQ0ZDA4M2UtMmYwZS0z NGIyLWIyM2YtODFjYjJjNjQ3ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB5iwDM1WyX1aoVqKALpzkt3RKD6LsNy8Oyv1HLeqSMg+coMXCCP9t2 1Wp7/SFT23x7RBezlvI21KKStNqFaceq6iBohfIv/jMEabQBAwCDDGMNOEwZRfV8 WQOfrtqiqk0j3bcd2CONq1Argy5Ca9RUZLVO99HMM8msw8Mm+kCRS5UxjzMEGQlP EGZLrAMxwKcCjhVyAFr0jqKPUheWjxQ7A3vN8U0y8UjmlqKW++5t6mJhXR+r8h3x nAOGQyJNUXzDBjxwokeu40AcFYwIew+RmF4ziZVkKq+HlHrH1VUKMg4f/1upMMss EbEZGlhXKMd1lP6i/NVHzO7MoZ0B8Se/ -----END CERTIFICATE-----Generated at Sun May 11 05:25:57 2025 by rpki-client