$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/46bcac69-2c7d-3765-acc3-9bfe4cfa0dd1.roa File: 46bcac69-2c7d-3765-acc3-9bfe4cfa0dd1.roa (raw, json) Hash identifier: GHJFxbJ9BeOC+WNrcnQQsUz92NT4p3W1+6XHLB6gSlY= Subject key identifier: A3:49:74:29:53:C2:B3:FE:CE:AD:B1:5F:B4:57:DB:21:31:D6:5E:32 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8D70A26280B2EFB7F500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/46bcac69-2c7d-3765-acc3-9bfe4cfa0dd1.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 36617 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8d:70:a2:62:80:b2:ef:b7:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=1c8cf113-e94b-4dc3-8647-0deb54981ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d5:90:cc:26:e7:a7:a8:3f:4e:65:ca:7c:e9: 83:8d:8f:b9:17:29:4f:e3:0e:36:34:cb:23:9d:51: 87:7e:ae:02:b4:e0:24:fb:63:29:0c:88:fc:2c:56: f2:b8:4e:3d:2e:5e:c1:45:5f:19:88:33:f9:8c:06: 69:5e:94:60:79:8e:cb:81:55:45:c8:d8:50:18:dd: 77:18:dd:e1:7d:c6:3c:09:bf:a6:80:b7:9c:78:35: 1b:65:a0:1c:ae:b1:ae:0d:f5:09:51:ac:68:de:1d: 75:b7:91:ef:c5:ef:53:b2:15:f4:86:b1:11:63:e7: d0:b7:5e:3c:f6:85:aa:59:8e:41:27:a9:d6:56:18: 09:38:b3:9d:0b:17:e6:2b:c2:14:3b:81:c0:6b:d3: 6a:dc:8d:c5:2f:0e:1c:91:ff:c8:5b:60:50:c5:42: ae:c8:9d:21:5e:80:21:c2:87:33:79:4f:16:93:88: 57:a7:8a:12:1a:5d:e7:c1:73:c7:17:04:3c:d5:54: a3:24:46:d3:7e:68:32:66:1d:e4:49:0e:5a:93:53: 49:14:9c:7f:2a:f0:82:7a:37:f5:61:6d:15:e3:96: 47:67:be:01:b4:e4:10:d4:a5:dd:90:5e:47:fd:a9: bd:dd:82:63:ab:6f:af:cd:be:1d:0f:72:b6:93:52: 8f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:49:74:29:53:C2:B3:FE:CE:AD:B1:5F:B4:57:DB:21:31:D6:5E:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/46bcac69-2c7d-3765-acc3-9bfe4cfa0dd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:c5:22:6a:98:32:98:c0:53:f2:5f:47:57:da:e6:0a:3b:66: 35:ae:32:7c:db:de:e3:27:e1:6e:f0:a9:d1:e4:57:3e:0a:a6: f9:ef:32:65:65:55:7e:8f:a6:2b:13:18:32:85:c8:be:15:09: ba:9f:8d:ea:6f:fc:44:f6:b3:43:fe:c8:c0:4e:7a:de:68:56: 9b:60:96:51:be:30:bf:05:42:67:dc:da:d7:73:62:de:4a:6b: f1:c8:38:41:a3:48:ad:6e:4c:a5:59:23:81:cb:dc:6b:4d:55: d3:e0:16:f4:0a:a2:48:8e:f9:40:c6:71:98:8d:61:2f:89:2f: d1:b1:5a:86:27:e8:e3:57:5a:98:06:b6:31:3b:ed:df:48:05: 9f:5c:37:3a:36:82:fa:ac:f0:14:60:50:c2:c9:34:06:ba:36: 01:cd:6b:3e:66:49:cc:eb:26:e3:4f:e2:ff:17:79:f6:0d:61: 6f:28:86:4f:aa:1b:f6:ed:43:da:60:07:40:a9:6f:1b:65:29: db:28:4b:3e:8b:c8:0c:e9:73:61:dc:14:66:86:4b:73:28:02: 40:29:3a:f0:52:57:f4:a2:47:86:7a:0a:fa:e1:da:d6:30:2d: f2:78:48:b2:9b:cc:72:02:cf:fe:bf:68:73:f3:15:cc:b9:c0: d3:04:2a:0c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P41womKAsu+39QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MWM4Y2YxMTMtZTk0Yi00ZGMzLTg2NDctMGRlYjU0OTgxY2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdWQzCbnp6g/TmXKfOmDjY+5FylP4w42NMsj nVGHfq4CtOAk+2MpDIj8LFbyuE49Ll7BRV8ZiDP5jAZpXpRgeY7LgVVFyNhQGN13 GN3hfcY8Cb+mgLeceDUbZaAcrrGuDfUJUaxo3h11t5Hvxe9TshX0hrERY+fQt148 9oWqWY5BJ6nWVhgJOLOdCxfmK8IUO4HAa9Nq3I3FLw4ckf/IW2BQxUKuyJ0hXoAh woczeU8Wk4hXp4oSGl3nwXPHFwQ81VSjJEbTfmgyZh3kSQ5ak1NJFJx/KvCCejf1 YW0V45ZHZ74BtOQQ1KXdkF5H/am93YJjq2+vzb4dD3K2k1KPSQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKNJdClTwrP+zq2xX7RX2yEx1l4yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDZiY2FjNjktMmM3ZC0z NzY1LWFjYzMtOWJmZTRjZmEwZGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBFxSJqmDKYwFPyX0dX2uYKO2Y1rjJ8297jJ+Fu8KnR5Fc+Cqb57zJl ZVV+j6YrExgyhci+FQm6n43qb/xE9rND/sjATnreaFabYJZRvjC/BUJn3NrXc2Le SmvxyDhBo0itbkylWSOBy9xrTVXT4Bb0CqJIjvlAxnGYjWEviS/RsVqGJ+jjV1qY BrYxO+3fSAWfXDc6NoL6rPAUYFDCyTQGujYBzWs+ZknM6ybjT+L/F3n2DWFvKIZP qhv27UPaYAdAqW8bZSnbKEs+i8gM6XNh3BRmhktzKAJAKTrwUlf0okeGegr64drW MC3yeEiym8xyAs/+v2hz8xXMucDTBCoM -----END CERTIFICATE-----Generated at Sun May 11 08:46:46 2025 by rpki-client