$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49e4de0a-149e-31b8-ab76-49105abfe5e7.roa File: 49e4de0a-149e-31b8-ab76-49105abfe5e7.roa (raw, json) Hash identifier: zJLS4RQB3h5Mtr/k7BpikHu0Xb4Zk+Fx/edgPlAYOyg= Subject key identifier: 4B:BD:22:0C:96:2B:76:FB:6D:89:3C:C4:A7:EB:ED:9C:3C:A7:B3:2E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F89DADD2FE4C918725880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49e4de0a-149e-31b8-ab76-49105abfe5e7.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396558 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:89:da:dd:2f:e4:c9:18:72:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=58e2c1b6-fc4a-43f0-a17d-a139cd94a1b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:eb:ef:bc:72:0f:40:aa:a6:c5:07:ae:1d:35: f1:08:a5:25:4f:83:72:56:fe:93:a1:8a:58:a1:51: 0e:30:30:67:94:c7:23:6b:5b:17:5e:99:5a:f1:51: 0a:ad:a3:4a:0e:b2:c0:a2:66:19:d8:87:1e:a0:3d: 23:bf:1e:ff:e0:3d:bd:15:49:bc:b1:24:c3:42:0d: 42:62:c6:8f:5c:b7:a3:df:48:92:3e:b2:1d:5e:cf: ef:a6:c1:fe:f4:b1:be:bb:7d:cc:2a:c3:d5:72:62: 57:77:28:66:6e:0d:28:b6:86:a1:e8:67:ce:07:33: 5b:16:79:45:9b:58:3b:70:2c:4a:98:b8:a3:13:d2: 5a:a9:01:c8:79:83:55:11:47:f2:ce:62:5d:31:01: a5:00:e1:dd:6b:67:1e:ec:94:9a:39:74:b0:80:d5: e6:dd:89:fc:6e:59:df:a2:b6:be:27:5c:cc:91:43: bb:23:d6:8a:bd:7b:53:77:17:33:2f:9b:c1:a2:6d: 1c:67:84:82:51:7a:f5:3a:1e:0f:c7:6f:cb:32:a6: 4e:ae:30:ac:e1:c4:3f:a1:48:30:32:b2:51:81:41: 5e:a0:7d:ba:75:12:67:de:3e:a2:ce:fa:60:0d:47: 72:2d:b4:b2:30:29:41:3d:52:c8:fc:5c:de:2b:66: 71:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BD:22:0C:96:2B:76:FB:6D:89:3C:C4:A7:EB:ED:9C:3C:A7:B3:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49e4de0a-149e-31b8-ab76-49105abfe5e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:c9:ff:83:0c:df:0f:8c:4c:4a:4d:a6:bf:f1:8a:41:4c:51: 8a:f1:8f:7a:b8:0d:c7:c8:2a:d4:d0:f2:b2:36:12:06:b7:cc: 45:db:07:13:00:e8:5f:cc:46:b7:31:2a:6f:f5:22:ba:d8:51: a6:20:6f:36:e3:68:bf:20:fb:29:ee:5a:ce:34:ee:00:67:28: a2:b8:01:8f:c2:cc:2b:1a:8c:93:34:ac:b3:09:1b:bd:c7:dc: 27:02:b5:5d:c5:79:4d:1e:44:ac:a4:e1:eb:c2:e8:b2:eb:bb: ba:29:fa:b7:2a:bb:c9:7a:40:3b:78:0d:8d:f4:25:ac:7c:3c: 1f:dc:7f:31:0a:20:43:a6:4c:3b:b1:24:82:cf:97:72:2a:07: 06:a5:27:bf:48:8b:33:b6:85:b6:2a:f7:f3:fd:89:c1:55:96: 90:ea:19:95:f9:01:58:92:94:42:ab:b9:d9:a9:1d:8e:7b:b9: d1:65:64:fb:38:75:98:d8:87:b6:98:4d:79:3b:40:d1:87:54: b6:a3:33:e5:5a:ba:f3:9b:23:f0:2d:f8:a3:c9:e6:0b:20:da: 70:c7:cd:86:f3:1c:e7:d5:60:7b:d0:e1:df:2b:fb:c9:c6:5c: 4a:b2:37:c5:d1:c9:7b:d5:bf:10:6d:5a:19:ff:fa:e8:57:58: 89:ed:ba:92 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4na3S/kyRhyWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NThlMmMxYjYtZmM0YS00M2YwLWExN2QtYTEzOWNkOTRhMWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuvvvHIPQKqmxQeuHTXxCKUlT4NyVv6ToYpY oVEOMDBnlMcja1sXXpla8VEKraNKDrLAomYZ2IceoD0jvx7/4D29FUm8sSTDQg1C YsaPXLej30iSPrIdXs/vpsH+9LG+u33MKsPVcmJXdyhmbg0otoah6GfOBzNbFnlF m1g7cCxKmLijE9JaqQHIeYNVEUfyzmJdMQGlAOHda2ce7JSaOXSwgNXm3Yn8blnf ora+J1zMkUO7I9aKvXtTdxczL5vBom0cZ4SCUXr1Oh4Px2/LMqZOrjCs4cQ/oUgw MrJRgUFeoH26dRJn3j6izvpgDUdyLbSyMClBPVLI/FzeK2ZxXQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEu9IgyWK3b7bYk8xKfr7Zw8p7MuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDllNGRlMGEtMTQ5ZS0z MWI4LWFiNzYtNDkxMDVhYmZlNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB9yf+DDN8PjExKTaa/8YpBTFGK8Y96uA3HyCrU0PKyNhIGt8xF2wcT AOhfzEa3MSpv9SK62FGmIG8242i/IPsp7lrONO4AZyiiuAGPwswrGoyTNKyzCRu9 x9wnArVdxXlNHkSspOHrwuiy67u6Kfq3KrvJekA7eA2N9CWsfDwf3H8xCiBDpkw7 sSSCz5dyKgcGpSe/SIsztoW2Kvfz/YnBVZaQ6hmV+QFYkpRCq7nZqR2Oe7nRZWT7 OHWY2Ie2mE15O0DRh1S2ozPlWrrzmyPwLfijyeYLINpwx82G8xzn1WB70OHfK/vJ xlxKsjfF0cl71b8QbVoZ//roV1iJ7bqS -----END CERTIFICATE-----Generated at Sun May 11 08:29:55 2025 by rpki-client