$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa File: 525cb902-d047-345f-b98a-33a46136085b.roa (raw, json) Hash identifier: W/4Hil1MhR1qDj6Baia8aT53kGgbwgs+Sx1EXZfpIsU= Subject key identifier: D7:9D:BD:D3:99:73:CF:18:E2:D2:4D:96:6F:73:52:9E:DA:B6:73:F4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8B7AA582D203A5720E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396578 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8b:7a:a5:82:d2:03:a5:72:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=ca1e606b-e022-4969-aac3-4330be0fd5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:04:cd:ec:a9:cf:ab:d6:29:73:e7:ea:b9:b2: 33:bd:6f:f8:03:86:5e:69:0e:0e:99:93:63:de:77: 37:40:dc:7b:e0:0a:e4:e0:59:07:c6:1a:7e:b6:bd: 23:2f:d5:4b:55:ac:c3:27:44:22:a2:8a:13:9b:7e: a3:83:7e:38:d1:92:f2:29:6c:79:00:ee:47:c7:ac: 49:cc:0f:68:58:ce:3b:00:15:e6:16:3d:4e:aa:79: a6:7f:64:31:d0:c5:a7:9f:50:23:a6:8c:c6:a5:78: 85:d9:9b:2b:1a:e1:00:3c:b5:a1:ab:08:27:ae:30: 94:58:66:7d:d3:72:e4:8c:07:bf:c4:13:1a:f0:c4: a9:17:13:a8:8e:cd:70:6f:54:f7:b4:c2:79:1e:99: 5f:e9:21:9b:b9:11:a5:0e:96:38:a9:dd:f3:27:55: ab:16:1b:0d:f2:f2:53:3e:16:c2:1a:c6:cd:8b:72: c5:5f:c1:2e:7c:4e:0f:42:4d:61:53:51:8f:fc:a9: 9c:04:a0:8c:21:1e:08:7d:54:fc:08:bc:14:cb:0e: 61:86:6a:62:44:93:ef:31:41:9e:ec:ea:ff:fb:4a: a9:af:5e:d9:ed:4d:2b:0a:97:35:6a:52:c7:1e:b6: 6a:18:6c:d8:19:03:8a:f7:9f:30:91:c4:51:a6:87: 4f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9D:BD:D3:99:73:CF:18:E2:D2:4D:96:6F:73:52:9E:DA:B6:73:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:c2:8b:a9:d8:04:6c:e8:33:cb:53:3a:62:b6:21:03:0b:e3: 24:b9:22:8a:11:dc:7e:90:d5:da:31:e4:1c:16:a6:4f:23:7d: 2f:73:c2:99:5a:38:c6:7d:74:dd:0a:f6:36:86:67:a0:8e:c7: 59:85:7c:5a:aa:73:aa:d9:84:9d:14:87:19:2d:ce:69:56:d2: b3:a2:8d:6c:44:78:ec:8a:51:6f:ea:03:da:35:b0:02:0d:21: 40:35:8e:df:0d:c0:3d:ab:20:68:0e:11:da:1f:6e:fb:a1:43: 54:d8:ad:77:3d:ce:72:18:42:b3:ee:ed:34:3c:db:e1:6c:5d: ec:90:23:5e:cc:2e:3f:0e:aa:04:8e:3f:82:64:c5:ef:cc:8b: 90:5c:be:70:c9:56:07:d6:f4:28:23:9f:37:a2:8f:1f:db:e8: ee:ac:9d:82:bd:1a:96:99:2a:6e:77:9d:16:c5:7d:e9:1b:4f: c3:ad:fe:27:2b:a1:cc:08:17:8e:44:0e:bd:3b:f3:54:f6:3b: 84:ea:d7:a3:a0:a3:f7:a1:0d:c9:6c:93:d1:da:0f:f9:fd:1d: 48:fd:21:a6:39:90:e4:1e:db:62:84:94:7b:13:5a:be:86:14: b8:1d:f0:76:10:c2:72:8c:29:27:8e:43:d2:0f:19:fe:83:e0: 87:4a:a9:10 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4t6pYLSA6VyDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk Y2ExZTYwNmItZTAyMi00OTY5LWFhYzMtNDMzMGJlMGZkNWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggTN7KnPq9Ypc+fqubIzvW/4A4ZeaQ4OmZNj 3nc3QNx74Ark4FkHxhp+tr0jL9VLVazDJ0QioooTm36jg3440ZLyKWx5AO5Hx6xJ zA9oWM47ABXmFj1Oqnmmf2Qx0MWnn1AjpozGpXiF2ZsrGuEAPLWhqwgnrjCUWGZ9 03LkjAe/xBMa8MSpFxOojs1wb1T3tMJ5Hplf6SGbuRGlDpY4qd3zJ1WrFhsN8vJT PhbCGsbNi3LFX8EufE4PQk1hU1GP/KmcBKCMIR4IfVT8CLwUyw5hhmpiRJPvMUGe 7Or/+0qpr17Z7U0rCpc1alLHHrZqGGzYGQOK958wkcRRpodPiQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNedvdOZc88Y4tJNlm9zUp7atnP0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTI1Y2I5MDItZDA0Ny0z NDVmLWI5OGEtMzNhNDYxMzYwODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBzwoup2ARs6DPLUzpitiEDC+MkuSKKEdx+kNXaMeQcFqZPI30vc8KZ WjjGfXTdCvY2hmegjsdZhXxaqnOq2YSdFIcZLc5pVtKzoo1sRHjsilFv6gPaNbAC DSFANY7fDcA9qyBoDhHaH277oUNU2K13Pc5yGEKz7u00PNvhbF3skCNezC4/DqoE jj+CZMXvzIuQXL5wyVYH1vQoI583oo8f2+jurJ2CvRqWmSpud50WxX3pG0/Drf4n K6HMCBeORA69O/NU9juE6tejoKP3oQ3JbJPR2g/5/R1I/SGmOZDkHttihJR7E1q+ hhS4HfB2EMJyjCknjkPSDxn+g+CHSqkQ -----END CERTIFICATE-----Generated at Sun May 11 06:34:19 2025 by rpki-client