$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/55aa0d63-d5ec-31ce-ad4c-38aaa2a1be17.roa File: 55aa0d63-d5ec-31ce-ad4c-38aaa2a1be17.roa (raw, json) Hash identifier: 6gr5/RTuQmfGLpy9NTw5xjEvvVEXrLv2BX2VAXEOUg4= Subject key identifier: 57:7A:CA:76:C6:1D:86:99:5A:D2:D1:0D:74:F7:E7:78:F1:84:25:BF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F858E62FBD2D0DF9BE840 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/55aa0d63-d5ec-31ce-ad4c-38aaa2a1be17.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396612 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:85:8e:62:fb:d2:d0:df:9b:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=8ed47a3b-b9c5-4f70-b9a5-ae7161358e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:82:37:50:5b:a2:eb:c4:88:f8:c2:3d:31:f4: 82:ad:ac:b8:c4:f6:0a:2f:d6:ad:f0:d0:1b:1c:1a: a7:3e:65:ad:b1:d3:e2:75:c4:5e:bd:16:a4:88:7e: 38:8f:74:ba:06:34:c3:f9:80:52:76:f7:f3:5b:4b: f9:b0:1e:b6:2a:af:fb:b9:4a:4e:a6:7d:b0:28:e8: 23:ec:a2:38:ac:9e:00:36:3a:04:01:01:84:6a:37: e5:f5:53:de:fa:d1:d3:6c:1e:fd:e1:64:14:de:fa: 7a:3d:d7:18:ef:b7:91:85:56:4f:59:0d:43:98:3d: f8:cd:ab:e5:f0:56:e9:cf:ba:52:84:55:84:e7:ca: df:08:c5:ed:80:64:3e:10:0f:a0:2f:f8:40:d5:be: 2a:ad:22:92:86:45:64:db:74:7c:f0:5b:ca:d8:c9: 75:07:55:4d:25:4d:28:aa:e0:f6:bd:25:ad:6b:16: d3:a0:95:d2:c7:23:a9:7f:dd:80:dd:fa:63:89:8b: b5:d7:40:aa:c2:35:7a:84:cd:d0:31:4a:a3:0c:24: f6:4e:f2:8c:38:5b:10:c4:a5:48:d0:6c:78:29:1b: d6:6c:c2:b8:31:cf:5f:eb:e4:d3:40:2d:3a:be:8e: c1:a6:77:c8:bc:e5:f7:57:19:bd:3a:13:a9:99:f0: dc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7A:CA:76:C6:1D:86:99:5A:D2:D1:0D:74:F7:E7:78:F1:84:25:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/55aa0d63-d5ec-31ce-ad4c-38aaa2a1be17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:6f:64:af:2a:b4:7e:73:db:af:23:1a:65:d2:97:3d:3b:16: ba:e7:0e:c4:47:03:c6:4a:4c:31:de:17:05:e6:01:06:b6:e9: ef:10:a0:ef:35:32:18:c0:eb:ca:b9:72:40:13:ce:04:0a:96: a4:c5:30:e3:40:23:0d:56:c2:bc:76:d8:22:ee:39:5b:0a:1f: b9:4d:97:10:6c:10:74:db:ee:d1:07:ff:92:a5:2e:40:44:be: e0:65:78:47:ae:1e:57:ca:da:67:23:87:63:b6:68:3d:e8:e3: dd:fe:a0:55:87:05:b1:7d:fd:66:89:85:02:02:0c:f3:71:ec: cf:73:cf:6a:3d:e5:c3:bc:35:60:d8:ee:74:c4:eb:c7:25:dd: 68:b1:b4:a4:fc:6e:1e:a8:27:ee:7a:3c:ce:aa:a3:c0:8d:27: 8e:50:40:9a:0a:92:02:07:9b:78:41:60:31:e5:b9:2e:0d:01: 77:85:f4:b7:a1:30:06:23:81:85:5c:68:e4:51:c5:6d:3c:dd: 35:25:9f:15:e8:73:6b:4a:d7:fa:1d:71:06:92:f2:63:6e:00: c9:8a:5d:07:0d:36:b8:ac:01:bb:f8:12:a7:87:37:f7:50:22: 08:d5:fd:60:15:74:73:88:ef:df:21:6e:a9:e0:4f:c0:29:ab: ce:e3:03:54 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4WOYvvS0N+b6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk OGVkNDdhM2ItYjljNS00ZjcwLWI5YTUtYWU3MTYxMzU4ZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoI3UFui68SI+MI9MfSCray4xPYKL9at8NAb HBqnPmWtsdPidcRevRakiH44j3S6BjTD+YBSdvfzW0v5sB62Kq/7uUpOpn2wKOgj 7KI4rJ4ANjoEAQGEajfl9VPe+tHTbB794WQU3vp6PdcY77eRhVZPWQ1DmD34zavl 8Fbpz7pShFWE58rfCMXtgGQ+EA+gL/hA1b4qrSKShkVk23R88FvK2Ml1B1VNJU0o quD2vSWtaxbToJXSxyOpf92A3fpjiYu110CqwjV6hM3QMUqjDCT2TvKMOFsQxKVI 0Gx4KRvWbMK4Mc9f6+TTQC06vo7BpnfIvOX3Vxm9OhOpmfDcOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFd6ynbGHYaZWtLRDXT353jxhCW/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTVhYTBkNjMtZDVlYy0z MWNlLWFkNGMtMzhhYWEyYTFiZTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2b2SvKrR+c9uvIxpl0pc9Oxa65w7ERwPGSkwx3hcF5gEGtunvEKDv NTIYwOvKuXJAE84ECpakxTDjQCMNVsK8dtgi7jlbCh+5TZcQbBB02+7RB/+SpS5A RL7gZXhHrh5XytpnI4djtmg96OPd/qBVhwWxff1miYUCAgzzcezPc89qPeXDvDVg 2O50xOvHJd1osbSk/G4eqCfuejzOqqPAjSeOUECaCpICB5t4QWAx5bkuDQF3hfS3 oTAGI4GFXGjkUcVtPN01JZ8V6HNrStf6HXEGkvJjbgDJil0HDTa4rAG7+BKnhzf3 UCII1f1gFXRziO/fIW6p4E/AKavO4wNU -----END CERTIFICATE-----Generated at Sun May 11 05:36:31 2025 by rpki-client