$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d31be6f-2619-3a4b-a651-8b150e6c4530.roa File: 5d31be6f-2619-3a4b-a651-8b150e6c4530.roa (raw, json) Hash identifier: 3daCwunHpQVgcbSBE/fUPf633ziF09EGuTxjEpAKJ3w= Subject key identifier: D4:6D:B7:69:A3:24:0F:4C:11:3A:50:90:2F:D4:CE:0B:3A:A4:31:82 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8D032470BBB85F4D4A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d31be6f-2619-3a4b-a651-8b150e6c4530.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 36630 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8d:03:24:70:bb:b8:5f:4d:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=b8a6904b-e1a8-4dbc-8f4d-4a2c29b03ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:45:69:61:e5:4a:d1:d4:eb:7d:e9:cf:9d:13: 62:f7:5b:7a:7d:94:64:8d:3d:35:ad:5a:4e:e4:23: be:fa:6d:83:18:e9:2f:6f:1a:9f:9a:fd:ec:19:88: f8:21:b2:67:0b:a6:d5:4c:8f:da:b0:31:fb:a2:ce: ad:6a:30:24:fb:e3:22:a5:fd:a7:eb:1c:42:c6:2e: 7b:c3:1a:99:74:9a:98:95:82:4a:7f:98:f0:16:db: e9:9c:f3:a8:36:cc:83:ec:ef:7e:09:28:ef:00:5c: bd:5d:5a:9d:d9:de:1b:21:96:dc:5e:0e:55:8e:07: f5:a8:a3:b0:32:0b:03:61:90:7b:e4:52:ce:5f:2c: 02:73:ea:14:9c:94:29:27:29:64:cf:f6:e4:76:e1: 83:41:a1:f1:6d:6c:42:9a:87:4e:50:7d:b1:bd:cf: 31:08:70:82:d0:34:ec:1a:a3:ed:65:96:82:ac:33: e9:43:cd:5a:e9:5d:c5:fa:00:6e:c5:dc:ac:f7:10: e9:aa:ff:95:25:06:14:fc:34:4e:52:1c:16:8b:28: a9:fa:48:56:8f:0c:a4:3b:2a:7a:15:7a:3d:5a:13: 2c:59:96:1a:99:14:59:44:1d:6f:25:32:2f:71:bc: e7:1e:d2:5a:33:0a:4e:c7:63:e0:08:61:03:b5:7b: f3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6D:B7:69:A3:24:0F:4C:11:3A:50:90:2F:D4:CE:0B:3A:A4:31:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d31be6f-2619-3a4b-a651-8b150e6c4530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b9:98:be:d7:5a:84:2b:b6:7c:c5:4b:99:76:85:ea:30:f5: 08:bb:60:c6:38:78:b6:9c:12:08:bc:98:9b:93:4d:d8:8d:8b: 29:aa:8a:c0:c9:24:1c:ac:ef:1a:a0:7c:91:93:1e:a1:91:70: e0:03:03:a0:a9:21:44:c3:5b:50:0c:52:e2:cb:40:bc:ce:15: e7:f3:47:86:c6:28:6b:fb:65:b1:90:07:91:b3:bd:8e:43:27: 0b:30:7e:4d:4b:59:7c:7b:ae:12:af:63:90:77:14:ab:21:1d: b2:f6:89:50:8e:84:e4:9b:ac:13:21:ac:39:70:ea:23:42:7c: 3e:34:cc:98:3b:e4:71:da:5d:06:1e:71:bc:12:7f:cd:b5:e6: 51:be:51:bd:3d:10:75:3a:cf:4d:39:0f:ad:22:e2:5b:19:2a: 7a:3b:eb:74:6f:80:34:41:9d:d5:6e:a9:52:7c:42:e5:ee:74: 2c:fe:0a:02:d8:9c:15:d5:0e:40:2e:9e:df:50:9f:4e:81:89: 5e:05:36:14:de:6e:cc:7f:5e:51:0f:ae:ee:32:56:44:bf:bf: 9c:29:6a:8d:4b:0d:e6:a1:01:ac:56:4f:4c:47:3f:67:b9:4e: 85:f5:a4:bb:05:7b:03:3f:f2:72:7a:61:56:42:86:4a:e2:7c: b6:23:6f:1e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P40DJHC7uF9NSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YjhhNjkwNGItZTFhOC00ZGJjLThmNGQtNGEyYzI5YjAzZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEVpYeVK0dTrfenPnRNi91t6fZRkjT01rVpO 5CO++m2DGOkvbxqfmv3sGYj4IbJnC6bVTI/asDH7os6tajAk++Mipf2n6xxCxi57 wxqZdJqYlYJKf5jwFtvpnPOoNsyD7O9+CSjvAFy9XVqd2d4bIZbcXg5Vjgf1qKOw MgsDYZB75FLOXywCc+oUnJQpJylkz/bkduGDQaHxbWxCmodOUH2xvc8xCHCC0DTs GqPtZZaCrDPpQ81a6V3F+gBuxdys9xDpqv+VJQYU/DROUhwWiyip+khWjwykOyp6 FXo9WhMsWZYamRRZRB1vJTIvcbznHtJaMwpOx2PgCGEDtXvzxQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNRtt2mjJA9METpQkC/Uzgs6pDGCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWQzMWJlNmYtMjYxOS0z YTRiLWE2NTEtOGIxNTBlNmM0NTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBquZi+11qEK7Z8xUuZdoXqMPUIu2DGOHi2nBIIvJibk03YjYspqorA ySQcrO8aoHyRkx6hkXDgAwOgqSFEw1tQDFLiy0C8zhXn80eGxihr+2WxkAeRs72O QycLMH5NS1l8e64Sr2OQdxSrIR2y9olQjoTkm6wTIaw5cOojQnw+NMyYO+Rx2l0G HnG8En/NteZRvlG9PRB1Os9NOQ+tIuJbGSp6O+t0b4A0QZ3VbqlSfELl7nQs/goC 2JwV1Q5ALp7fUJ9OgYleBTYU3m7Mf15RD67uMlZEv7+cKWqNSw3moQGsVk9MRz9n uU6F9aS7BXsDP/JyemFWQoZK4ny2I28e -----END CERTIFICATE-----Generated at Sun May 11 08:37:47 2025 by rpki-client