$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/633f8a6e-4a0c-3d43-a60e-09afc18e69c2.roa File: 633f8a6e-4a0c-3d43-a60e-09afc18e69c2.roa (raw, json) Hash identifier: Cl69svUAQQ2wsgOosg7qy3uQO7Ca0T26Z5DMUbzeq9g= Subject key identifier: 18:CD:47:69:1C:A8:B5:C8:02:11:DA:9C:26:1B:BC:2A:B9:94:25:4A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F834B67662B43FDD290E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/633f8a6e-4a0c-3d43-a60e-09afc18e69c2.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 32651 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:83:4b:67:66:2b:43:fd:d2:90:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=825f21d4-ddd7-4097-86e9-117a8b9de57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:00:df:5c:0c:66:e2:03:76:ca:45:50:80:fa: e4:d3:e2:1d:69:d3:04:a3:8c:1b:29:8a:f6:c9:af: 51:f0:d8:13:b5:68:4f:a0:e2:18:5e:2b:c8:04:9f: c8:c1:56:0a:4d:b9:ee:31:74:bc:88:5c:4b:5c:56: 79:bc:83:7f:18:59:93:0e:23:3e:3a:3a:44:88:cc: 70:2b:7e:df:ea:51:a3:f3:54:a0:49:97:c5:90:b3: 5d:be:0e:6b:a0:cb:f7:ed:20:b1:ab:53:90:2f:e7: b0:ca:b9:9e:c0:c2:3d:85:3f:a5:41:41:d0:bd:48: 53:e5:0f:9c:dc:c7:9e:7a:66:87:93:2c:b6:23:9d: d3:0d:99:ac:d5:51:f9:88:e2:ab:ae:31:11:75:df: e4:a8:d0:8b:ff:16:a3:c4:10:7d:3a:f9:f3:46:4d: ea:1a:d4:0b:ac:eb:12:e2:0a:09:4c:30:43:99:c7: f6:cc:f8:e5:3c:59:a0:56:7a:69:3d:fa:ba:c8:23: 51:41:c2:e4:45:17:da:2b:08:37:dc:5b:08:20:ce: 23:16:e9:6d:20:11:ef:8e:3a:de:b5:c2:38:97:e2: b3:98:c7:7c:1f:1c:80:fe:f2:f5:9c:ae:6b:04:1f: 9f:71:5e:0c:1b:6a:ee:b0:5f:78:e2:da:07:96:6e: ad:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:CD:47:69:1C:A8:B5:C8:02:11:DA:9C:26:1B:BC:2A:B9:94:25:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/633f8a6e-4a0c-3d43-a60e-09afc18e69c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:b4:04:cf:c7:2e:b3:8f:b5:59:75:8b:9e:d9:31:19:4c:0b: 90:fb:58:99:03:05:9e:b2:53:83:f6:00:c2:33:ec:e0:bb:71: ac:cd:17:52:e0:02:3b:9b:5e:e2:41:98:9b:d5:37:f9:e7:8c: b0:aa:a9:10:ec:63:68:11:8b:07:8d:7e:d2:c3:15:33:11:d6: 81:15:54:fe:9f:31:7f:da:26:68:ac:67:4c:95:e9:e4:31:8a: fc:e7:b7:40:1e:81:d6:59:83:69:1d:34:1b:54:a2:32:48:36: a2:eb:92:3a:2b:56:b1:3f:41:c5:27:f6:05:a4:23:b1:20:71: 8a:c2:d4:50:e9:bb:7c:2c:e4:70:d9:6b:0f:42:7b:04:1b:e0: d2:52:66:02:40:92:94:21:51:cc:29:03:a4:66:55:ee:46:be: 47:06:e4:9d:9b:c2:43:b8:ad:10:fd:e8:8d:dc:3f:67:74:61: 27:6f:cd:f0:0e:2a:a4:89:55:d5:ac:06:f2:45:8e:45:c3:b2: 7b:dc:24:c0:33:5a:5e:b9:05:0d:ec:94:e8:89:42:34:5b:33: b3:dc:89:b4:1c:bd:d1:61:21:26:38:1c:f8:9a:c6:db:0b:07: 1f:e0:71:14:23:c1:ba:e8:55:f5:90:ca:59:ac:2e:ad:83:40: 4e:f8:d9:9d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4NLZ2YrQ/3SkOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ODI1ZjIxZDQtZGRkNy00MDk3LTg2ZTktMTE3YThiOWRlNTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwDfXAxm4gN2ykVQgPrk0+IdadMEo4wbKYr2 ya9R8NgTtWhPoOIYXivIBJ/IwVYKTbnuMXS8iFxLXFZ5vIN/GFmTDiM+OjpEiMxw K37f6lGj81SgSZfFkLNdvg5roMv37SCxq1OQL+ewyrmewMI9hT+lQUHQvUhT5Q+c 3MeeemaHkyy2I53TDZms1VH5iOKrrjERdd/kqNCL/xajxBB9OvnzRk3qGtQLrOsS 4goJTDBDmcf2zPjlPFmgVnppPfq6yCNRQcLkRRfaKwg33FsIIM4jFultIBHvjjre tcI4l+KzmMd8HxyA/vL1nK5rBB+fcV4MG2rusF944toHlm6tjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBjNR2kcqLXIAhHanCYbvCq5lCVKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjMzZjhhNmUtNGEwYy0z ZDQzLWE2MGUtMDlhZmMxOGU2OWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB7tATPxy6zj7VZdYue2TEZTAuQ+1iZAwWeslOD9gDCM+zgu3GszRdS 4AI7m17iQZib1Tf554ywqqkQ7GNoEYsHjX7SwxUzEdaBFVT+nzF/2iZorGdMlenk MYr857dAHoHWWYNpHTQbVKIySDai65I6K1axP0HFJ/YFpCOxIHGKwtRQ6bt8LORw 2WsPQnsEG+DSUmYCQJKUIVHMKQOkZlXuRr5HBuSdm8JDuK0Q/eiN3D9ndGEnb83w DiqkiVXVrAbyRY5Fw7J73CTAM1peuQUN7JToiUI0WzOz3Im0HL3RYSEmOBz4msbb Cwcf4HEUI8G66FX1kMpZrC6tg0BO+Nmd -----END CERTIFICATE-----Generated at Sun May 11 05:23:26 2025 by rpki-client