$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6837e9c9-6960-3261-b176-603c90a4b0e4.roa File: 6837e9c9-6960-3261-b176-603c90a4b0e4.roa (raw, json) Hash identifier: KoLW+pEzizIENcwNzNQu3GxbmcZJbiKfovdD0N6gjtc= Subject key identifier: 60:73:BA:67:45:48:FC:19:82:D7:F6:FA:36:FD:EE:99:7C:45:92:DC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F86E69E4A272FECDB0400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6837e9c9-6960-3261-b176-603c90a4b0e4.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396562 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:86:e6:9e:4a:27:2f:ec:db:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=ef36ce3b-3efc-485a-9195-e4eed74cc9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:76:ce:c3:95:88:2d:56:ae:86:ec:e5:db:0a: 7e:6a:60:41:a8:46:b9:b3:dd:2e:11:89:93:2e:aa: 98:d4:f6:6d:60:2f:40:11:ae:62:dd:34:18:99:03: f1:a4:d0:95:6a:c8:0f:83:ce:db:a7:9e:2a:f0:71: d0:68:94:20:dd:c8:9a:b5:ab:82:96:47:b3:bd:1b: bd:bf:4c:c2:fb:84:e7:06:3a:d4:b2:a5:0a:1f:c1: 1e:a7:e0:71:c7:d7:2c:d4:19:dd:a5:3f:85:2a:79: 17:03:4b:d3:ae:ac:98:fa:51:b8:c9:51:e8:ff:80: 19:da:38:ac:40:da:4e:d2:7d:18:04:4d:fc:aa:3c: f2:9a:d3:bd:8f:35:e5:da:6d:d2:7c:2c:8e:cb:52: 99:56:6f:80:11:d6:b8:37:33:a1:ab:d4:9e:f7:33: 52:8e:60:79:4e:20:bd:df:23:4e:2e:be:06:3b:48: 83:58:33:48:25:4d:d9:0e:9b:76:d2:73:e6:b0:5a: af:2a:9b:7f:22:8f:8a:32:79:3b:e2:9b:59:35:c7: ac:ab:f2:81:6d:7b:5b:20:ac:93:7d:7c:57:a3:ed: 88:88:34:da:7d:f3:d4:89:6f:4c:cd:83:7a:ab:87: cf:21:c8:32:9e:74:61:97:0c:3e:9b:6e:4a:0b:fc: f7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:73:BA:67:45:48:FC:19:82:D7:F6:FA:36:FD:EE:99:7C:45:92:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6837e9c9-6960-3261-b176-603c90a4b0e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:33:78:c5:b0:83:ed:ce:bd:9d:b4:8b:bb:4b:fb:e1:5a:2b: 54:b1:43:f9:36:7b:db:a8:e3:3c:e5:2c:c4:e9:a2:75:86:2d: 56:04:4a:17:c8:95:1b:6b:dd:52:76:db:bf:b6:2c:32:1d:ee: 8f:7d:b4:e5:86:f5:6f:d5:1a:ac:41:6d:aa:a7:9b:76:8d:51: 48:23:5d:8b:9e:2e:c9:00:3c:84:54:51:55:4f:7f:41:54:c6: 5b:a8:79:06:fb:66:0e:37:49:13:65:5c:aa:f5:72:b1:e2:2b: 06:ea:8d:38:53:10:fd:a0:36:24:c3:d2:89:ef:c3:ec:af:37: 96:95:61:0a:eb:1f:54:dc:a4:ff:42:1b:8b:cb:a8:1d:1d:49: fb:c8:b1:6d:40:32:39:1d:42:47:9f:04:6e:86:23:af:1e:b2: f4:aa:03:49:ec:65:ca:94:be:87:4a:08:03:c3:76:94:71:bd: 5d:4e:69:ff:3b:66:0c:d7:9a:61:28:8e:f1:fc:fe:8e:ab:fb: 35:62:ab:88:d6:5c:21:d7:9c:f4:69:92:e9:ff:00:53:8e:92: ff:f5:fb:56:9d:2c:45:a3:f1:b1:e4:36:fa:59:59:72:ec:84: 22:d0:af:20:e1:fb:f1:63:a3:59:05:6f:64:bc:7c:11:c7:70: dc:57:7f:b5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4bmnkonL+zbBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZWYzNmNlM2ItM2VmYy00ODVhLTkxOTUtZTRlZWQ3NGNjOWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XbOw5WILVauhuzl2wp+amBBqEa5s90uEYmT LqqY1PZtYC9AEa5i3TQYmQPxpNCVasgPg87bp54q8HHQaJQg3ciatauClkezvRu9 v0zC+4TnBjrUsqUKH8Eep+Bxx9cs1BndpT+FKnkXA0vTrqyY+lG4yVHo/4AZ2jis QNpO0n0YBE38qjzymtO9jzXl2m3SfCyOy1KZVm+AEda4NzOhq9Se9zNSjmB5TiC9 3yNOLr4GO0iDWDNIJU3ZDpt20nPmsFqvKpt/Io+KMnk74ptZNcesq/KBbXtbIKyT fXxXo+2IiDTaffPUiW9MzYN6q4fPIcgynnRhlww+m25KC/z3gwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGBzumdFSPwZgtf2+jb97pl8RZLcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjgzN2U5YzktNjk2MC0z MjYxLWIxNzYtNjAzYzkwYTRiMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBCM3jFsIPtzr2dtIu7S/vhWitUsUP5NnvbqOM85SzE6aJ1hi1WBEoX yJUba91Sdtu/tiwyHe6PfbTlhvVv1RqsQW2qp5t2jVFII12Lni7JADyEVFFVT39B VMZbqHkG+2YON0kTZVyq9XKx4isG6o04UxD9oDYkw9KJ78PsrzeWlWEK6x9U3KT/ QhuLy6gdHUn7yLFtQDI5HUJHnwRuhiOvHrL0qgNJ7GXKlL6HSggDw3aUcb1dTmn/ O2YM15phKI7x/P6Oq/s1YquI1lwh15z0aZLp/wBTjpL/9ftWnSxFo/Gx5Db6WVly 7IQi0K8g4fvxY6NZBW9kvHwRx3DcV3+1 -----END CERTIFICATE-----Generated at Sun May 11 06:21:33 2025 by rpki-client