$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68c468d2-bbdd-3e54-8fe0-cd566f21a8f4.roa File: 68c468d2-bbdd-3e54-8fe0-cd566f21a8f4.roa (raw, json) Hash identifier: 3nPAiS/8roYr/1cjbsWsP5Dw8t/rZTMOgj/wpG74dwA= Subject key identifier: E6:FE:4D:C7:84:4B:D6:89:68:F6:40:0E:1A:81:23:57:E6:51:47:A8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F86307F1BB569CF790D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68c468d2-bbdd-3e54-8fe0-cd566f21a8f4.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 22547 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:86:30:7f:1b:b5:69:cf:79:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=f6e12cc7-c491-4bcc-a36d-67b937764367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:20:05:30:11:ad:05:f0:64:e4:44:43:fd:40: 33:2b:ff:71:61:fd:ec:bf:58:5e:8f:1c:c6:19:d0: 6e:06:23:4e:c1:38:55:ac:b6:2a:ce:b7:b2:68:1b: f3:95:23:51:34:4d:59:ec:1a:e1:2b:1f:73:b4:31: 56:e7:0f:cd:62:2e:a3:43:40:16:e6:b1:85:3f:bd: f9:9c:be:6b:f6:c9:1b:e2:ce:0e:07:40:a9:84:3c: 37:13:0c:e4:ee:43:22:ff:2a:fe:7a:d7:4f:57:95: b5:a0:4e:da:0d:b5:68:02:6e:34:cf:30:28:cd:7e: 3f:cc:3d:fe:f5:ee:88:a7:b9:3b:63:2d:23:ab:3f: d5:a8:0b:4d:57:a5:01:40:68:3e:36:7a:79:1e:bc: 49:9a:d7:14:39:bd:9e:33:18:6d:2a:d7:30:99:e9: 0e:81:d3:3a:de:2f:52:a5:53:2c:a8:8f:87:96:51: 94:e1:89:2c:29:64:7a:90:e1:93:46:5d:92:46:59: 48:f1:6f:c9:a0:ef:69:cc:67:e8:6d:ca:31:f3:b2: 37:ec:d1:18:0d:f5:c2:9d:0f:d1:2d:ed:49:1b:4c: 9f:55:86:41:38:02:68:9f:c8:97:02:d0:04:f4:09: c5:e7:d0:61:dc:50:b6:be:fc:f1:d7:01:ea:13:54: f3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FE:4D:C7:84:4B:D6:89:68:F6:40:0E:1A:81:23:57:E6:51:47:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68c468d2-bbdd-3e54-8fe0-cd566f21a8f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:e2:2e:19:e7:44:09:25:39:8e:ef:18:d7:9d:7b:2e:fe:2d: 44:0b:99:fd:d3:72:e8:b4:01:fa:08:cb:45:a6:64:f8:5f:8b: 73:d0:fa:4a:41:3c:35:4c:54:be:80:44:37:e9:e2:46:7c:7b: 81:7b:03:95:27:d1:80:0c:8a:28:21:ff:12:c8:67:a4:2a:ab: b4:93:b6:be:9e:7e:12:9d:38:12:a7:4d:05:a9:1d:74:24:0d: 16:12:95:4a:75:4d:94:87:26:4f:97:fa:11:f9:10:a1:04:da: f0:a0:60:ab:0b:36:f3:65:50:2b:56:1c:28:42:af:6b:6c:0c: 0a:fe:30:c6:da:6a:85:80:dd:21:33:be:2d:35:e1:52:0d:ec: 4f:4d:f9:af:ff:23:5a:5b:81:e9:0a:6b:59:a9:ef:14:f7:3a: 5c:2a:8f:72:09:58:9a:01:52:49:e7:e8:ca:00:49:b2:b6:62: ca:0b:14:cc:30:07:d8:1e:37:72:bd:f3:1b:9b:38:b8:ab:e2: 10:8f:55:48:19:4b:38:a3:bb:3b:16:58:7b:5c:7f:b7:35:a5: e0:61:bd:c0:3f:94:de:27:2c:ab:d0:b5:e9:89:28:05:61:79: 30:dd:f1:99:41:7d:5a:30:86:9e:a8:7e:60:94:c3:68:2e:52: ff:e5:94:86 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4Ywfxu1ac95DQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZjZlMTJjYzctYzQ5MS00YmNjLWEzNmQtNjdiOTM3NzY0MzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSAFMBGtBfBk5ERD/UAzK/9xYf3sv1hejxzG GdBuBiNOwThVrLYqzreyaBvzlSNRNE1Z7BrhKx9ztDFW5w/NYi6jQ0AW5rGFP735 nL5r9skb4s4OB0CphDw3Ewzk7kMi/yr+etdPV5W1oE7aDbVoAm40zzAozX4/zD3+ 9e6Ip7k7Yy0jqz/VqAtNV6UBQGg+Nnp5HrxJmtcUOb2eMxhtKtcwmekOgdM63i9S pVMsqI+HllGU4YksKWR6kOGTRl2SRllI8W/JoO9pzGfobcox87I37NEYDfXCnQ/R Le1JG0yfVYZBOAJon8iXAtAE9AnF59Bh3FC2vvzx1wHqE1TzawIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOb+TceES9aJaPZADhqBI1fmUUeoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjhjNDY4ZDItYmJkZC0z ZTU0LThmZTAtY2Q1NjZmMjFhOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBK4i4Z50QJJTmO7xjXnXsu/i1EC5n903LotAH6CMtFpmT4X4tz0PpK QTw1TFS+gEQ36eJGfHuBewOVJ9GADIooIf8SyGekKqu0k7a+nn4SnTgSp00FqR10 JA0WEpVKdU2UhyZPl/oR+RChBNrwoGCrCzbzZVArVhwoQq9rbAwK/jDG2mqFgN0h M74tNeFSDexPTfmv/yNaW4HpCmtZqe8U9zpcKo9yCViaAVJJ5+jKAEmytmLKCxTM MAfYHjdyvfMbmzi4q+IQj1VIGUs4o7s7Flh7XH+3NaXgYb3AP5TeJyyr0LXpiSgF YXkw3fGZQX1aMIaeqH5glMNoLlL/5ZSG -----END CERTIFICATE-----Generated at Sun May 11 05:27:58 2025 by rpki-client