$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a4cf354-4dcb-3b5b-b906-086b5e6b1b11.roa File: 6a4cf354-4dcb-3b5b-b906-086b5e6b1b11.roa (raw, json) Hash identifier: +5EOwD5yJqWEI6S3Vb64amvRHBV2cW+4HcTF76kD8hs= Subject key identifier: 41:8E:9F:E2:F9:73:20:11:B6:E3:DC:64:08:20:28:7F:83:A6:3B:36 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F88D028F862FB50850A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a4cf354-4dcb-3b5b-b906-086b5e6b1b11.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396591 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:88:d0:28:f8:62:fb:50:85:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=1597478f-9d77-46f7-ae5f-aaa0909c05b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:86:50:00:0a:ba:b1:a3:ab:78:61:ef:18:9d: d7:ba:f6:ca:c7:2d:65:63:f1:7b:af:25:01:c0:3a: 88:a5:ee:5c:4a:43:57:9b:4d:cd:0e:72:7d:fb:a4: c6:7d:f5:e7:2a:37:23:f2:2c:f7:0d:51:cf:1a:de: 53:36:33:6e:07:26:0c:9e:ba:17:e6:99:ca:58:11: e9:bb:fd:77:05:93:4a:88:ec:61:ed:f1:a2:93:94: 6c:72:c0:32:cb:03:25:19:75:e6:b4:af:d2:29:a5: f8:6c:6a:3f:df:2c:bc:4e:6b:99:c8:3f:17:2b:9c: 9f:8d:84:bf:9e:20:57:7a:09:cc:4a:f6:ad:41:51: e8:7f:b8:da:fb:2c:bb:20:84:ad:16:1d:8b:f7:3d: 03:80:89:2f:30:72:fa:7a:8c:44:60:46:d3:bb:bd: 1e:02:40:fe:e9:23:6d:dc:46:fe:f7:e2:cc:3e:ef: f8:88:32:c4:92:04:03:94:8f:a7:84:05:00:a5:49: 85:31:8b:2f:2a:48:f9:53:90:48:83:ab:09:06:38: b9:c3:98:8e:ff:29:bd:29:9f:e3:07:41:b2:5d:2e: f1:32:b2:04:4c:3d:00:a6:b9:ff:28:f5:1d:8e:82: 5d:66:b8:bf:f0:55:25:bc:93:da:20:e2:09:d9:02: 4e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8E:9F:E2:F9:73:20:11:B6:E3:DC:64:08:20:28:7F:83:A6:3B:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a4cf354-4dcb-3b5b-b906-086b5e6b1b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:36:5c:65:d5:33:80:25:9b:b8:64:db:a0:da:f0:6e:35:c8: 3c:f3:91:b8:e5:c8:9a:59:bb:6d:e3:de:60:a3:73:48:5a:fe: f1:5e:68:25:78:a9:99:de:bd:ce:ec:f1:45:0c:cf:a0:f3:13: e7:65:a4:ce:c4:c9:1e:da:18:84:09:60:9f:d8:ba:17:50:02: c4:4b:7f:cf:49:9b:d8:7e:08:72:d0:86:7a:8b:8e:52:33:b2: 79:c4:21:a6:11:f1:aa:4f:e3:24:b9:88:92:c2:53:4e:3c:ff: 61:fa:2d:a7:e0:a7:01:ba:b7:3a:49:ef:54:70:57:da:ec:3a: f6:63:43:bb:13:3b:b9:0f:f2:4e:7e:ce:c5:f0:67:e0:ce:7d: d6:35:48:ba:2c:ae:84:c7:75:03:31:26:e1:52:c7:66:6d:e0: 59:7f:42:c1:35:97:2c:28:1f:ee:cb:2e:56:fb:d1:06:20:b6: 8c:02:a8:31:1b:96:75:d7:28:13:cf:8d:5e:8d:a7:5c:17:6e: c5:9a:8e:32:83:7d:9d:7a:4f:91:6a:57:56:a9:bf:d9:26:fc: 2c:56:64:9e:24:4d:15:9b:86:f1:9a:f0:b6:17:3f:38:29:c3: c5:b3:49:12:f4:13:16:31:49:64:ec:c5:41:cf:da:81:be:3e: a4:b3:13:dd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4jQKPhi+1CFCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MTU5NzQ3OGYtOWQ3Ny00NmY3LWFlNWYtYWFhMDkwOWMwNWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIZQAAq6saOreGHvGJ3XuvbKxy1lY/F7ryUB wDqIpe5cSkNXm03NDnJ9+6TGffXnKjcj8iz3DVHPGt5TNjNuByYMnroX5pnKWBHp u/13BZNKiOxh7fGik5RscsAyywMlGXXmtK/SKaX4bGo/3yy8TmuZyD8XK5yfjYS/ niBXegnMSvatQVHof7ja+yy7IIStFh2L9z0DgIkvMHL6eoxEYEbTu70eAkD+6SNt 3Eb+9+LMPu/4iDLEkgQDlI+nhAUApUmFMYsvKkj5U5BIg6sJBji5w5iO/ym9KZ/j B0GyXS7xMrIETD0Aprn/KPUdjoJdZri/8FUlvJPaIOIJ2QJOjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEGOn+L5cyARtuPcZAggKH+Dpjs2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmE0Y2YzNTQtNGRjYi0z YjViLWI5MDYtMDg2YjVlNmIxYjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBgNlxl1TOAJZu4ZNug2vBuNcg885G45ciaWbtt495go3NIWv7xXmgl eKmZ3r3O7PFFDM+g8xPnZaTOxMke2hiECWCf2LoXUALES3/PSZvYfghy0IZ6i45S M7J5xCGmEfGqT+MkuYiSwlNOPP9h+i2n4KcBurc6Se9UcFfa7Dr2Y0O7Ezu5D/JO fs7F8Gfgzn3WNUi6LK6Ex3UDMSbhUsdmbeBZf0LBNZcsKB/uyy5W+9EGILaMAqgx G5Z11ygTz41ejadcF27Fmo4yg32dek+RaldWqb/ZJvwsVmSeJE0Vm4bxmvC2Fz84 KcPFs0kS9BMWMUlk7MVBz9qBvj6ksxPd -----END CERTIFICATE-----Generated at Sun May 11 08:20:32 2025 by rpki-client