$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a7f50e5-86af-3059-9cf4-51814035a7f8.roa File: 6a7f50e5-86af-3059-9cf4-51814035a7f8.roa (raw, json) Hash identifier: aOX/VhTwnmXLe5OXUHHkju8oHR7jbMUurNHrQxm2Hpo= Subject key identifier: 83:2E:82:EC:E6:5A:71:D2:5B:03:5C:4D:CE:75:DC:9E:AA:58:B6:C4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8D32D696A07DB5A9E500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a7f50e5-86af-3059-9cf4-51814035a7f8.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396588 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8d:32:d6:96:a0:7d:b5:a9:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=ee516a63-59c0-4d0b-b960-48d679a20570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:13:40:4a:e1:69:ab:5a:3d:b8:95:58:be:46: 1d:4e:96:dd:81:93:95:13:6f:03:b7:84:48:e1:6e: 3a:2f:3e:8c:25:f5:81:a7:94:98:bc:76:4f:e9:53: d8:da:20:8a:b3:f5:b6:f2:9e:f0:e9:f2:b8:15:9c: cf:62:76:ac:e4:64:50:fa:70:13:98:5a:92:39:88: 76:16:56:ff:4b:ca:82:84:36:2b:d0:a9:51:76:07: 48:d7:77:de:3b:4f:8b:07:41:bc:bb:8e:5f:e3:f2: 3a:08:b1:a2:01:40:f0:de:7a:84:4e:92:d9:59:85: 43:05:02:f2:5e:d7:77:46:6c:86:9a:40:f3:56:21: b6:ac:62:c8:50:c6:94:33:66:b0:9d:52:d5:a0:40: 39:a9:27:95:28:12:80:dd:79:a9:4d:a3:fb:5c:6d: 40:3d:e1:65:ea:83:1c:46:77:66:9e:c7:e2:d4:a3: b2:7f:24:e0:1f:01:03:b3:3f:41:53:6a:b0:8d:88: 98:b5:d4:3d:e8:ad:81:54:a5:a3:58:13:2b:83:f6: c5:6d:d9:c9:fa:e2:77:b7:00:68:52:d6:3e:c2:59: ae:4b:e1:61:7e:ed:57:12:48:74:27:04:20:4d:ef: dd:2d:ba:ca:b5:de:c4:f5:d3:01:73:57:87:52:be: d2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2E:82:EC:E6:5A:71:D2:5B:03:5C:4D:CE:75:DC:9E:AA:58:B6:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a7f50e5-86af-3059-9cf4-51814035a7f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:f4:92:2a:12:a1:58:23:fb:c9:e6:9f:41:b9:4d:a2:1f:6b: dc:ad:ff:f0:40:36:cd:5f:12:65:51:84:f9:52:01:82:93:50: dd:a2:d9:70:ae:1d:81:4f:e7:a7:56:c5:5f:e2:58:e2:1b:3f: 1a:d4:b1:c1:f8:b3:e4:bc:23:ff:89:5f:ea:7d:bb:1c:51:c9: a5:95:be:0a:5a:a3:8e:1d:d3:14:c2:95:62:b9:ea:07:e9:30: 43:1e:96:72:f0:43:f8:17:18:01:0c:a5:27:d3:f6:38:86:86: d3:fe:55:75:06:67:64:a6:f5:82:c9:79:f0:af:d9:36:12:a0: 71:99:df:62:e1:05:d4:07:6e:f9:a4:7e:7b:a0:78:89:2e:7b: fc:e6:42:ea:c0:8b:53:d9:8d:b0:b3:94:e6:5c:55:ab:e2:8a: 39:6d:b0:21:a4:4f:e7:b1:08:9c:1b:c1:62:10:65:2d:f9:45: 98:75:50:f4:86:66:a5:7f:c7:df:ac:7e:04:4e:ff:1f:2b:a9: e9:45:b0:29:a7:33:d0:c7:06:9c:c5:74:8d:21:a0:2b:b3:b8: ec:dd:cd:eb:7c:db:e0:c0:bb:3e:26:93:c4:e2:d5:c5:a2:66: 7f:5e:bb:6c:af:57:c9:7d:d5:32:10:7e:30:6d:2d:9c:cc:b6: ce:e6:33:b0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P40y1pagfbWp5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZWU1MTZhNjMtNTljMC00ZDBiLWI5NjAtNDhkNjc5YTIwNTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RNASuFpq1o9uJVYvkYdTpbdgZOVE28Dt4RI 4W46Lz6MJfWBp5SYvHZP6VPY2iCKs/W28p7w6fK4FZzPYnas5GRQ+nATmFqSOYh2 Flb/S8qChDYr0KlRdgdI13feO0+LB0G8u45f4/I6CLGiAUDw3nqETpLZWYVDBQLy Xtd3RmyGmkDzViG2rGLIUMaUM2awnVLVoEA5qSeVKBKA3XmpTaP7XG1APeFl6oMc Rndmnsfi1KOyfyTgHwEDsz9BU2qwjYiYtdQ96K2BVKWjWBMrg/bFbdnJ+uJ3twBo UtY+wlmuS+Fhfu1XEkh0JwQgTe/dLbrKtd7E9dMBc1eHUr7SNQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIMuguzmWnHSWwNcTc513J6qWLbEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmE3ZjUwZTUtODZhZi0z MDU5LTljZjQtNTE4MTQwMzVhN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCG9JIqEqFYI/vJ5p9BuU2iH2vcrf/wQDbNXxJlUYT5UgGCk1Ddotlw rh2BT+enVsVf4ljiGz8a1LHB+LPkvCP/iV/qfbscUcmllb4KWqOOHdMUwpViueoH 6TBDHpZy8EP4FxgBDKUn0/Y4hobT/lV1BmdkpvWCyXnwr9k2EqBxmd9i4QXUB275 pH57oHiJLnv85kLqwItT2Y2ws5TmXFWr4oo5bbAhpE/nsQicG8FiEGUt+UWYdVD0 hmalf8ffrH4ETv8fK6npRbAppzPQxwacxXSNIaArs7js3c3rfNvgwLs+JpPE4tXF omZ/Xrtsr1fJfdUyEH4wbS2czLbO5jOw -----END CERTIFICATE-----Generated at Sun May 11 06:22:54 2025 by rpki-client