$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c6268e2-5157-3f34-af90-a5e9a9da11e3.roa File: 6c6268e2-5157-3f34-af90-a5e9a9da11e3.roa (raw, json) Hash identifier: ihmRy0qga6v/BOe6TeSGux3PngOMvG4QH3DIR0HUITI= Subject key identifier: D1:6D:AA:E3:4E:D2:0D:5A:EA:6C:72:BB:A6:9C:A3:C6:13:F6:E4:43 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F85D9BAB81C81BA7E1580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c6268e2-5157-3f34-af90-a5e9a9da11e3.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 397203 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:85:d9:ba:b8:1c:81:ba:7e:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=cb1ed74b-c14c-4df5-9d71-7e7ac6880f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:41:a9:50:17:ed:e7:19:09:27:4a:78:e5:d9: 18:fe:62:8d:21:ae:36:67:a5:98:19:dc:8e:b9:49: b9:36:98:34:f1:60:83:36:63:b4:23:2d:3a:5d:98: 08:ac:d8:4a:72:98:f6:c4:2d:89:c0:7c:b8:6d:82: b2:e9:aa:3a:ed:d9:56:69:ad:28:2e:3c:3f:24:6e: a7:ba:37:05:34:f9:1d:e2:a6:ce:98:db:f6:e9:b4: 17:6d:79:30:18:ea:cf:cc:e5:5f:c3:17:f5:ba:1f: 16:2b:7e:4d:b6:12:b4:e6:46:9d:35:82:09:ee:29: 38:ad:b2:b2:34:78:59:73:da:53:5e:44:23:e7:43: 14:99:62:f7:90:17:fe:f7:08:12:a7:a0:6b:fe:37: 30:d7:fb:26:63:f6:a5:da:e4:d5:29:6f:30:de:a6: 48:23:a0:01:76:f4:6a:8f:5f:5e:97:0e:53:1b:c1: 52:db:82:71:bb:10:9a:7a:e0:cd:11:16:94:75:87: c0:8e:21:86:2a:8b:f5:f5:51:23:03:81:f4:f8:af: e2:82:13:8b:3f:42:a0:7d:71:c2:18:97:ae:83:ae: 27:1a:12:ad:8b:ca:fa:db:36:1a:20:2e:90:2c:ad: 92:b3:4f:8b:90:02:74:23:a4:53:24:11:f5:c7:7c: e7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6D:AA:E3:4E:D2:0D:5A:EA:6C:72:BB:A6:9C:A3:C6:13:F6:E4:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c6268e2-5157-3f34-af90-a5e9a9da11e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:22:52:d6:69:07:c0:ef:85:0f:31:98:ae:b2:c1:95:b7:fc: 20:53:05:bd:97:6c:2f:d0:cc:50:8a:90:71:a0:2e:fa:fe:35: 68:b6:ad:96:09:d4:d0:88:24:7d:24:35:ff:1e:9d:90:77:51: 47:00:4a:a0:65:59:bf:e9:87:ba:47:4b:b2:44:42:7b:3a:89: 1f:76:e2:e4:31:90:45:45:93:95:28:61:eb:86:b2:e1:25:53: 91:26:d1:da:f8:df:5c:b4:71:50:75:c2:39:09:49:b3:95:be: a9:b2:68:29:36:a5:5b:e0:a3:f4:61:65:d2:3a:d8:c3:b2:a6: 9d:4a:9f:17:46:b8:00:82:2d:d9:1b:ef:1e:ee:96:ba:01:30: ca:43:86:e1:bd:f6:53:d5:5e:72:85:ab:ee:b7:50:23:f3:a0: d0:24:87:17:a5:7d:43:ef:97:fa:a8:50:a5:8c:dc:ba:2e:b3: 07:93:c6:9a:6d:16:d8:2f:c9:a0:92:75:2d:33:67:2d:f1:2b: d9:ad:9d:00:a9:84:ff:ec:bf:19:6d:6e:1a:bd:72:bb:dd:5f: 95:70:19:f0:30:0e:a7:95:4c:ff:b0:06:74:18:3d:65:24:ad: 08:7b:35:80:17:30:41:45:02:da:27:96:06:46:c1:55:8b:fd: be:6b:42:2b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4XZurgcgbp+FYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk Y2IxZWQ3NGItYzE0Yy00ZGY1LTlkNzEtN2U3YWM2ODgwZjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkGpUBft5xkJJ0p45dkY/mKNIa42Z6WYGdyO uUm5Npg08WCDNmO0Iy06XZgIrNhKcpj2xC2JwHy4bYKy6ao67dlWaa0oLjw/JG6n ujcFNPkd4qbOmNv26bQXbXkwGOrPzOVfwxf1uh8WK35NthK05kadNYIJ7ik4rbKy NHhZc9pTXkQj50MUmWL3kBf+9wgSp6Br/jcw1/smY/al2uTVKW8w3qZII6ABdvRq j19elw5TG8FS24JxuxCaeuDNERaUdYfAjiGGKov19VEjA4H0+K/ighOLP0KgfXHC GJeug64nGhKti8r62zYaIC6QLK2Ss0+LkAJ0I6RTJBH1x3znjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNFtquNO0g1a6mxyu6aco8YT9uRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmM2MjY4ZTItNTE1Ny0z ZjM0LWFmOTAtYTVlOWE5ZGExMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBWIlLWaQfA74UPMZiussGVt/wgUwW9l2wv0MxQipBxoC76/jVotq2W CdTQiCR9JDX/Hp2Qd1FHAEqgZVm/6Ye6R0uyREJ7OokfduLkMZBFRZOVKGHrhrLh JVORJtHa+N9ctHFQdcI5CUmzlb6psmgpNqVb4KP0YWXSOtjDsqadSp8XRrgAgi3Z G+8e7pa6ATDKQ4bhvfZT1V5yhavut1Aj86DQJIcXpX1D75f6qFCljNy6LrMHk8aa bRbYL8mgknUtM2ct8SvZrZ0AqYT/7L8ZbW4avXK73V+VcBnwMA6nlUz/sAZ0GD1l JK0IezWAFzBBRQLaJ5YGRsFVi/2+a0Ir -----END CERTIFICATE-----Generated at Sun May 11 05:33:32 2025 by rpki-client