$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78b240b6-9633-344f-9d5e-58a36b9bbc21.roa File: 78b240b6-9633-344f-9d5e-58a36b9bbc21.roa (raw, json) Hash identifier: dBn8k/3UXqPeS1ky8DNJpPYREsBu1ggvkMZkRji25Fc= Subject key identifier: 76:39:8B:41:07:E9:DA:E6:95:41:4E:47:76:FF:C4:C4:A3:5E:19:35 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F810EF663E9A299AF7680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78b240b6-9633-344f-9d5e-58a36b9bbc21.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396608 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:81:0e:f6:63:e9:a2:99:af:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=b91fb8cc-bdec-4e96-8358-caeccbd6d366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e6:22:1a:4e:ed:9a:f5:aa:96:36:55:24:4e: 5f:76:a7:29:81:45:d3:57:f3:37:1e:b8:76:5a:1d: 27:4e:ab:79:95:d2:6a:2f:47:dd:13:a7:6e:e0:e5: 21:d6:ac:eb:74:e2:36:b9:65:71:c7:19:3e:f0:69: ed:e1:92:8c:ec:db:2f:10:62:2d:af:cd:42:48:4c: c8:d3:fa:d9:22:9c:6e:26:6a:a7:c6:6c:c0:0a:94: c2:7c:55:26:a6:9b:5c:e6:f7:46:e7:10:cb:1a:ad: fd:28:36:9e:07:d8:39:71:46:ab:00:30:7d:fd:50: d3:87:f8:5a:25:a9:76:06:0a:fa:06:bc:63:8e:b3: c7:6e:60:4e:1a:41:14:db:a0:86:dd:92:c7:0a:da: f1:a0:d9:bd:d2:65:29:2f:1b:8c:0e:6a:9b:58:44: 2c:e1:3c:5a:14:98:a5:c7:78:eb:5c:78:4b:7e:00: 9a:2d:47:3c:5a:e1:09:05:c2:07:57:01:a6:9a:82: 16:3f:b6:3b:e4:09:d1:dd:3a:42:ed:bb:cc:c4:1a: 03:db:41:8b:a4:a6:6a:30:16:96:a0:3c:9b:f6:7c: 98:c3:20:5b:3d:ee:1a:5f:1d:3a:a2:1c:f0:7e:e4: 81:fa:d4:5f:0a:9e:80:23:66:7f:d7:f3:03:bc:ac: 73:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:39:8B:41:07:E9:DA:E6:95:41:4E:47:76:FF:C4:C4:A3:5E:19:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78b240b6-9633-344f-9d5e-58a36b9bbc21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:cf:f0:de:02:5e:b2:23:68:61:21:98:2a:f2:89:bf:18:af: 48:67:51:6a:8a:3c:68:fa:ca:40:3d:54:9d:3c:b0:09:35:eb: cf:92:18:9c:45:0f:81:68:97:ea:3b:d8:2a:9f:e9:cd:e5:7b: f5:41:cc:92:d1:af:d4:54:34:b2:c5:69:e1:06:13:ef:c2:86: b6:b5:a6:99:bd:51:42:3b:13:30:17:31:e2:4b:20:ce:ee:cb: 8a:2a:15:34:0f:bb:73:1b:38:de:d9:9c:88:38:a1:a7:89:5a: de:29:89:c0:1f:c1:6c:71:cb:e0:f7:d3:77:6f:a7:8a:0b:ed: 96:7e:b5:e0:9e:38:0c:86:7f:83:c5:7b:37:25:f4:f4:d4:fc: 18:1a:d3:77:4b:20:3a:4b:67:23:cd:a9:4d:9d:86:d1:21:02: 23:25:01:6c:63:ed:24:a3:0e:e4:a0:b4:9c:08:bd:0b:a6:5a: 0d:3c:e6:ef:54:91:6d:64:e3:d8:0b:1f:60:55:df:24:91:7d: 82:dd:11:9c:8a:12:7d:3b:ec:f8:e3:fc:65:2d:f8:b8:91:5e: 21:a1:39:2b:8d:fa:b8:07:44:29:44:57:5b:0a:97:7b:87:3f: 54:c7:91:5e:8c:d3:e8:e8:8d:8a:f4:96:64:de:45:a4:de:ba: dc:e1:0f:12 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4EO9mPpopmvdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YjkxZmI4Y2MtYmRlYy00ZTk2LTgzNTgtY2FlY2NiZDZkMzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OYiGk7tmvWqljZVJE5fdqcpgUXTV/M3Hrh2 Wh0nTqt5ldJqL0fdE6du4OUh1qzrdOI2uWVxxxk+8Gnt4ZKM7NsvEGItr81CSEzI 0/rZIpxuJmqnxmzACpTCfFUmpptc5vdG5xDLGq39KDaeB9g5cUarADB9/VDTh/ha Jal2Bgr6BrxjjrPHbmBOGkEU26CG3ZLHCtrxoNm90mUpLxuMDmqbWEQs4TxaFJil x3jrXHhLfgCaLUc8WuEJBcIHVwGmmoIWP7Y75AnR3TpC7bvMxBoD20GLpKZqMBaW oDyb9nyYwyBbPe4aXx06ohzwfuSB+tRfCp6AI2Z/1/MDvKxz3QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHY5i0EH6drmlUFOR3b/xMSjXhk1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzhiMjQwYjYtOTYzMy0z NDRmLTlkNWUtNThhMzZiOWJiYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAdz/DeAl6yI2hhIZgq8om/GK9IZ1Fqijxo+spAPVSdPLAJNevPkhic RQ+BaJfqO9gqn+nN5Xv1QcyS0a/UVDSyxWnhBhPvwoa2taaZvVFCOxMwFzHiSyDO 7suKKhU0D7tzGzje2ZyIOKGniVreKYnAH8Fsccvg99N3b6eKC+2WfrXgnjgMhn+D xXs3JfT01PwYGtN3SyA6S2cjzalNnYbRIQIjJQFsY+0kow7koLScCL0LploNPObv VJFtZOPYCx9gVd8kkX2C3RGcihJ9O+z44/xlLfi4kV4hoTkrjfq4B0QpRFdbCpd7 hz9Ux5FejNPo6I2K9JZk3kWk3rrc4Q8S -----END CERTIFICATE-----Generated at Sun May 11 06:35:27 2025 by rpki-client