$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ba9c099-d3ec-354f-8dee-210da4453ea1.roa File: 8ba9c099-d3ec-354f-8dee-210da4453ea1.roa (raw, json) Hash identifier: kb6U02H0bxrY6dc45CHbpzd08Zok5A38an+ZAihr+bk= Subject key identifier: 18:26:2B:2A:C0:B6:46:D9:F3:AF:B9:A9:C8:44:23:88:42:75:FA:7A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8CE185F1665856985800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ba9c099-d3ec-354f-8dee-210da4453ea1.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 397205 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8c:e1:85:f1:66:58:56:98:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=47f6c54b-d7d2-42c9-ad8c-f590a9d62e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1d:94:b2:d2:c6:95:ea:16:e7:d9:af:88:d7: f2:d1:99:7b:0f:b7:78:8e:db:23:a7:b5:8b:3f:05: e1:3a:73:0b:e2:1c:69:c0:48:0b:7b:c9:2b:b8:9f: c7:11:0c:e8:00:a3:c5:9e:54:f0:5f:2d:14:96:5c: de:ac:cd:8d:70:23:e5:15:f4:a9:4a:74:1d:ea:7d: 4d:13:74:64:e1:fa:72:27:47:78:90:e4:5c:db:8e: 1e:9c:af:ad:ba:77:f3:96:6e:34:9d:bc:11:47:d8: b1:9a:84:4c:d0:51:ce:1d:53:51:4d:4a:11:36:66: a6:9f:6c:ff:25:53:58:0a:bb:85:f7:b6:fc:e8:e1: 54:04:bf:d6:2b:96:01:7f:0c:23:ac:e3:3c:95:73: f8:65:06:ab:b2:a3:ac:ea:c3:a6:91:73:56:20:fe: 58:70:74:f4:74:e9:5e:e3:50:ff:78:0a:49:7d:ab: 55:70:b2:1f:58:31:5b:72:19:59:ec:7a:96:f2:54: bf:83:fb:eb:9b:82:f7:d1:cc:46:f6:26:cc:85:8c: 4c:6f:85:65:23:70:16:3a:27:40:23:55:96:09:04: 31:16:ee:02:b5:90:29:5e:39:32:2d:b8:ef:f8:6f: 79:d4:18:87:09:be:b5:f5:84:4d:7c:68:6f:a2:a5: f9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:26:2B:2A:C0:B6:46:D9:F3:AF:B9:A9:C8:44:23:88:42:75:FA:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ba9c099-d3ec-354f-8dee-210da4453ea1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:3a:25:10:c8:85:71:f0:2f:39:1f:79:5e:a7:1a:f8:72:e7: 82:ce:34:5d:6f:0d:74:47:86:65:e0:df:f7:cc:e8:99:69:90: 7b:57:59:b5:cd:64:de:05:ce:63:b7:8a:d4:db:3f:6c:03:7a: 7a:c9:00:13:88:9a:06:9e:6c:0e:53:6e:fe:74:00:65:f7:ea: 88:58:6d:d1:c0:74:85:c1:86:e0:53:1b:71:a8:9d:5f:23:15: 70:08:de:e3:96:c0:2b:51:47:dd:ad:f0:3c:79:e5:60:23:51: 4d:2d:3e:af:2a:76:20:2a:db:37:b4:d6:ea:82:d7:57:b8:33: fe:a0:94:76:50:5b:45:a7:90:2e:6a:18:6f:4e:4f:73:2d:d9: a9:bb:f1:68:ad:93:d3:fc:fd:a7:11:e9:ad:a0:1b:76:7c:b9: 94:68:6a:15:f4:4f:f7:31:32:99:e8:40:cf:5a:3c:60:68:37: 7f:bc:06:be:b5:e0:bd:1f:c3:53:6d:a4:31:5b:81:1a:04:d0: 0c:c4:92:9f:8c:bc:a0:ee:8a:b3:37:dd:ce:17:eb:f2:7c:60: 14:32:88:8a:91:e4:86:2d:00:bf:a3:52:3e:a3:97:57:4d:b4: bd:75:c7:b3:7b:a7:c8:5b:73:9c:1d:3c:71:a2:1f:21:0c:ce: 3e:8e:a0:7f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4zhhfFmWFaYWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NDdmNmM1NGItZDdkMi00MmM5LWFkOGMtZjU5MGE5ZDYyZTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh2UstLGleoW59mviNfy0Zl7D7d4jtsjp7WL PwXhOnML4hxpwEgLe8kruJ/HEQzoAKPFnlTwXy0UllzerM2NcCPlFfSpSnQd6n1N E3Rk4fpyJ0d4kORc244enK+tunfzlm40nbwRR9ixmoRM0FHOHVNRTUoRNmamn2z/ JVNYCruF97b86OFUBL/WK5YBfwwjrOM8lXP4ZQarsqOs6sOmkXNWIP5YcHT0dOle 41D/eApJfatVcLIfWDFbchlZ7HqW8lS/g/vrm4L30cxG9ibMhYxMb4VlI3AWOidA I1WWCQQxFu4CtZApXjkyLbjv+G951BiHCb619YRNfGhvoqX5PwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBgmKyrAtkbZ86+5qchEI4hCdfp6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGJhOWMwOTktZDNlYy0z NTRmLThkZWUtMjEwZGE0NDUzZWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBlOiUQyIVx8C85H3lepxr4cueCzjRdbw10R4Zl4N/3zOiZaZB7V1m1 zWTeBc5jt4rU2z9sA3p6yQATiJoGnmwOU27+dABl9+qIWG3RwHSFwYbgUxtxqJ1f IxVwCN7jlsArUUfdrfA8eeVgI1FNLT6vKnYgKts3tNbqgtdXuDP+oJR2UFtFp5Au ahhvTk9zLdmpu/ForZPT/P2nEemtoBt2fLmUaGoV9E/3MTKZ6EDPWjxgaDd/vAa+ teC9H8NTbaQxW4EaBNAMxJKfjLyg7oqzN93OF+vyfGAUMoiKkeSGLQC/o1I+o5dX TbS9dceze6fIW3OcHTxxoh8hDM4+jqB/ -----END CERTIFICATE-----Generated at Sun May 11 06:23:44 2025 by rpki-client