$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ce41556-7b26-3b17-aaea-cc0f7ab25ce3.roa File: 8ce41556-7b26-3b17-aaea-cc0f7ab25ce3.roa (raw, json) Hash identifier: EroU9ynoXW6Ij39QpTPPE6FRM6okT1u/ICrgBghyOjM= Subject key identifier: 43:BE:7A:79:3F:9F:88:28:E9:28:68:9B:BE:F0:A5:51:95:B8:84:C1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F898EF1A15B4E2B9953A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ce41556-7b26-3b17-aaea-cc0f7ab25ce3.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 19836 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:89:8e:f1:a1:5b:4e:2b:99:53:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=f40893cc-a22e-48e8-9e68-dc8f535f3499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f5:f6:42:0e:7d:5c:e1:56:14:a5:8e:dc:f1: e9:8c:72:4e:ba:5d:e7:25:83:8d:73:fa:b9:24:ef: 17:8d:37:c2:cb:61:e2:67:41:38:0d:55:55:b3:83: 9f:71:cf:17:6a:fc:a8:01:f0:73:db:d5:a3:c6:f7: 37:75:3b:28:6f:d9:a7:b9:13:32:83:15:d9:47:81: e8:23:76:cc:32:ce:e4:bc:68:47:d9:c2:69:1e:83: f1:37:0b:e8:29:39:9d:60:d8:d6:06:f3:96:bf:ab: 3b:5b:d0:d1:a1:c6:91:be:27:29:b0:bb:0f:91:52: 8e:e2:07:2d:12:24:0d:ce:cc:d5:e0:eb:2c:dd:19: 9b:ca:a7:fd:81:a3:47:b6:64:64:c6:1e:42:38:e0: c3:da:a3:ee:31:1e:2f:3d:63:56:b7:2d:44:b9:ba: 09:75:0b:02:e9:b8:65:59:c7:9a:a0:e2:96:56:75: 8b:38:3e:23:3f:0d:cf:07:56:b1:f6:4e:77:f5:d6: 2c:a9:73:2d:dd:ef:b9:37:08:e7:0f:b4:1a:95:21: de:59:05:0b:e9:f9:58:68:d1:5d:ad:5e:15:b5:ea: 09:32:8d:a1:e7:aa:c4:68:3e:56:1e:70:ac:67:d3: ce:15:db:74:6d:ca:a3:f7:96:fc:23:09:59:0d:de: 13:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BE:7A:79:3F:9F:88:28:E9:28:68:9B:BE:F0:A5:51:95:B8:84:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8ce41556-7b26-3b17-aaea-cc0f7ab25ce3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:60:da:9d:9b:83:f9:60:37:20:e7:80:7e:c8:2c:28:04:3f: 42:b9:08:37:1b:56:61:87:ce:bf:6d:6e:74:0a:44:01:fb:f6: f5:ad:5b:0d:78:85:41:ef:a2:93:4e:82:cb:5c:95:8b:f8:a2: 52:1a:0a:5c:2d:08:44:5f:b5:2d:d5:b0:c1:a9:b4:76:98:6b: 0d:59:3f:32:63:83:ea:e2:e4:c6:2d:32:38:5b:61:fd:28:af: 60:c6:97:01:3f:08:6f:2f:77:92:86:51:9e:aa:a3:d2:dc:a4: 8d:7d:5a:ea:06:c9:57:32:44:f3:b4:73:2d:33:26:ae:24:94: 49:89:07:d5:4f:6f:40:91:9e:06:7c:75:37:74:39:cf:cb:1d: 12:68:86:85:4d:cd:64:f2:ca:2f:83:5f:e2:39:fd:b3:23:a7: be:f4:fd:fe:5e:1d:54:52:8e:f7:98:0d:ec:63:dc:7e:63:22: 36:ed:18:67:f2:7b:2a:ff:e2:ac:7f:db:41:a2:8f:d5:40:50: 18:41:1a:1f:a7:39:ba:dc:1d:ea:44:07:94:d7:dd:a4:68:25: c4:88:48:b2:51:b4:d4:6c:0c:da:59:78:34:4e:8b:93:1b:f5: bd:c5:d5:e3:6a:b3:01:f2:a3:1e:22:4a:54:0d:61:00:8f:81: d9:a8:c3:ce -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4mO8aFbTiuZU6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZjQwODkzY2MtYTIyZS00OGU4LTllNjgtZGM4ZjUzNWYzNDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPX2Qg59XOFWFKWO3PHpjHJOul3nJYONc/q5 JO8XjTfCy2HiZ0E4DVVVs4Ofcc8XavyoAfBz29Wjxvc3dTsob9mnuRMygxXZR4Ho I3bMMs7kvGhH2cJpHoPxNwvoKTmdYNjWBvOWv6s7W9DRocaRvicpsLsPkVKO4gct EiQNzszV4Oss3Rmbyqf9gaNHtmRkxh5COODD2qPuMR4vPWNWty1EuboJdQsC6bhl WceaoOKWVnWLOD4jPw3PB1ax9k539dYsqXMt3e+5NwjnD7QalSHeWQUL6flYaNFd rV4VteoJMo2h56rEaD5WHnCsZ9POFdt0bcqj95b8IwlZDd4TWQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEO+enk/n4go6Shom77wpVGVuITBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGNlNDE1NTYtN2IyNi0z YjE3LWFhZWEtY2MwZjdhYjI1Y2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAlYNqdm4P5YDcg54B+yCwoBD9CuQg3G1Zhh86/bW50CkQB+/b1rVsN eIVB76KTToLLXJWL+KJSGgpcLQhEX7Ut1bDBqbR2mGsNWT8yY4Pq4uTGLTI4W2H9 KK9gxpcBPwhvL3eShlGeqqPS3KSNfVrqBslXMkTztHMtMyauJJRJiQfVT29AkZ4G fHU3dDnPyx0SaIaFTc1k8sovg1/iOf2zI6e+9P3+Xh1UUo73mA3sY9x+YyI27Rhn 8nsq/+Ksf9tBoo/VQFAYQRofpzm63B3qRAeU192kaCXEiEiyUbTUbAzaWXg0TouT G/W9xdXjarMB8qMeIkpUDWEAj4HZqMPO -----END CERTIFICATE-----Generated at Sun May 11 05:33:49 2025 by rpki-client