$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9505a683-925a-30d4-8ee0-ebb8050e9a35.roa File: 9505a683-925a-30d4-8ee0-ebb8050e9a35.roa (raw, json) Hash identifier: yOFpIDawtH1Mr9URgoUeaBq1DSduvjozklgv8ANsneU= Subject key identifier: 28:8C:27:36:AE:7E:4D:E9:F3:CB:C5:CB:90:8D:46:22:F5:BE:74:7E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8CCFA6AECFEEEAD09A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9505a683-925a-30d4-8ee0-ebb8050e9a35.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 36618 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8c:cf:a6:ae:cf:ee:ea:d0:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=3ac647b0-d6d9-4273-8fb5-b4c92edc00d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:35:5f:aa:b7:65:2c:20:4f:08:02:2e:fa:27: cd:86:71:db:05:c0:e0:8e:04:c3:64:8d:d3:fb:d2: 8d:4a:7d:79:a2:0a:32:06:38:9a:71:9e:dd:4c:bb: cb:cb:7b:1b:db:4c:59:b1:fd:b1:7b:dc:60:ff:22: 78:34:2e:bb:87:20:c4:fd:42:bb:b0:69:78:a1:e4: 58:a5:ce:3c:62:d5:f1:cc:f6:5a:4e:2f:75:82:25: 24:ad:59:0d:62:d9:bd:03:f9:b3:8f:7f:ae:90:66: 86:f4:26:50:b1:27:61:1b:32:a5:74:84:3c:f8:02: 45:81:21:17:3b:31:6a:e9:c8:b1:c4:53:51:a4:4d: 57:35:5d:a6:c1:ac:fc:6e:c0:87:09:9a:f7:c3:f8: 50:f3:6e:1c:cb:0d:f0:1b:04:7e:47:f6:46:2f:85: b1:62:15:62:24:fe:1a:d2:c3:6d:de:49:08:9f:b1: c6:ea:23:7c:fc:00:da:13:b5:52:82:dc:1c:2b:bc: 8f:47:08:f0:39:12:7f:d9:44:2c:f2:9a:09:1c:22: 21:26:f0:c5:1d:8a:8d:e0:b8:be:cb:d2:a1:de:f1: b5:69:d9:15:20:ed:5f:58:04:f8:5f:ef:9d:d2:d6: 07:af:ee:2a:06:72:fd:9a:40:02:15:08:86:58:c8: db:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8C:27:36:AE:7E:4D:E9:F3:CB:C5:CB:90:8D:46:22:F5:BE:74:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9505a683-925a-30d4-8ee0-ebb8050e9a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:29:5f:2b:1f:12:57:49:c6:a8:70:4b:4e:2c:9e:a3:cc:49: d2:dc:a5:57:e8:e2:6b:f9:bf:b7:70:75:b0:25:cf:64:02:6d: 75:31:ee:16:27:95:08:5b:97:f6:0f:48:00:e1:7a:15:58:41: 6c:36:25:62:e5:ae:36:c1:4b:09:b2:25:5a:d8:29:59:ad:da: 04:74:47:bd:79:77:33:5c:b7:af:9b:20:13:fb:f2:17:f0:45: 9c:73:71:f5:95:3a:f2:59:8e:ce:dd:fa:f7:7a:b5:df:4c:71: 2f:67:a3:6c:b9:5b:31:97:30:58:55:d6:1a:7b:80:64:2c:16: 53:d4:f5:80:b5:75:54:84:5f:da:3c:a3:ec:b5:b2:6d:78:e3: 4a:5c:3d:d4:c6:b6:ae:fd:96:d2:fe:d8:bc:42:8c:c4:37:80: af:dc:51:89:c1:b7:bc:13:57:8b:20:81:bf:eb:d6:3b:ba:0f: d2:32:48:eb:03:58:b0:58:92:46:63:01:b3:db:eb:7f:60:54: a1:c2:8d:39:e2:3e:ef:7c:d3:41:5a:57:e0:3d:61:4a:63:35: ed:d4:0e:06:79:e6:32:20:9f:d4:89:83:7d:7d:5a:30:f3:af: 43:c1:3e:e0:ff:07:35:35:99:98:df:ef:e2:19:ba:48:f0:b4: f2:7b:75:fc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4zPpq7P7urQmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk M2FjNjQ3YjAtZDZkOS00MjczLThmYjUtYjRjOTJlZGMwMGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDVfqrdlLCBPCAIu+ifNhnHbBcDgjgTDZI3T +9KNSn15ogoyBjiacZ7dTLvLy3sb20xZsf2xe9xg/yJ4NC67hyDE/UK7sGl4oeRY pc48YtXxzPZaTi91giUkrVkNYtm9A/mzj3+ukGaG9CZQsSdhGzKldIQ8+AJFgSEX OzFq6cixxFNRpE1XNV2mwaz8bsCHCZr3w/hQ824cyw3wGwR+R/ZGL4WxYhViJP4a 0sNt3kkIn7HG6iN8/ADaE7VSgtwcK7yPRwjwORJ/2UQs8poJHCIhJvDFHYqN4Li+ y9Kh3vG1adkVIO1fWAT4X++d0tYHr+4qBnL9mkACFQiGWMjbOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCiMJzaufk3p88vFy5CNRiL1vnR+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTUwNWE2ODMtOTI1YS0z MGQ0LThlZTAtZWJiODA1MGU5YTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDKV8rHxJXScaocEtOLJ6jzEnS3KVX6OJr+b+3cHWwJc9kAm11Me4W J5UIW5f2D0gA4XoVWEFsNiVi5a42wUsJsiVa2ClZrdoEdEe9eXczXLevmyAT+/IX 8EWcc3H1lTryWY7O3fr3erXfTHEvZ6NsuVsxlzBYVdYae4BkLBZT1PWAtXVUhF/a PKPstbJteONKXD3Uxrau/ZbS/ti8QozEN4Cv3FGJwbe8E1eLIIG/69Y7ug/SMkjr A1iwWJJGYwGz2+t/YFShwo054j7vfNNBWlfgPWFKYzXt1A4GeeYyIJ/UiYN9fVow 869DwT7g/wc1NZmY3+/iGbpI8LTye3X8 -----END CERTIFICATE-----Generated at Sun May 11 07:34:19 2025 by rpki-client