$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a0a83e5-2bf5-35a0-ac21-b349cefbeebb.roa File: 9a0a83e5-2bf5-35a0-ac21-b349cefbeebb.roa (raw, json) Hash identifier: t9aQ3GwHkIt2XzHfY6KpB23WGN8YX4dYvFgSl7vKAYI= Subject key identifier: AF:2F:35:5F:AC:F5:4F:81:67:BA:AC:87:A2:55:34:24:C4:92:79:34 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8D6203DBC6C82D601D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a0a83e5-2bf5-35a0-ac21-b349cefbeebb.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396546 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8d:62:03:db:c6:c8:2d:60:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=3f56e551-be1c-44fc-8b36-cb4d94db350a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:df:bf:9b:cd:a4:62:09:aa:28:a0:ad:d0:e4: fb:90:44:6d:b0:a8:98:b7:07:67:9c:32:7b:78:b2: e4:8d:ea:4f:70:62:49:25:bf:92:57:76:70:a6:e2: 6c:c9:5e:53:ec:29:d8:4f:cb:e7:55:49:36:78:ed: 40:21:19:52:52:61:dd:7c:36:d9:73:5c:23:69:0a: d3:87:71:78:21:bc:90:12:d3:f5:1d:5c:fe:64:02: 8c:44:af:57:ec:cb:dc:29:ab:1e:52:be:0e:4d:c9: 41:67:6b:6f:ad:fd:e7:5f:69:ce:f8:03:fb:6e:9a: 61:a3:bb:9f:e1:96:b8:2e:31:f0:cb:00:23:6d:6a: 71:84:f1:33:05:07:da:fd:ae:07:f6:7b:4e:e1:dc: 8e:25:48:7b:18:d3:84:cd:96:41:21:08:d9:05:bd: e5:3e:f2:af:cb:b8:44:91:81:b4:e7:6f:34:fa:b9: d7:56:9b:85:a5:46:fe:ac:68:75:f7:17:80:f6:db: 7e:c4:0f:fb:82:af:e8:38:30:9d:1e:c2:f2:cf:60: 33:66:67:79:eb:53:66:28:ca:a6:76:8c:c5:83:a8: e4:7f:d8:f9:fe:6b:87:cb:0b:fe:eb:06:cf:04:0b: 1b:36:36:b4:f4:7f:76:56:3d:dc:0e:98:fa:ff:4c: a5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2F:35:5F:AC:F5:4F:81:67:BA:AC:87:A2:55:34:24:C4:92:79:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a0a83e5-2bf5-35a0-ac21-b349cefbeebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:a9:6b:d8:87:4c:c7:4b:fa:5f:29:36:da:56:68:f1:70:e6: 7b:20:4f:ba:89:6a:cc:da:49:af:3a:f6:3f:c1:1e:6a:48:e0: 68:49:ef:3b:03:69:ea:48:22:d5:19:41:62:fc:7f:f9:c3:91: e0:34:d2:f7:91:fa:f7:8d:e7:68:c8:c6:75:2b:aa:0e:03:7a: 20:83:52:ee:91:a8:48:c4:d2:74:7f:0b:0c:49:92:5a:00:58: 1a:c5:6f:0e:c3:b7:1a:da:40:f0:9b:91:3b:42:49:79:40:6e: 9c:fc:d5:8e:0f:c9:67:d1:30:b3:cf:89:ae:52:00:da:29:ad: 26:66:f3:53:b7:e6:11:70:35:5d:36:bc:70:8d:46:83:3b:87: 0c:c4:ae:11:98:66:1d:34:bd:1e:cb:d8:35:6d:86:de:0e:7a: ad:63:0c:c6:02:5b:21:d3:ed:a6:b8:63:0f:e4:f0:2a:39:81: 0b:53:d8:15:eb:e1:8e:8d:23:b8:e0:e8:cb:be:4d:2e:10:58: db:5f:ff:67:28:2b:be:3a:cc:f5:c6:90:02:63:db:76:93:af: 63:3b:3c:ff:17:92:ec:b4:9d:b3:8e:3b:c4:98:34:b4:95:a5: 10:31:fe:57:cd:92:01:93:4d:66:78:c2:34:39:4d:f5:3c:20: 75:11:68:7a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P41iA9vGyC1gHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk M2Y1NmU1NTEtYmUxYy00NGZjLThiMzYtY2I0ZDk0ZGIzNTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9t+/m82kYgmqKKCt0OT7kERtsKiYtwdnnDJ7 eLLkjepPcGJJJb+SV3ZwpuJsyV5T7CnYT8vnVUk2eO1AIRlSUmHdfDbZc1wjaQrT h3F4IbyQEtP1HVz+ZAKMRK9X7MvcKaseUr4OTclBZ2tvrf3nX2nO+AP7bppho7uf 4Za4LjHwywAjbWpxhPEzBQfa/a4H9ntO4dyOJUh7GNOEzZZBIQjZBb3lPvKvy7hE kYG05280+rnXVpuFpUb+rGh19xeA9tt+xA/7gq/oODCdHsLyz2AzZmd561NmKMqm dozFg6jkf9j5/muHywv+6wbPBAsbNja09H92Vj3cDpj6/0ylaQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK8vNV+s9U+BZ7qsh6JVNCTEknk0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWEwYTgzZTUtMmJmNS0z NWEwLWFjMjEtYjM0OWNlZmJlZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAXqWvYh0zHS/pfKTbaVmjxcOZ7IE+6iWrM2kmvOvY/wR5qSOBoSe87 A2nqSCLVGUFi/H/5w5HgNNL3kfr3jedoyMZ1K6oOA3ogg1LukahIxNJ0fwsMSZJa AFgaxW8Ow7ca2kDwm5E7Qkl5QG6c/NWOD8ln0TCzz4muUgDaKa0mZvNTt+YRcDVd NrxwjUaDO4cMxK4RmGYdNL0ey9g1bYbeDnqtYwzGAlsh0+2muGMP5PAqOYELU9gV 6+GOjSO44OjLvk0uEFjbX/9nKCu+Osz1xpACY9t2k69jOzz/F5LstJ2zjjvEmDS0 laUQMf5XzZIBk01meMI0OU31PCB1EWh6 -----END CERTIFICATE-----Generated at Sun May 11 05:42:20 2025 by rpki-client