$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7e5fd6b-e83c-30c9-8248-a6921d33938d.roa File: a7e5fd6b-e83c-30c9-8248-a6921d33938d.roa (raw, json) Hash identifier: vYjyChhhU6bGq9G9srGdOZgzSdzTPnAo3ULDjQUPV9I= Subject key identifier: FC:E6:C8:23:1D:9D:54:16:27:85:CF:88:26:B4:7D:F1:64:36:39:A5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8020FD8FE8ADE9CEC800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7e5fd6b-e83c-30c9-8248-a6921d33938d.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 397202 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:80:20:fd:8f:e8:ad:e9:ce:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=af4f7d87-29be-4818-9c66-0326588e3a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fe:66:6c:e0:9f:af:be:8b:c7:9e:d2:56:33: b5:c4:68:cd:ad:49:26:9f:42:25:ca:91:39:0c:b3: 52:4a:7b:03:7a:50:04:13:1d:3b:82:cc:5c:ed:be: a7:1e:f9:37:48:b0:6a:cc:0c:65:e0:42:6d:6d:c2: 57:b5:cc:9c:da:df:ef:93:11:90:0f:f5:4c:19:0f: 11:b4:bc:3a:80:d8:e5:c5:89:bb:6a:61:03:04:d1: e3:d3:4f:c1:4b:ab:a8:5b:b4:80:34:82:5e:38:a8: cc:a9:3d:7e:9f:bd:0a:54:22:58:94:a0:5c:d9:a0: 75:1b:6c:da:63:7c:eb:24:c2:6a:ae:b1:30:5f:ff: a5:78:ef:1d:5e:bc:34:99:5d:04:f0:60:52:72:a1: 06:ad:e6:1a:33:a1:af:0d:96:31:0b:c3:b5:86:8c: 55:56:c2:86:ec:56:3a:98:6a:ca:60:60:d5:f7:ad: 93:06:9c:8c:5d:b5:f4:2e:ff:6c:0f:26:bd:a2:58: c9:12:3d:61:97:ee:2a:41:80:a8:73:d0:a7:05:83: af:dd:fd:87:66:4c:2d:52:b0:93:a2:ec:9d:5a:7a: 25:e1:d8:71:f3:c1:ce:a3:fa:8a:bb:de:85:27:f8: 4b:ba:de:fa:6d:6a:e9:67:90:78:21:f2:1a:9a:b6: 68:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E6:C8:23:1D:9D:54:16:27:85:CF:88:26:B4:7D:F1:64:36:39:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7e5fd6b-e83c-30c9-8248-a6921d33938d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a0:ff:36:d5:8d:32:6e:0b:59:4f:cf:60:e5:2f:27:fb:23: a2:11:07:ee:fa:30:a6:d8:fe:13:40:16:5b:c2:63:9f:dd:0c: f1:c0:81:ff:bb:3c:c6:f6:0e:4b:97:3f:91:5b:a6:19:fe:84: 8e:5c:7c:61:8c:68:99:3a:e5:64:57:e8:93:7a:8c:3e:60:11: da:71:3e:76:43:85:1c:60:8d:9c:f3:e6:ef:d5:39:6d:88:e1: a7:03:70:ee:4a:ce:71:27:13:cd:d5:ed:d2:55:77:89:6f:03: 23:1c:91:94:4a:e8:9c:2d:99:cc:d3:30:46:22:9c:66:92:b6: 3d:5b:32:11:d4:d2:28:13:40:d5:a9:74:2c:24:c2:cf:e7:ff: de:99:22:1e:92:d6:33:d5:d5:15:e0:1b:ef:c7:d8:b6:16:4d: 47:2e:b7:1f:ae:98:ea:b5:b2:bb:05:ef:ae:b0:49:be:d8:80: 85:1f:6a:a8:5c:f3:12:37:fa:e5:81:8c:73:4b:cd:cd:b6:19: 8a:cc:59:68:04:e6:e5:78:58:d9:86:1a:0b:d6:1c:ee:26:63: b8:cc:be:2e:9b:a9:ab:c2:2a:30:1c:eb:b5:f4:7d:1f:07:04: 44:8e:b8:2d:84:14:a6:f3:13:e4:3c:c3:2b:68:85:e8:68:e3: 38:f3:dd:c9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4Ag/Y/orenOyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YWY0ZjdkODctMjliZS00ODE4LTljNjYtMDMyNjU4OGUzYThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf5mbOCfr76Lx57SVjO1xGjNrUkmn0IlypE5 DLNSSnsDelAEEx07gsxc7b6nHvk3SLBqzAxl4EJtbcJXtcyc2t/vkxGQD/VMGQ8R tLw6gNjlxYm7amEDBNHj00/BS6uoW7SANIJeOKjMqT1+n70KVCJYlKBc2aB1G2za Y3zrJMJqrrEwX/+leO8dXrw0mV0E8GBScqEGreYaM6GvDZYxC8O1hoxVVsKG7FY6 mGrKYGDV962TBpyMXbX0Lv9sDya9oljJEj1hl+4qQYCoc9CnBYOv3f2HZkwtUrCT ouydWnol4dhx88HOo/qKu96FJ/hLut76bWrpZ5B4IfIamrZoNwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPzmyCMdnVQWJ4XPiCa0ffFkNjmlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTdlNWZkNmItZTgzYy0z MGM5LTgyNDgtYTY5MjFkMzM5MzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB3oP821Y0ybgtZT89g5S8n+yOiEQfu+jCm2P4TQBZbwmOf3QzxwIH/ uzzG9g5Llz+RW6YZ/oSOXHxhjGiZOuVkV+iTeow+YBHacT52Q4UcYI2c8+bv1Tlt iOGnA3DuSs5xJxPN1e3SVXeJbwMjHJGUSuicLZnM0zBGIpxmkrY9WzIR1NIoE0DV qXQsJMLP5//emSIektYz1dUV4Bvvx9i2Fk1HLrcfrpjqtbK7Be+usEm+2ICFH2qo XPMSN/rlgYxzS83NthmKzFloBObleFjZhhoL1hzuJmO4zL4um6mrwiowHOu19H0f BwREjrgthBSm8xPkPMMraIXoaOM4893J -----END CERTIFICATE-----Generated at Sun May 11 05:24:30 2025 by rpki-client