$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa6de5e-1ece-32fe-ba13-6bee32a73eac.roa File: aaa6de5e-1ece-32fe-ba13-6bee32a73eac.roa (raw, json) Hash identifier: 8vdhLSvMdfyMyqDwiDE0LhXS9pZugBkA2qB2WhcnZ1Y= Subject key identifier: F7:87:BA:13:77:78:98:08:72:4D:82:49:01:6D:55:33:AA:36:83:7B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F829430EC32D84780FAC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa6de5e-1ece-32fe-ba13-6bee32a73eac.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396585 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:82:94:30:ec:32:d8:47:80:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=e9e24967-74be-40c9-b6e8-89ff0cb1726f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cc:36:f6:7a:d8:71:0c:6a:00:d3:2d:4a:27: 32:48:70:10:fb:90:90:8b:31:fa:53:fd:1b:68:b0: 15:e1:36:4b:2d:9b:67:c7:b7:0a:af:b7:29:ca:f0: 5e:59:e8:08:d5:9b:05:bf:23:db:3c:e8:4a:83:25: 5e:d9:c0:74:d2:4a:e4:0e:e0:c8:14:ae:c1:c6:26: 29:2d:52:3d:32:88:53:d4:07:4e:0f:3e:d8:71:b8: e0:80:d7:b1:94:e5:d8:de:ec:a6:4d:d5:99:6a:cf: 92:f8:69:20:34:f0:a7:40:ae:38:a1:f1:4f:b8:35: 4f:db:dd:0e:e9:34:02:09:9b:ec:dd:0a:e0:f0:e2: 30:81:8d:ee:0c:39:72:bd:f2:88:5a:bc:b1:56:07: 27:08:9f:7c:9e:b9:63:76:2b:45:f0:7c:86:4f:a5: f6:0f:1c:3d:e8:9c:7d:01:81:ec:10:27:83:a7:6e: 22:00:3b:f1:d2:49:3f:59:85:ce:a7:f5:8e:ff:ae: d9:cd:5f:85:c4:57:5f:ef:d1:df:97:6f:39:21:2f: 4a:b6:bd:58:64:12:47:98:bc:78:51:20:fd:67:b2: 11:af:95:dc:48:f7:8e:4b:9e:25:56:30:9c:eb:3f: dd:a1:77:f2:11:9f:98:30:01:b0:65:95:59:88:c7: ed:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:87:BA:13:77:78:98:08:72:4D:82:49:01:6D:55:33:AA:36:83:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa6de5e-1ece-32fe-ba13-6bee32a73eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:39:5d:f9:22:22:69:8b:ae:6f:5d:57:06:a3:36:79:a0:c6: 20:34:13:af:c3:a8:67:24:31:cd:30:7d:b1:51:0b:82:1b:75: 2c:32:85:f5:c0:29:d4:f4:c3:f1:d3:5f:f1:f4:53:8b:d8:ee: 37:8e:bb:9e:6d:51:ea:39:22:f8:21:9f:84:cc:84:32:32:34: 47:ab:41:2c:63:87:41:4a:6b:49:7b:30:8c:dd:ca:a8:07:c2: 60:03:8a:97:91:24:55:c7:d5:d7:e7:17:cd:d1:71:d5:d4:42: 13:57:19:18:98:c9:30:8a:86:94:ae:26:04:fe:c6:64:24:09: 09:c9:c3:35:ba:ed:0b:53:f8:4d:00:f8:03:47:f5:4c:7c:8b: c5:6c:d3:c3:82:6c:79:23:8d:98:84:cf:89:36:87:0f:b9:0b: 8d:79:42:00:72:69:b2:84:e8:db:1d:e3:e7:08:23:b9:74:d6: e0:2e:ca:15:b7:f9:a2:39:b6:57:cb:fc:e8:1f:54:2b:f6:7b: cf:a6:01:4c:4d:6d:a3:de:ca:2e:5a:4b:6f:ed:de:0a:b0:cc: 2a:49:93:93:49:a3:33:49:2a:04:f0:0b:20:71:40:5a:ea:00: df:1f:d1:cd:87:ef:9c:76:a8:63:cc:74:c8:12:bb:7b:09:9d: 2a:ee:8d:0c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4KUMOwy2EeA+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZTllMjQ5NjctNzRiZS00MGM5LWI2ZTgtODlmZjBjYjE3MjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcw29nrYcQxqANMtSicySHAQ+5CQizH6U/0b aLAV4TZLLZtnx7cKr7cpyvBeWegI1ZsFvyPbPOhKgyVe2cB00krkDuDIFK7BxiYp LVI9MohT1AdODz7YcbjggNexlOXY3uymTdWZas+S+GkgNPCnQK44ofFPuDVP290O 6TQCCZvs3Qrg8OIwgY3uDDlyvfKIWryxVgcnCJ98nrljditF8HyGT6X2Dxw96Jx9 AYHsECeDp24iADvx0kk/WYXOp/WO/67ZzV+FxFdf79Hfl285IS9Ktr1YZBJHmLx4 USD9Z7IRr5XcSPeOS54lVjCc6z/doXfyEZ+YMAGwZZVZiMft5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPeHuhN3eJgIck2CSQFtVTOqNoN7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWFhNmRlNWUtMWVjZS0z MmZlLWJhMTMtNmJlZTMyYTczZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBTOV35IiJpi65vXVcGozZ5oMYgNBOvw6hnJDHNMH2xUQuCG3UsMoX1 wCnU9MPx01/x9FOL2O43jruebVHqOSL4IZ+EzIQyMjRHq0EsY4dBSmtJezCM3cqo B8JgA4qXkSRVx9XX5xfN0XHV1EITVxkYmMkwioaUriYE/sZkJAkJycM1uu0LU/hN APgDR/VMfIvFbNPDgmx5I42YhM+JNocPuQuNeUIAcmmyhOjbHePnCCO5dNbgLsoV t/miObZXy/zoH1Qr9nvPpgFMTW2j3souWktv7d4KsMwqSZOTSaMzSSoE8AsgcUBa 6gDfH9HNh++cdqhjzHTIErt7CZ0q7o0M -----END CERTIFICATE-----Generated at Sun May 11 05:37:37 2025 by rpki-client