$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab9c7259-d732-356a-8cc2-b5eadfc878cd.roa File: ab9c7259-d732-356a-8cc2-b5eadfc878cd.roa (raw, json) Hash identifier: V87fCfb8ypOwwRVpnfqpFwzPw/v1xoRYJ68gbZ0WyzA= Subject key identifier: 7A:BD:5E:65:E5:FD:E9:59:2F:7D:82:9A:C1:1D:22:DC:58:FC:BF:7F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F86C9DDBE6990C5A4A570 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab9c7259-d732-356a-8cc2-b5eadfc878cd.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396581 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:86:c9:dd:be:69:90:c5:a4:a5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=a88100b2-5c42-4929-8484-7fe396a4b520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:54:9e:00:32:93:41:89:28:5c:24:75:53:5c: 82:db:f7:56:4e:ad:7d:62:7a:02:d9:41:04:9a:4b: 7d:2f:d1:96:72:d6:ad:ad:cf:0d:a4:6d:c7:7d:b4: 43:08:05:6a:cf:09:04:5f:ba:d1:5f:a2:98:13:d9: f6:6b:26:64:c2:34:59:be:08:05:5d:11:cc:62:70: e8:8a:42:db:d0:4f:a0:dd:f4:3d:95:60:46:b6:2e: fb:8f:ef:49:44:44:4c:2d:51:88:e5:67:57:5b:d6: b4:2b:0b:5b:55:a5:28:43:6c:a6:48:4d:a6:75:77: 7d:43:7b:1d:ce:b9:f1:cc:de:8c:a9:25:fa:7c:c7: a7:19:9d:fa:90:f2:7a:a1:c4:ae:25:0a:89:b9:eb: 47:63:cf:55:34:fe:d9:ba:84:ae:87:75:fa:c4:be: 5f:13:5e:95:fb:9b:9d:53:e4:4c:e3:9d:e0:53:9c: 68:1d:ab:25:43:5d:f5:6a:8d:6f:78:2b:09:a7:6f: 1f:c5:96:1f:63:84:79:76:cd:83:95:52:f2:a8:14: 5d:ea:08:54:cd:15:7b:c1:05:b4:ea:b1:9e:0d:7a: 4a:31:b5:75:71:25:bb:ca:9d:19:7d:bd:98:96:c3: 4f:c6:d5:b0:19:ef:59:38:a5:c0:df:29:46:12:25: b0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BD:5E:65:E5:FD:E9:59:2F:7D:82:9A:C1:1D:22:DC:58:FC:BF:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab9c7259-d732-356a-8cc2-b5eadfc878cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:60:fd:01:59:89:bf:d2:ac:77:a3:9a:2d:98:c1:8a:1b:18: a8:8e:bb:30:51:ea:96:5d:a1:a3:a5:55:ad:82:c4:36:23:fc: 57:d2:ad:49:21:26:2d:70:5a:91:f9:93:57:41:8c:93:2d:ea: bf:9b:b0:bd:63:ca:f2:cc:1e:34:ea:fc:4a:d5:ff:4e:18:04: 10:b9:b5:03:93:f6:ed:c3:54:bd:e8:6f:0a:72:29:79:19:71: d2:71:35:75:a1:f0:f7:39:03:71:b6:64:74:cb:45:15:b7:08: f2:4f:d5:57:f0:41:1f:41:ae:5a:55:b8:f6:69:d7:07:5a:81: 3b:ba:78:92:b1:e4:5e:b1:fd:5f:23:8f:a6:9a:fa:4d:7d:9f: 66:d2:77:6d:c5:7a:a8:50:5f:ea:70:2b:00:a4:f9:44:91:3a: ed:87:80:b4:d5:1a:1e:9e:2f:95:01:9d:73:10:4b:3c:34:0b: 4c:d6:47:11:35:86:dc:91:3b:c5:c8:c1:6a:88:e7:7f:47:fb: 09:af:89:3b:81:27:3e:24:7b:7a:bf:5c:a8:71:39:91:c6:68: cb:ac:73:57:f2:bc:f4:b2:67:ef:32:18:af:03:da:a3:a5:7e: f3:0a:66:50:a1:a7:5e:08:26:79:55:da:24:9f:c7:67:c8:45: 01:a4:5d:f2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4bJ3b5pkMWkpXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YTg4MTAwYjItNWM0Mi00OTI5LTg0ODQtN2ZlMzk2YTRiNTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlSeADKTQYkoXCR1U1yC2/dWTq19YnoC2UEE mkt9L9GWctatrc8NpG3HfbRDCAVqzwkEX7rRX6KYE9n2ayZkwjRZvggFXRHMYnDo ikLb0E+g3fQ9lWBGti77j+9JRERMLVGI5WdXW9a0KwtbVaUoQ2ymSE2mdXd9Q3sd zrnxzN6MqSX6fMenGZ36kPJ6ocSuJQqJuetHY89VNP7ZuoSuh3X6xL5fE16V+5ud U+RM453gU5xoHaslQ131ao1veCsJp28fxZYfY4R5ds2DlVLyqBRd6ghUzRV7wQW0 6rGeDXpKMbV1cSW7yp0Zfb2YlsNPxtWwGe9ZOKXA3ylGEiWwswIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHq9XmXl/elZL32CmsEdItxY/L9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWI5YzcyNTktZDczMi0z NTZhLThjYzItYjVlYWRmYzg3OGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAPYP0BWYm/0qx3o5otmMGKGxiojrswUeqWXaGjpVWtgsQ2I/xX0q1J ISYtcFqR+ZNXQYyTLeq/m7C9Y8ryzB406vxK1f9OGAQQubUDk/btw1S96G8Kcil5 GXHScTV1ofD3OQNxtmR0y0UVtwjyT9VX8EEfQa5aVbj2adcHWoE7uniSseResf1f I4+mmvpNfZ9m0ndtxXqoUF/qcCsApPlEkTrth4C01Roeni+VAZ1zEEs8NAtM1kcR NYbckTvFyMFqiOd/R/sJr4k7gSc+JHt6v1yocTmRxmjLrHNX8rz0smfvMhivA9qj pX7zCmZQoadeCCZ5Vdokn8dnyEUBpF3y -----END CERTIFICATE-----Generated at Sun May 11 08:30:54 2025 by rpki-client