$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b16f5521-1f55-335b-bb07-173d9ed920f6.roa File: b16f5521-1f55-335b-bb07-173d9ed920f6.roa (raw, json) Hash identifier: zywRrRU+qM3w0/qr2+d8BhEyTgWduH5GjTRzZg4s/H4= Subject key identifier: A3:FA:C7:8D:A0:52:7C:4E:39:7E:15:4A:D6:12:C1:F9:41:64:A7:73 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8DB1B129905BB93A1800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b16f5521-1f55-335b-bb07-173d9ed920f6.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396611 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8d:b1:b1:29:90:5b:b9:3a:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=f36db5e6-cadb-4cb1-81de-2a819e42b07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:7e:47:a6:e7:2a:a0:1b:72:5a:04:18:fc: 20:3c:db:74:42:f2:cc:d1:74:58:eb:15:0d:55:4d: ec:29:a8:76:c3:1c:ee:72:6f:46:77:78:f2:5a:92: 9a:92:65:b8:13:70:dc:9a:00:15:28:33:d0:63:e7: 1c:02:7d:56:b1:8e:f0:fe:69:95:6c:eb:2a:1a:c5: b4:a1:fe:4b:bd:96:8c:99:6c:46:56:32:17:15:87: 88:13:b7:45:7e:11:81:b9:24:f2:50:65:7a:9e:d9: 84:6e:6c:d2:0b:d7:5f:ac:cc:26:37:df:fd:9a:59: 8d:3e:65:86:f6:09:e7:b8:c1:19:ec:28:af:8c:e5: 2d:85:83:3c:1e:7c:78:bb:05:01:49:74:78:91:41: 95:76:f9:49:73:99:9d:5c:4e:92:36:57:3c:d3:84: 79:06:5f:4f:0d:07:b9:c8:cc:7d:fc:86:15:7d:f7: b4:1d:23:51:f2:c8:6f:de:f3:7d:5e:ba:6f:e2:8b: 4e:68:a9:05:fd:79:01:bd:eb:78:d1:5c:22:2c:18: a1:5b:b4:cd:d4:85:6c:55:8b:04:6f:f3:54:39:2b: 73:12:d6:d0:3c:95:c6:a1:7e:8f:65:28:66:07:e3: 8d:20:72:11:28:04:5d:20:5b:5b:9e:40:ae:16:b4: 9b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FA:C7:8D:A0:52:7C:4E:39:7E:15:4A:D6:12:C1:F9:41:64:A7:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b16f5521-1f55-335b-bb07-173d9ed920f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:61:e1:f4:89:93:1a:9d:d1:53:43:c0:61:bc:a7:34:71:6e: 70:1c:ad:09:83:e9:9f:91:a7:f9:52:2e:fc:c2:9d:2a:90:4f: de:1d:aa:9f:b9:71:95:41:5b:8d:76:a5:12:0f:35:5b:b5:d1: 38:55:8b:b8:1d:6e:f3:6c:c7:d5:10:8c:7b:4f:0b:42:e8:14: 17:cd:f4:84:77:4b:36:a9:ed:11:3a:41:7d:34:dc:51:f7:24: 20:76:74:20:97:2c:4a:67:37:10:fe:56:d8:9a:53:e0:7f:ff: ca:6e:ad:a1:6e:94:01:9e:1e:7a:29:1a:ef:dc:56:a5:c3:c7: 53:76:9a:9f:95:7f:2f:d5:d0:72:bc:70:ab:c3:e2:45:b0:da: 93:1c:34:fe:cc:1a:8b:c4:78:cd:98:80:f6:06:cd:29:8f:fa: 22:f7:2c:c9:45:60:91:98:63:f9:82:4e:d4:57:62:80:ec:25: 27:4f:8a:0f:5f:87:c1:7c:2a:27:2d:6a:0b:21:b5:db:7a:56: 2b:b6:5a:6b:59:63:fc:b9:0c:76:b5:de:d6:a1:b7:51:75:a1: 5f:ae:89:37:d8:10:90:d2:7d:68:7f:af:73:31:2d:45:2b:08: 57:fa:36:01:13:ce:ce:11:80:bf:42:5e:db:2b:34:76:3c:80: 80:6d:43:e3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P42xsSmQW7k6GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZjM2ZGI1ZTYtY2FkYi00Y2IxLTgxZGUtMmE4MTllNDJiMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPt+R6bnKqAbcloEGPwgPNt0QvLM0XRY6xUN VU3sKah2wxzucm9Gd3jyWpKakmW4E3DcmgAVKDPQY+ccAn1WsY7w/mmVbOsqGsW0 of5LvZaMmWxGVjIXFYeIE7dFfhGBuSTyUGV6ntmEbmzSC9dfrMwmN9/9mlmNPmWG 9gnnuMEZ7CivjOUthYM8Hnx4uwUBSXR4kUGVdvlJc5mdXE6SNlc804R5Bl9PDQe5 yMx9/IYVffe0HSNR8shv3vN9Xrpv4otOaKkF/XkBvet40VwiLBihW7TN1IVsVYsE b/NUOStzEtbQPJXGoX6PZShmB+ONIHIRKARdIFtbnkCuFrSbBwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKP6x42gUnxOOX4VStYSwflBZKdzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjE2ZjU1MjEtMWY1NS0z MzViLWJiMDctMTczZDllZDkyMGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBVYeH0iZMandFTQ8BhvKc0cW5wHK0Jg+mfkaf5Ui78wp0qkE/eHaqf uXGVQVuNdqUSDzVbtdE4VYu4HW7zbMfVEIx7TwtC6BQXzfSEd0s2qe0ROkF9NNxR 9yQgdnQglyxKZzcQ/lbYmlPgf//Kbq2hbpQBnh56KRrv3Falw8dTdpqflX8v1dBy vHCrw+JFsNqTHDT+zBqLxHjNmID2Bs0pj/oi9yzJRWCRmGP5gk7UV2KA7CUnT4oP X4fBfConLWoLIbXbelYrtlprWWP8uQx2td7WobdRdaFfrok32BCQ0n1of69zMS1F KwhX+jYBE87OEYC/Ql7bKzR2PICAbUPj -----END CERTIFICATE-----Generated at Sun May 11 08:13:15 2025 by rpki-client