$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1bc8b20-7f23-3d1e-a758-dee058aa7e80.roa File: b1bc8b20-7f23-3d1e-a758-dee058aa7e80.roa (raw, json) Hash identifier: JAxgmRe3CDZyzjlFYcSZYbgw1uY2yQLTM6pVn8fRCUM= Subject key identifier: 6F:E7:A3:C6:9A:59:06:E7:4A:A9:7E:A5:75:FA:02:B2:5B:7E:38:A7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8CF36646EA4CDE7DAE40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1bc8b20-7f23-3d1e-a758-dee058aa7e80.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 397208 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8c:f3:66:46:ea:4c:de:7d:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=cd81fbf5-4a42-485a-a455-d026de811e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:35:d2:19:bd:6e:7d:2f:38:85:a9:45:a7:c3: 60:ce:f7:76:8c:b3:48:e8:98:83:87:f9:cb:98:b4: 51:f9:33:24:54:45:5f:50:c9:0a:c4:15:47:bc:4b: f6:7e:bb:8f:70:cd:9c:ba:ef:3f:ad:06:63:6f:43: 4c:d0:d6:54:2c:c5:1a:34:f9:37:a0:53:9a:71:7a: 8c:d0:66:67:39:92:96:76:70:f0:b7:ac:11:bb:4b: 34:4b:1e:b0:98:76:ee:f8:d1:91:55:7d:87:8b:b0: 71:5d:d8:af:ec:6b:2c:20:ff:9b:cf:a5:d7:00:c9: 48:7d:a1:54:97:35:ca:e1:99:aa:70:29:4b:96:f8: d9:8a:80:34:59:3d:6e:9d:f4:bd:9b:f5:1b:86:97: cc:c3:2a:59:c3:85:56:99:fa:97:df:71:eb:47:1c: be:4b:a2:69:ac:18:66:fd:75:2a:f6:63:f6:66:59: d9:5a:2d:c5:82:a7:a1:74:5f:69:2e:2d:7d:fa:8a: a6:cb:27:e8:2a:1e:f4:5f:ab:50:11:b4:77:2a:8d: 89:99:f3:54:03:5b:21:c2:99:67:3c:ad:b3:5f:34: c3:d4:ef:e6:4a:4f:8f:77:92:a7:39:74:a0:f4:7a: d2:b1:58:1b:fe:84:7c:53:66:1d:34:37:61:42:1a: 4b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E7:A3:C6:9A:59:06:E7:4A:A9:7E:A5:75:FA:02:B2:5B:7E:38:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1bc8b20-7f23-3d1e-a758-dee058aa7e80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:b8:ad:1b:fe:23:09:cd:2e:a6:da:7f:73:19:76:01:75:c4: dd:1d:15:f3:f7:79:fe:d1:18:8a:7e:c4:e9:8d:a1:d5:9a:09: e7:03:a2:b1:c2:4b:f5:f9:0c:53:79:a4:d0:67:9c:63:4d:1b: 30:42:fd:7a:90:7c:e5:70:4c:dd:03:01:3e:44:e5:20:a1:07: 36:cc:e5:97:56:86:cc:07:95:96:eb:29:89:b1:78:ed:03:32: cc:55:36:2e:36:10:70:c6:bd:5e:3a:36:b8:00:8d:d5:8d:b0: 40:80:54:67:1d:e7:73:f2:3c:3a:92:27:36:2f:23:1c:64:a7: 19:99:6d:9c:fc:37:ec:b7:4d:a2:63:ae:75:58:27:fb:f1:0a: 4c:40:9e:f2:50:ba:07:76:74:0f:1b:bc:85:5f:8f:fb:eb:18: 27:f8:27:cf:37:de:26:2c:a9:7b:ef:8c:70:1c:0d:31:bd:17: fc:53:25:51:60:7d:0a:1c:5c:54:67:b8:97:92:f7:81:29:08: 8f:70:62:b0:79:2b:12:5e:ff:ef:15:0d:d6:8b:29:3b:b7:96: b1:a7:bb:58:15:18:c7:f0:1f:28:4a:5d:f1:09:7f:4b:70:40: b6:ac:9c:02:18:a0:09:0c:f5:da:37:0f:6d:7a:a7:79:d6:3a: 3a:c3:59:10 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4zzZkbqTN59rkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk Y2Q4MWZiZjUtNGE0Mi00ODVhLWE0NTUtZDAyNmRlODExZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujXSGb1ufS84halFp8Ngzvd2jLNI6JiDh/nL mLRR+TMkVEVfUMkKxBVHvEv2fruPcM2cuu8/rQZjb0NM0NZULMUaNPk3oFOacXqM 0GZnOZKWdnDwt6wRu0s0Sx6wmHbu+NGRVX2Hi7BxXdiv7GssIP+bz6XXAMlIfaFU lzXK4ZmqcClLlvjZioA0WT1unfS9m/UbhpfMwypZw4VWmfqX33HrRxy+S6JprBhm /XUq9mP2ZlnZWi3FgqehdF9pLi19+oqmyyfoKh70X6tQEbR3Ko2JmfNUA1shwpln PK2zXzTD1O/mSk+Pd5KnOXSg9HrSsVgb/oR8U2YdNDdhQhpL6wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFG/no8aaWQbnSql+pXX6ArJbfjinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjFiYzhiMjAtN2YyMy0z ZDFlLWE3NTgtZGVlMDU4YWE3ZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDuK0b/iMJzS6m2n9zGXYBdcTdHRXz93n+0RiKfsTpjaHVmgnnA6Kx wkv1+QxTeaTQZ5xjTRswQv16kHzlcEzdAwE+ROUgoQc2zOWXVobMB5WW6ymJsXjt AzLMVTYuNhBwxr1eOja4AI3VjbBAgFRnHedz8jw6kic2LyMcZKcZmW2c/Dfst02i Y651WCf78QpMQJ7yULoHdnQPG7yFX4/76xgn+CfPN94mLKl774xwHA0xvRf8UyVR YH0KHFxUZ7iXkveBKQiPcGKweSsSXv/vFQ3Wiyk7t5axp7tYFRjH8B8oSl3xCX9L cEC2rJwCGKAJDPXaNw9teqd51jo6w1kQ -----END CERTIFICATE-----Generated at Sun May 11 05:29:36 2025 by rpki-client