$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2b36714-0c2a-3cf4-bdc0-e60598b4ce09.roa File: b2b36714-0c2a-3cf4-bdc0-e60598b4ce09.roa (raw, json) Hash identifier: BaUmJlVivUY3q/pAIQpIdp/Z/Q5gd8yfw8Y5+R7hlRE= Subject key identifier: 77:AA:C8:82:A6:0C:1F:0D:5D:2E:0C:46:EB:0F:71:D8:6C:8D:24:37 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8C6CF595FA0ADB420080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2b36714-0c2a-3cf4-bdc0-e60598b4ce09.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396565 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8c:6c:f5:95:fa:0a:db:42:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=8194c223-00a2-44ed-a6f2-8aed0d45df70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:0e:48:09:67:2a:f1:74:0f:0a:b1:ed:f2: 4e:1a:c1:39:b6:58:60:3a:d5:71:9c:9b:87:6a:40: 3f:8b:89:6f:93:71:af:de:d9:0e:76:85:9e:ca:78: 99:e0:9e:fa:dc:a9:b3:fc:1f:dd:f4:1e:ec:d6:04: 98:85:60:23:c5:e5:78:11:06:71:62:70:7e:29:06: 42:64:56:56:86:07:52:a6:cc:7d:47:13:fd:5a:0c: 2e:3e:c6:c1:e1:ce:65:80:d8:1d:46:86:f2:af:24: 84:ad:29:b9:40:58:f1:a4:d5:e8:d1:84:8f:9d:1a: fd:f1:30:30:aa:7d:3a:7d:0a:41:05:1e:20:83:7c: b3:b1:28:92:02:f1:c2:0d:78:d4:02:16:11:42:47: d4:48:41:fa:d2:61:c8:1d:9c:a9:cd:03:f4:25:6e: e3:a2:e3:c9:fa:4a:e5:64:98:82:2d:d5:47:82:77: 92:24:51:ad:cc:2c:a0:a5:e8:60:94:93:00:69:f5: 97:0f:48:67:bd:2d:82:99:e3:f2:f1:a4:50:85:35: 11:79:6c:81:17:3f:50:63:13:76:68:f0:d2:f7:46: d5:bc:33:48:c1:a7:a4:13:42:e0:bb:3e:7d:70:9b: 02:2d:78:71:4e:bc:e0:10:57:e7:40:83:91:c9:a0: 63:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AA:C8:82:A6:0C:1F:0D:5D:2E:0C:46:EB:0F:71:D8:6C:8D:24:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2b36714-0c2a-3cf4-bdc0-e60598b4ce09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:8d:44:86:f3:e6:15:e9:bc:9b:97:26:ce:f7:04:4d:05:b2: fa:80:0b:b0:7f:5c:de:df:59:7d:08:b1:01:b2:e7:11:ee:61: 64:5e:00:cf:d2:99:e7:fe:1f:ac:b9:02:00:7b:b4:38:68:99: 86:2a:92:00:61:d6:4f:46:d0:c2:8a:17:de:15:e2:45:b7:21: 58:04:8c:ac:76:88:ac:9f:17:9f:ea:d9:14:40:64:c8:c6:69: 9d:f6:9f:8b:bf:49:f4:fe:d1:00:14:2e:42:79:9b:de:1f:be: 90:63:45:5e:86:df:af:19:0b:d4:a1:fc:98:c1:f0:39:bc:f6: 99:8a:f4:32:e9:0f:f1:2f:f4:97:08:ef:4f:c8:9d:3e:06:12: ae:90:e8:c4:24:d5:6f:27:37:a5:44:8d:e0:70:09:35:64:a9: fc:c9:d4:62:e0:8a:75:f1:63:71:a5:39:14:29:3f:9d:b5:9d: 00:51:f2:17:dc:74:8e:09:50:79:3c:63:21:e8:3d:99:06:78: 98:37:49:53:06:f5:42:f5:3f:3e:a2:9d:0f:e3:f3:5c:b2:73: fc:7d:53:7a:82:f9:41:a8:1d:cf:91:d3:ec:85:72:a3:5a:f2: a9:f8:fb:7f:c6:c1:50:44:db:bc:e5:9c:aa:f1:c8:df:f1:42: 92:be:de:33 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4xs9ZX6CttCAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ODE5NGMyMjMtMDBhMi00NGVkLWE2ZjItOGFlZDBkNDVkZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSAOSAlnKvF0Dwqx7fJOGsE5tlhgOtVxnJuH akA/i4lvk3Gv3tkOdoWeyniZ4J763Kmz/B/d9B7s1gSYhWAjxeV4EQZxYnB+KQZC ZFZWhgdSpsx9RxP9WgwuPsbB4c5lgNgdRobyrySErSm5QFjxpNXo0YSPnRr98TAw qn06fQpBBR4gg3yzsSiSAvHCDXjUAhYRQkfUSEH60mHIHZypzQP0JW7jouPJ+krl ZJiCLdVHgneSJFGtzCygpehglJMAafWXD0hnvS2CmePy8aRQhTUReWyBFz9QYxN2 aPDS90bVvDNIwaekE0Lguz59cJsCLXhxTrzgEFfnQIORyaBjPQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHeqyIKmDB8NXS4MRusPcdhsjSQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjJiMzY3MTQtMGMyYS0z Y2Y0LWJkYzAtZTYwNTk4YjRjZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB+jUSG8+YV6byblybO9wRNBbL6gAuwf1ze31l9CLEBsucR7mFkXgDP 0pnn/h+suQIAe7Q4aJmGKpIAYdZPRtDCihfeFeJFtyFYBIysdoisnxef6tkUQGTI xmmd9p+Lv0n0/tEAFC5CeZveH76QY0Veht+vGQvUofyYwfA5vPaZivQy6Q/xL/SX CO9PyJ0+BhKukOjEJNVvJzelRI3gcAk1ZKn8ydRi4Ip18WNxpTkUKT+dtZ0AUfIX 3HSOCVB5PGMh6D2ZBniYN0lTBvVC9T8+op0P4/NcsnP8fVN6gvlBqB3PkdPshXKj WvKp+Pt/xsFQRNu85Zyq8cjf8UKSvt4z -----END CERTIFICATE-----Generated at Sun May 11 05:36:23 2025 by rpki-client