$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9a34bbf-cdc0-3555-afd1-c49b7868aa81.roa File: b9a34bbf-cdc0-3555-afd1-c49b7868aa81.roa (raw, json) Hash identifier: ei/e/l+CUENgcpMawJELeQvymeqr8a54G4TFUXgJsFY= Subject key identifier: 2A:F8:09:74:C7:4C:FF:C1:06:F2:0F:72:C7:62:EE:11:4F:35:C8:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F803C9A7154576AD2A4E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9a34bbf-cdc0-3555-afd1-c49b7868aa81.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396595 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:80:3c:9a:71:54:57:6a:d2:a4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=01f2653f-99d0-417d-b3ea-006914d50bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:80:03:34:15:93:f7:3d:57:9c:42:5d:aa:3f: a5:25:59:2d:c9:f2:66:8f:82:d0:21:fb:c7:cb:a5: 2f:f0:89:e7:01:79:56:c0:dd:cd:6b:e5:25:c1:25: 6d:2c:61:a9:64:aa:1e:cd:d7:12:11:2a:b0:76:4c: ae:67:3e:07:93:fc:6d:9d:f5:37:67:eb:b4:de:75: 7b:df:39:4f:84:d9:e6:c7:d0:ec:f1:51:df:05:96: cc:e6:de:41:ba:ee:1d:97:34:55:33:47:dc:ad:ca: f4:dd:cf:54:75:d1:27:58:78:56:ae:a3:e0:ab:13: 82:4a:82:64:a9:ef:f4:6b:f2:7f:af:a5:7f:cf:36: ba:30:a9:d7:5d:89:08:53:42:f2:57:d4:17:2f:ed: 24:2f:2e:0c:3b:89:c0:ea:0c:07:f0:d6:c0:30:fe: 49:94:db:71:80:e1:97:40:9b:4d:bc:70:0f:66:d0: 29:b7:1c:cf:e7:32:d7:19:b6:db:9e:cf:3d:b2:6e: 06:8d:30:33:b9:29:8a:f0:fb:bb:e6:f3:66:27:4a: 4c:b4:8b:98:6f:31:f1:3c:c3:80:d7:74:68:c9:82: d0:c5:d0:45:ae:16:1c:a0:ea:03:e4:cc:d9:d9:a3: 34:bf:0b:b2:6a:91:9b:33:10:b7:ef:e6:51:de:f4: 2c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F8:09:74:C7:4C:FF:C1:06:F2:0F:72:C7:62:EE:11:4F:35:C8:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9a34bbf-cdc0-3555-afd1-c49b7868aa81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:af:02:ac:5c:5f:36:e4:3b:85:f8:06:ce:f1:34:57:42:b7: e7:cf:5e:a0:2b:4e:3c:21:57:45:ac:c5:b3:1f:92:02:1f:e6: 0f:e0:e0:d3:08:65:90:c2:a2:e2:39:90:31:3f:f6:3c:98:5a: 07:7c:4f:de:09:e4:da:49:76:d6:5d:e8:bd:1d:18:5c:8f:9f: 46:9d:7b:95:fd:bf:2c:5d:77:3f:69:60:63:39:d0:30:02:2d: 49:6d:b6:03:59:ff:e6:19:88:5b:f1:ec:9d:0d:bc:f2:3a:1f: eb:cd:2c:02:a6:8b:34:90:5f:1d:d6:79:70:b4:26:f3:57:33: 7f:aa:71:56:06:54:96:33:f2:62:a3:e5:59:49:80:35:d8:58: 74:a9:f4:16:1b:42:57:35:f4:33:0a:6a:30:68:4e:7c:98:a3: 35:be:e2:f1:c6:c3:34:ca:49:01:8c:8a:32:de:76:9d:db:4a: 98:dd:d5:09:e9:e8:98:82:f6:8e:70:00:19:ed:41:b7:59:10: 46:ed:5f:59:ba:e2:90:46:cc:50:f3:fd:9a:03:19:63:4f:e0: de:33:1d:93:f2:1f:ae:b5:db:a0:50:e9:b6:0a:25:e1:28:c3: 52:da:6b:04:73:4a:f0:29:5c:df:4d:5e:8d:71:55:0f:1d:a2: 11:14:e8:36 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4A8mnFUV2rSpOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MDFmMjY1M2YtOTlkMC00MTdkLWIzZWEtMDA2OTE0ZDUwYmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYADNBWT9z1XnEJdqj+lJVktyfJmj4LQIfvH y6Uv8InnAXlWwN3Na+UlwSVtLGGpZKoezdcSESqwdkyuZz4Hk/xtnfU3Z+u03nV7 3zlPhNnmx9Ds8VHfBZbM5t5Buu4dlzRVM0fcrcr03c9UddEnWHhWrqPgqxOCSoJk qe/0a/J/r6V/zza6MKnXXYkIU0LyV9QXL+0kLy4MO4nA6gwH8NbAMP5JlNtxgOGX QJtNvHAPZtAptxzP5zLXGbbbns89sm4GjTAzuSmK8Pu75vNmJ0pMtIuYbzHxPMOA 13RoyYLQxdBFrhYcoOoD5MzZ2aM0vwuyapGbMxC37+ZR3vQsLQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCr4CXTHTP/BBvIPcsdi7hFPNchxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjlhMzRiYmYtY2RjMC0z NTU1LWFmZDEtYzQ5Yjc4NjhhYTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBHrwKsXF825DuF+AbO8TRXQrfnz16gK048IVdFrMWzH5ICH+YP4ODT CGWQwqLiOZAxP/Y8mFoHfE/eCeTaSXbWXei9HRhcj59GnXuV/b8sXXc/aWBjOdAw Ai1JbbYDWf/mGYhb8eydDbzyOh/rzSwCpos0kF8d1nlwtCbzVzN/qnFWBlSWM/Ji o+VZSYA12Fh0qfQWG0JXNfQzCmowaE58mKM1vuLxxsM0ykkBjIoy3nad20qY3dUJ 6eiYgvaOcAAZ7UG3WRBG7V9ZuuKQRsxQ8/2aAxljT+DeMx2T8h+utdugUOm2CiXh KMNS2msEc0rwKVzfTV6NcVUPHaIRFOg2 -----END CERTIFICATE-----Generated at Sun May 11 05:31:56 2025 by rpki-client