$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c623fae8-7503-32fc-a7ef-4a85ebe4eef5.roa File: c623fae8-7503-32fc-a7ef-4a85ebe4eef5.roa (raw, json) Hash identifier: ujdIGZQ1yJbBXEX9X0zKuk6NK/wBhObnFWCewhMEheM= Subject key identifier: DD:DF:7D:8A:D0:A1:69:A8:71:07:DD:5D:4E:3C:76:B8:68:54:12:BA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8A62EA038D72FE0EA380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c623fae8-7503-32fc-a7ef-4a85ebe4eef5.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 36626 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8a:62:ea:03:8d:72:fe:0e:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=25c7e48d-7cd2-497c-b641-cfe6fe81e65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b1:2a:7a:56:73:42:56:6d:65:9d:b3:a4:22: 96:db:6a:bd:86:31:e4:d1:7d:85:1a:ba:fe:f7:d3: be:9d:98:33:53:cd:ea:fa:df:de:0c:bf:c2:40:8a: 90:96:8f:fd:7a:08:3c:5a:87:3a:57:01:5d:c2:27: d6:63:d3:97:ed:60:85:5c:8a:40:02:dc:43:78:52: 4a:f8:22:00:e1:32:e0:4d:dd:09:cf:4c:12:6d:f1: c8:e7:f5:4e:f2:3b:d9:4b:dd:cf:82:ef:96:1c:25: b1:3d:ba:3d:08:12:af:ae:71:fa:7b:c7:89:10:0f: b4:5a:bb:d3:74:71:f5:18:5a:33:a8:32:05:75:86: 8d:01:87:54:02:13:d8:64:d9:bf:6b:ba:2e:81:ea: 64:41:79:25:52:79:b4:8b:62:60:8c:a7:79:0c:52: 88:5c:5d:d4:b1:07:af:0b:2b:98:c5:ac:fd:bd:c0: 34:47:d0:f3:e9:b6:82:28:62:80:8d:41:9a:e6:12: 6b:c4:12:cc:01:e4:46:dd:15:27:96:d1:3b:8a:f8: ad:ef:4a:61:18:5a:47:c3:65:d8:1e:c9:2c:29:67: 67:7f:88:44:a0:e9:c7:64:82:5f:6e:20:16:e1:38: 0e:7c:90:c3:d0:6c:1a:48:e6:19:6e:66:87:82:b5: 6f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DF:7D:8A:D0:A1:69:A8:71:07:DD:5D:4E:3C:76:B8:68:54:12:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c623fae8-7503-32fc-a7ef-4a85ebe4eef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:25:3c:a7:24:d6:de:ae:7a:e7:89:1f:66:ce:da:cd:a2:27: 56:0f:36:f8:24:ee:ef:cc:2e:67:f3:c2:f6:57:c8:bf:e8:00: 98:93:26:64:cd:ea:e7:2c:3d:ae:ac:6c:d8:2f:c2:c0:d1:0a: 52:48:0b:db:de:0a:04:eb:99:2e:26:a7:ac:04:f6:c9:89:08: da:dc:60:02:9b:a7:3b:51:1c:92:4a:31:92:d3:43:db:e7:fa: 00:3c:97:5c:67:80:6a:1c:53:d0:a4:e6:c7:9b:f2:f5:39:af: 57:9f:d6:1a:62:3c:21:d2:71:97:a4:d3:bd:70:af:92:84:29: bc:70:da:2f:ac:3b:f5:e3:ab:cc:88:7d:95:58:89:e2:53:fc: 95:f6:d3:ef:cc:7c:9a:85:b2:f9:08:d6:b4:4d:44:eb:ae:85: 19:6d:05:bc:a5:97:55:6a:6e:7a:09:f1:a7:d7:0a:38:2f:18: 22:18:9c:d3:a4:a2:e7:54:02:1e:08:47:08:d1:12:12:67:69: a0:2c:b0:78:22:81:d5:f5:65:f5:78:bf:2c:aa:08:8f:22:bc: 28:84:90:8b:ec:49:a0:4f:cb:2c:8d:53:e5:19:62:2f:7f:7f: 37:bc:1c:b6:7b:db:b7:f4:9a:de:84:3a:16:11:f9:03:d0:36: ba:60:b1:e6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4pi6gONcv4Oo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MjVjN2U0OGQtN2NkMi00OTdjLWI2NDEtY2ZlNmZlODFlNjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrEqelZzQlZtZZ2zpCKW22q9hjHk0X2FGrr+ 99O+nZgzU83q+t/eDL/CQIqQlo/9egg8Woc6VwFdwifWY9OX7WCFXIpAAtxDeFJK +CIA4TLgTd0Jz0wSbfHI5/VO8jvZS93Pgu+WHCWxPbo9CBKvrnH6e8eJEA+0WrvT dHH1GFozqDIFdYaNAYdUAhPYZNm/a7ougepkQXklUnm0i2JgjKd5DFKIXF3UsQev CyuYxaz9vcA0R9Dz6baCKGKAjUGa5hJrxBLMAeRG3RUnltE7ivit70phGFpHw2XY HsksKWdnf4hEoOnHZIJfbiAW4TgOfJDD0GwaSOYZbmaHgrVvgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN3ffYrQoWmocQfdXU48drhoVBK6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzYyM2ZhZTgtNzUwMy0z MmZjLWE3ZWYtNGE4NWViZTRlZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCPJTynJNbernrniR9mztrNoidWDzb4JO7vzC5n88L2V8i/6ACYkyZk zernLD2urGzYL8LA0QpSSAvb3goE65kuJqesBPbJiQja3GACm6c7URySSjGS00Pb 5/oAPJdcZ4BqHFPQpObHm/L1Oa9Xn9YaYjwh0nGXpNO9cK+ShCm8cNovrDv146vM iH2VWIniU/yV9tPvzHyahbL5CNa0TUTrroUZbQW8pZdVam56CfGn1wo4LxgiGJzT pKLnVAIeCEcI0RISZ2mgLLB4IoHV9WX1eL8sqgiPIrwohJCL7EmgT8ssjVPlGWIv f383vBy2e9u39JrehDoWEfkD0Da6YLHm -----END CERTIFICATE-----Generated at Sun May 11 05:30:36 2025 by rpki-client