$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb7ee69d-0a31-3e6e-bf33-6dad755b808e.roa File: cb7ee69d-0a31-3e6e-bf33-6dad755b808e.roa (raw, json) Hash identifier: TeA701RliscBn9iLE3surTyp77qwTaXddGP/3oubLTg= Subject key identifier: B4:44:EE:D4:96:C0:B1:29:26:72:C8:6A:CB:FB:8B:7D:16:EB:CB:9B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8913ECAC0F885C18E980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb7ee69d-0a31-3e6e-bf33-6dad755b808e.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396559 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:89:13:ec:ac:0f:88:5c:18:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=94421d98-41d1-4589-9511-1bd6c5ea4f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d7:59:62:46:e4:12:59:c8:32:bc:9e:58:1a: ec:9c:15:4a:d6:d4:49:1f:b8:71:08:b5:c0:43:dc: 08:d0:8c:4a:e6:1b:52:1e:ea:13:1e:54:be:67:5a: 4e:1c:0d:bf:37:24:bd:2e:53:25:ba:48:57:4d:12: 05:ee:bc:d7:89:74:62:92:5f:36:a7:fb:a3:24:6c: 79:a9:3d:89:2d:9a:e1:a1:cc:29:15:04:c2:76:1d: 59:4e:d8:30:83:8c:99:07:58:7b:35:e4:fe:60:86: 34:d5:8d:2a:37:0a:b8:b7:a2:fa:ac:4e:a2:09:6a: 75:81:d1:69:78:28:3f:cd:2a:7a:14:d5:0a:d4:ed: 9f:a9:fc:83:bc:16:41:18:00:50:8d:6e:3f:78:7d: bf:9a:2b:3c:e8:3c:52:cb:3f:26:8c:a6:6c:13:21: e1:cc:59:e9:e0:c7:e0:6b:2b:19:83:d5:20:54:b2: 92:fa:a4:5c:57:e8:c4:7e:b0:aa:a2:92:a7:c2:d8: 82:da:8d:b1:96:da:be:2d:88:9d:6d:22:f1:d2:f7: 06:7b:85:4a:6a:b4:4b:a1:0b:33:0d:e7:cc:ff:f9: ac:62:4d:a4:8b:3f:51:74:a4:3b:3c:6c:b6:f2:2e: 67:f7:c8:89:c9:59:9d:9b:68:d5:1e:13:27:f7:5c: 16:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:44:EE:D4:96:C0:B1:29:26:72:C8:6A:CB:FB:8B:7D:16:EB:CB:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb7ee69d-0a31-3e6e-bf33-6dad755b808e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:fb:62:5c:ae:c3:94:ad:28:f3:8f:c0:8e:35:ea:67:24:3a: 6c:37:ef:e8:60:4d:05:63:0d:b3:57:c5:06:82:ec:93:60:fc: e5:19:46:cb:04:df:42:2e:70:73:9d:dd:d3:ad:c9:72:a2:ad: f8:d6:ce:01:e8:11:7d:83:6b:ee:87:e8:5d:cc:98:7b:35:a1: 2c:e2:65:66:c0:58:a8:a7:2b:93:f1:7d:97:bf:cb:31:b0:97: 76:50:cb:00:0e:1b:02:7e:f1:90:35:0d:12:78:33:95:8c:dc: fe:e4:e6:82:aa:21:3c:af:b0:ce:fc:51:f3:46:d6:49:79:7e: 7f:34:58:0a:0f:fc:bf:78:22:79:49:5e:52:fd:cc:0a:e2:22: 3c:6c:48:b6:5d:e3:7b:fe:b3:4d:96:f7:ef:85:b1:7e:53:72: ee:bd:9d:4c:ab:4a:52:7b:ae:90:90:75:f2:d1:b0:a4:f1:a3: 58:82:f4:72:8f:e2:0f:3e:a9:3a:2f:28:4d:b1:10:93:9a:13: ac:35:d4:b3:d3:d4:4f:4a:c2:04:72:97:e5:09:f6:3f:d2:e5: 6a:e3:f0:00:50:f1:a2:35:d0:44:59:80:9c:59:c5:61:ce:70: e5:d9:bc:b5:96:b5:a5:ce:ea:89:11:ba:fe:ce:b4:6e:e2:12: 71:39:a8:11 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4kT7KwPiFwY6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk OTQ0MjFkOTgtNDFkMS00NTg5LTk1MTEtMWJkNmM1ZWE0ZjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztdZYkbkElnIMryeWBrsnBVK1tRJH7hxCLXA Q9wI0IxK5htSHuoTHlS+Z1pOHA2/NyS9LlMlukhXTRIF7rzXiXRikl82p/ujJGx5 qT2JLZrhocwpFQTCdh1ZTtgwg4yZB1h7NeT+YIY01Y0qNwq4t6L6rE6iCWp1gdFp eCg/zSp6FNUK1O2fqfyDvBZBGABQjW4/eH2/mis86DxSyz8mjKZsEyHhzFnp4Mfg aysZg9UgVLKS+qRcV+jEfrCqopKnwtiC2o2xltq+LYidbSLx0vcGe4VKarRLoQsz DefM//msYk2kiz9RdKQ7PGy28i5n98iJyVmdm2jVHhMn91wWrwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLRE7tSWwLEpJnLIasv7i30W68ubMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2I3ZWU2OWQtMGEzMS0z ZTZlLWJmMzMtNmRhZDc1NWI4MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBd+2JcrsOUrSjzj8CONepnJDpsN+/oYE0FYw2zV8UGguyTYPzlGUbL BN9CLnBznd3Trclyoq341s4B6BF9g2vuh+hdzJh7NaEs4mVmwFiopyuT8X2Xv8sx sJd2UMsADhsCfvGQNQ0SeDOVjNz+5OaCqiE8r7DO/FHzRtZJeX5/NFgKD/y/eCJ5 SV5S/cwK4iI8bEi2XeN7/rNNlvfvhbF+U3LuvZ1Mq0pSe66QkHXy0bCk8aNYgvRy j+IPPqk6LyhNsRCTmhOsNdSz09RPSsIEcpflCfY/0uVq4/AAUPGiNdBEWYCcWcVh znDl2by1lrWlzuqJEbr+zrRu4hJxOagR -----END CERTIFICATE-----Generated at Sun May 11 05:36:35 2025 by rpki-client