$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d020b984-10d1-399a-87b5-943c430128fe.roa File: d020b984-10d1-399a-87b5-943c430128fe.roa (raw, json) Hash identifier: gsd2FsHoIAD0d/FUSDHlQq8m0/3rfY33m4/ZeebDV1I= Subject key identifier: 1C:7B:FD:08:8F:DD:C0:F8:C6:4B:8F:11:EF:3A:93:46:F8:0D:AD:9B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8443B1032D48FE293300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d020b984-10d1-399a-87b5-943c430128fe.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396552 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:84:43:b1:03:2d:48:fe:29:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=cad6a7d2-8c0d-4eaf-a07d-f3c8e1681954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:09:a0:d2:6f:15:51:d7:96:62:06:e6:08:02: 45:76:9a:ba:c0:c3:51:be:9b:13:a7:03:02:05:ca: 60:ce:44:53:ff:06:a4:3c:94:a0:7d:cb:19:9b:a5: dd:e6:62:49:70:1b:47:b6:ac:ab:52:a0:2a:ee:13: f2:c3:5d:a7:6b:60:3e:d0:bd:d1:16:8f:40:38:9a: 55:6e:bd:20:ad:42:5e:af:42:57:c9:5c:60:25:17: d7:02:50:64:e6:af:34:e7:d9:f1:e4:80:28:79:c6: 24:bf:d3:5b:a4:ec:3f:4a:d4:07:cb:3a:50:47:bd: ce:97:51:67:51:48:fd:a3:3b:55:66:5e:30:84:17: 69:f3:72:2c:a2:8e:1f:a7:17:aa:97:3e:e8:22:63: 09:e5:b4:5b:39:89:f4:dc:54:94:b1:6b:92:ac:70: 2c:00:2e:8a:66:9f:7d:e6:cc:05:e4:2d:c7:9b:bd: 4f:61:98:0b:b4:72:01:0e:5a:3b:52:49:44:5c:bd: d3:06:2f:85:64:26:ad:a9:22:98:b7:16:82:31:6a: a1:c8:55:1d:3e:7a:35:4e:3d:76:73:0b:2e:ae:a3: b1:44:7a:fc:a9:47:e3:88:c8:e0:ed:1c:26:ac:55: 50:95:cc:b7:9c:2c:fb:66:2b:59:b0:52:64:0e:10: f1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7B:FD:08:8F:DD:C0:F8:C6:4B:8F:11:EF:3A:93:46:F8:0D:AD:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d020b984-10d1-399a-87b5-943c430128fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c9:7f:24:c6:9a:f3:89:56:26:13:00:d1:57:a4:f7:48:c8: 4f:32:7e:e2:8e:e2:25:1b:2e:0f:2b:41:19:fc:78:82:a5:c9: 23:88:6b:d7:3f:66:48:2c:8b:fe:a6:4b:0f:6b:fb:85:56:b3: e8:54:14:08:35:41:85:ac:17:87:e2:7c:d3:26:e8:d9:32:db: 48:23:c2:af:6e:b7:a1:d9:3d:45:be:d2:c4:41:9e:7f:91:f7: f6:44:5f:8f:48:43:31:ff:3c:36:7c:12:1e:24:86:44:fe:86: 4d:bb:d6:7c:5b:27:32:b6:47:c6:ae:92:31:cc:a8:c9:4e:68: 47:b7:6a:0e:de:bf:09:bd:1a:8b:e9:02:7f:7c:cc:99:db:c5: ed:f1:92:1e:fc:10:72:a7:14:94:d3:41:7e:b6:3a:a2:5f:a9: e0:54:84:17:19:3c:53:b2:56:b7:8f:27:95:e6:ea:fa:47:20: 60:57:d8:95:cd:ee:95:7d:f5:d1:2c:64:5d:e7:ef:4e:0b:24: 85:e2:30:55:9f:16:1d:b8:57:27:b5:35:a4:68:47:e8:75:44: ee:1c:58:9f:0e:43:51:29:42:f1:52:9f:7f:24:12:6a:37:1f: 3f:19:88:2f:12:ae:c5:0b:9b:b2:50:7b:32:8f:3d:2f:b8:2a: 9a:1c:2a:e6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4RDsQMtSP4pMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk Y2FkNmE3ZDItOGMwZC00ZWFmLWEwN2QtZjNjOGUxNjgxOTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwmg0m8VUdeWYgbmCAJFdpq6wMNRvpsTpwMC BcpgzkRT/wakPJSgfcsZm6Xd5mJJcBtHtqyrUqAq7hPyw12na2A+0L3RFo9AOJpV br0grUJer0JXyVxgJRfXAlBk5q8059nx5IAoecYkv9NbpOw/StQHyzpQR73Ol1Fn UUj9oztVZl4whBdp83Isoo4fpxeqlz7oImMJ5bRbOYn03FSUsWuSrHAsAC6KZp99 5swF5C3Hm71PYZgLtHIBDlo7UklEXL3TBi+FZCatqSKYtxaCMWqhyFUdPno1Tj12 cwsurqOxRHr8qUfjiMjg7RwmrFVQlcy3nCz7ZitZsFJkDhDxfQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBx7/QiP3cD4xkuPEe86k0b4Da2bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDAyMGI5ODQtMTBkMS0z OTlhLTg3YjUtOTQzYzQzMDEyOGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANyX8kxprziVYmEwDRV6T3SMhPMn7ijuIlGy4PK0EZ/HiCpckjiGvX P2ZILIv+pksPa/uFVrPoVBQINUGFrBeH4nzTJujZMttII8Kvbreh2T1FvtLEQZ5/ kff2RF+PSEMx/zw2fBIeJIZE/oZNu9Z8WycytkfGrpIxzKjJTmhHt2oO3r8JvRqL 6QJ/fMyZ28Xt8ZIe/BBypxSU00F+tjqiX6ngVIQXGTxTsla3jyeV5ur6RyBgV9iV ze6VffXRLGRd5+9OCySF4jBVnxYduFcntTWkaEfodUTuHFifDkNRKULxUp9/JBJq Nx8/GYgvEq7FC5uyUHsyjz0vuCqaHCrm -----END CERTIFICATE-----Generated at Sun May 11 08:47:45 2025 by rpki-client