$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1f5c6e0-e080-3525-9b04-a30603f376ef.roa File: d1f5c6e0-e080-3525-9b04-a30603f376ef.roa (raw, json) Hash identifier: ErbAYokRCmmKIMiMNFAOF5Fj18+FzdaOVwTwO7F443Y= Subject key identifier: D2:AA:30:7E:58:4E:32:A0:84:9F:4D:56:77:A4:29:83:DD:3E:EC:75 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8BF52BA8930F403E9100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1f5c6e0-e080-3525-9b04-a30603f376ef.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396586 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8b:f5:2b:a8:93:0f:40:3e:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=37971075-57df-481a-83a6-b7f6f49067dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b7:8a:30:99:e0:27:a3:a9:f3:d1:97:97:6d: 5a:88:59:5f:ea:b6:f1:1d:95:cc:a5:c6:b1:4f:a6: 42:da:6f:08:ca:55:a0:fc:3f:88:95:40:c0:40:96: 77:5e:c9:ca:64:93:0b:05:ae:d9:5d:c5:47:0b:02: 2b:ed:f6:90:da:8a:1c:93:41:f5:8d:88:96:9a:66: 6f:09:3b:c3:87:d8:6c:13:d3:a0:2a:8c:64:85:6d: 0d:dd:43:f4:8d:d2:cc:ac:c4:a9:b6:d7:b5:ec:f0: a7:d5:b1:30:c8:19:fa:40:72:60:15:38:f3:3c:af: c6:04:2e:0c:30:74:72:69:20:e0:93:92:ca:fc:30: 55:65:5c:24:74:d8:ae:9a:29:4d:99:5f:cb:db:56: b0:2d:26:be:10:85:cf:4f:6f:5c:e4:7f:65:88:33: 08:58:ee:12:8e:0f:22:5c:47:ed:25:b0:eb:9a:b0: 0a:8e:ef:43:49:99:4e:86:45:47:f8:4c:ff:25:7b: d9:fb:db:47:62:30:79:bf:e6:c0:db:d2:cd:2f:11: 48:6f:b9:62:c0:5b:b7:76:65:ba:23:40:35:28:94: fb:04:46:25:ec:bf:f8:f3:53:83:66:8a:ff:e1:a8: 6c:10:90:64:d3:8c:bb:6f:07:43:0a:75:b8:a2:9b: c1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AA:30:7E:58:4E:32:A0:84:9F:4D:56:77:A4:29:83:DD:3E:EC:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1f5c6e0-e080-3525-9b04-a30603f376ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:20:37:0b:ba:95:dd:5e:65:94:32:5d:a1:83:89:86:e4:2c: f8:1f:d2:5c:57:e3:f6:b6:88:1b:f7:1c:fe:31:5f:d4:2b:ae: 6e:80:fb:cf:6e:19:44:0d:8d:19:9b:09:e6:16:eb:fb:66:4c: fe:46:3d:de:e2:76:2e:5c:3e:0a:ae:75:69:fb:0f:95:42:1a: 92:ed:54:fc:62:12:ac:25:fc:e9:96:a6:14:43:7c:23:6e:e2: 43:a0:61:42:74:f4:4f:84:52:e9:fc:82:1f:85:a9:c5:c3:78: e5:af:ce:6c:cd:e3:04:42:5f:e4:2a:12:9b:14:4c:23:7f:9d: 6e:7a:96:83:6a:81:cc:5e:b2:af:42:81:7d:df:dd:42:ba:5a: ff:c0:cf:84:19:d7:86:33:a8:bf:9d:b1:2b:1f:72:47:c1:99: 0c:3a:b4:92:a9:97:7a:cf:0a:ed:85:9f:8e:00:53:ec:d5:63: c9:50:88:e6:99:a4:a4:3e:40:2a:66:67:5c:c2:4e:55:85:e8: ba:74:4b:ea:aa:2b:80:dc:2b:4b:df:42:63:7a:bb:14:1a:74: 64:70:39:9c:5b:25:38:5c:7e:89:e7:76:de:a7:3c:9d:a9:33: 43:1d:77:76:e2:fc:d0:ca:1f:0a:78:d1:7b:37:d4:b2:f1:23: 2e:7f:f8:3e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4v1K6iTD0A+kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk Mzc5NzEwNzUtNTdkZi00ODFhLTgzYTYtYjdmNmY0OTA2N2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47eKMJngJ6Op89GXl21aiFlf6rbxHZXMpcax T6ZC2m8IylWg/D+IlUDAQJZ3XsnKZJMLBa7ZXcVHCwIr7faQ2oock0H1jYiWmmZv CTvDh9hsE9OgKoxkhW0N3UP0jdLMrMSptte17PCn1bEwyBn6QHJgFTjzPK/GBC4M MHRyaSDgk5LK/DBVZVwkdNiumilNmV/L21awLSa+EIXPT29c5H9liDMIWO4Sjg8i XEftJbDrmrAKju9DSZlOhkVH+Ez/JXvZ+9tHYjB5v+bA29LNLxFIb7liwFu3dmW6 I0A1KJT7BEYl7L/481ODZor/4ahsEJBk04y7bwdDCnW4opvBJQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNKqMH5YTjKghJ9NVnekKYPdPux1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDFmNWM2ZTAtZTA4MC0z NTI1LTliMDQtYTMwNjAzZjM3NmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQACIDcLupXdXmWUMl2hg4mG5Cz4H9JcV+P2togb9xz+MV/UK65ugPvP bhlEDY0ZmwnmFuv7Zkz+Rj3e4nYuXD4KrnVp+w+VQhqS7VT8YhKsJfzplqYUQ3wj buJDoGFCdPRPhFLp/IIfhanFw3jlr85szeMEQl/kKhKbFEwjf51uepaDaoHMXrKv QoF9391Culr/wM+EGdeGM6i/nbErH3JHwZkMOrSSqZd6zwrthZ+OAFPs1WPJUIjm maSkPkAqZmdcwk5Vhei6dEvqqiuA3CtL30JjersUGnRkcDmcWyU4XH6J53bepzyd qTNDHXd24vzQyh8KeNF7N9Sy8SMuf/g+ -----END CERTIFICATE-----Generated at Sun May 11 08:35:28 2025 by rpki-client