$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbae136a-600c-3ec1-8570-5618e3baf9b7.roa File: dbae136a-600c-3ec1-8570-5618e3baf9b7.roa (raw, json) Hash identifier: siTpBhX/CpUknb6om/r9336qk06RRlmH0afoF5tAg+0= Subject key identifier: 3E:FB:FD:CF:1A:78:56:57:D2:73:64:2A:39:FC:2D:17:9F:FB:AC:A9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8B9309B92FCADA247BC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbae136a-600c-3ec1-8570-5618e3baf9b7.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 36631 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8b:93:09:b9:2f:ca:da:24:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=5e8092e4-681a-4bbd-bead-cb48adac1cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:73:59:d5:6d:d1:16:18:5b:e7:47:f1:7b:5d: 89:63:e5:c5:33:03:a6:fd:57:7e:8e:f2:03:51:9d: 6a:b0:f4:fd:ac:d6:4a:b7:9b:b4:67:10:3c:77:de: b7:0c:d9:5f:15:b4:51:55:5f:7a:22:d1:7d:a8:a0: ed:27:b7:d8:a2:15:3d:bd:ae:8b:be:b2:df:72:9f: d0:9a:fa:c6:79:ea:8a:15:78:f1:92:4a:15:a3:9a: 16:b5:f2:4c:52:a4:e2:aa:94:d0:06:6d:10:b3:2f: da:63:a5:b8:32:d2:41:1f:da:cd:69:f8:4c:c8:2a: 98:cf:96:f7:cb:af:c8:50:52:ae:da:8f:af:74:65: 9b:7f:f7:0e:bd:26:ad:5c:a3:70:f8:25:e1:60:c9: 22:2a:56:6d:34:38:81:9e:34:d5:da:70:8e:c8:e9: 9e:f0:db:7d:ac:ac:73:c7:9c:0f:1c:6a:9b:bf:ac: c2:02:48:56:42:ca:f6:9d:af:36:f8:03:11:72:2c: 5e:55:5f:53:b7:97:05:b1:60:7f:c8:ab:1e:6d:b4: 4f:f5:0a:7b:ec:e8:91:61:17:1b:78:90:fc:9d:8f: 85:68:e9:53:17:7d:ed:0e:74:c5:68:c6:dd:85:8f: 2e:06:d0:9d:96:5e:7f:6e:21:98:e2:7f:d3:32:46: 77:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FB:FD:CF:1A:78:56:57:D2:73:64:2A:39:FC:2D:17:9F:FB:AC:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbae136a-600c-3ec1-8570-5618e3baf9b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:4d:37:ae:ba:0f:21:72:22:21:91:75:6f:a1:d4:25:91:44: da:e2:71:5d:0f:18:46:95:5c:74:2b:86:16:47:80:1f:4e:4d: 73:5f:3f:6c:c0:b4:e0:2b:16:aa:29:ee:a5:2d:3d:47:b8:b3: 58:c1:2c:ac:4c:67:dc:fe:eb:c0:f9:d7:8d:a0:29:f5:b9:a4: df:ca:36:07:4e:21:bf:5a:ba:9f:be:d3:8d:10:ba:4b:ad:00: dd:1f:f8:cf:9e:69:b1:24:3d:01:e0:3c:f9:8d:d3:a1:83:a5: 06:a2:2c:01:f9:41:44:fb:45:bb:7a:26:39:a5:c9:69:dd:5e: 25:6b:1b:81:45:a6:f4:33:cd:39:3a:4d:50:a6:7c:6f:44:ae: 9f:d8:4d:08:8d:28:7f:3e:f8:60:0a:3a:b3:0a:30:54:52:7e: c7:40:c3:6a:2c:ab:ee:21:ca:5d:1e:d1:f9:54:0e:d6:b2:2e: df:0c:ae:74:5c:39:30:3d:68:ba:50:4d:1c:06:1b:e5:d8:02: 17:59:9f:30:6a:75:ea:10:6a:44:1c:60:dc:54:39:be:75:58: 61:ec:fd:de:04:11:e1:13:cf:4c:73:18:67:f4:93:88:b2:4e: b8:1b:f3:fd:bc:53:fd:f4:bd:02:01:d5:78:fa:a6:3f:59:aa: 5e:1e:e3:ce -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4uTCbkvytoke8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NWU4MDkyZTQtNjgxYS00YmJkLWJlYWQtY2I0OGFkYWMxY2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnNZ1W3RFhhb50fxe12JY+XFMwOm/Vd+jvID UZ1qsPT9rNZKt5u0ZxA8d963DNlfFbRRVV96ItF9qKDtJ7fYohU9va6LvrLfcp/Q mvrGeeqKFXjxkkoVo5oWtfJMUqTiqpTQBm0Qsy/aY6W4MtJBH9rNafhMyCqYz5b3 y6/IUFKu2o+vdGWbf/cOvSatXKNw+CXhYMkiKlZtNDiBnjTV2nCOyOme8Nt9rKxz x5wPHGqbv6zCAkhWQsr2na82+AMRcixeVV9Tt5cFsWB/yKsebbRP9Qp77OiRYRcb eJD8nY+FaOlTF33tDnTFaMbdhY8uBtCdll5/biGY4n/TMkZ39wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD77/c8aeFZX0nNkKjn8LRef+6ypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGJhZTEzNmEtNjAwYy0z ZWMxLTg1NzAtNTYxOGUzYmFmOWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBqTTeuug8hciIhkXVvodQlkUTa4nFdDxhGlVx0K4YWR4AfTk1zXz9s wLTgKxaqKe6lLT1HuLNYwSysTGfc/uvA+deNoCn1uaTfyjYHTiG/WrqfvtONELpL rQDdH/jPnmmxJD0B4Dz5jdOhg6UGoiwB+UFE+0W7eiY5pclp3V4laxuBRab0M805 Ok1QpnxvRK6f2E0IjSh/PvhgCjqzCjBUUn7HQMNqLKvuIcpdHtH5VA7Wsi7fDK50 XDkwPWi6UE0cBhvl2AIXWZ8wanXqEGpEHGDcVDm+dVhh7P3eBBHhE89Mcxhn9JOI sk64G/P9vFP99L0CAdV4+qY/WapeHuPO -----END CERTIFICATE-----Generated at Sun May 11 05:36:24 2025 by rpki-client