$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfc98d87-51b3-3316-896f-e0a483a854c6.roa File: dfc98d87-51b3-3316-896f-e0a483a854c6.roa (raw, json) Hash identifier: sXuZZL5CVhNWVM2/bHg5nTG8fxs2TJSv/rgb+SN7tqE= Subject key identifier: 9B:36:73:35:5C:2E:D8:99:49:DB:16:E4:F6:61:E9:BD:14:D9:3D:52 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F894BBB44889FE1669CC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfc98d87-51b3-3316-896f-e0a483a854c6.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 397198 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:89:4b:bb:44:88:9f:e1:66:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=ef3f88cd-8d84-4c8f-9df2-841dee9c38b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8b:a5:fd:31:64:01:84:ec:f9:bd:55:1a:c7: 91:11:03:00:f2:ef:13:ac:af:63:97:c5:04:b5:b8: 7c:9c:dc:07:36:4c:1a:94:4a:ef:ee:85:51:ae:db: 11:b6:50:dc:af:a0:81:30:18:1e:16:cd:8d:51:12: c1:ae:6a:4e:aa:34:48:7f:88:d7:8f:8f:37:f8:06: 45:1f:2c:df:5c:71:4c:dc:c0:ae:53:3c:dc:9f:50: 7e:2a:61:18:34:f8:da:04:6d:ef:d7:75:94:9e:3f: 0b:fc:ea:a5:bb:07:e1:08:24:5b:e4:cf:d9:f0:bf: 63:dd:a0:0b:be:78:25:bf:61:c2:80:c9:ac:57:6a: 76:3d:72:5b:85:cb:d9:85:63:84:23:4e:fc:cc:72: 24:f9:97:9b:32:9c:98:44:88:45:3c:22:0f:09:59: f7:5a:dd:bc:38:d6:ab:44:5b:c2:d1:64:d1:99:02: 1e:fd:96:1e:59:aa:ea:4d:4a:3c:ea:4c:cc:f9:4f: f8:09:e9:17:73:6f:bb:c1:76:7b:b2:ce:5c:7c:41: 94:bb:9e:a5:4f:27:0a:31:35:96:2c:90:b9:0c:d3: eb:36:eb:4f:5d:e3:44:f0:42:c4:72:c1:6f:93:71: 98:de:7e:e8:ac:a2:42:41:c6:bf:7d:87:c0:9a:ef: f1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:36:73:35:5C:2E:D8:99:49:DB:16:E4:F6:61:E9:BD:14:D9:3D:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfc98d87-51b3-3316-896f-e0a483a854c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:7d:30:79:80:1b:89:cb:df:b7:b9:4b:fa:84:80:c3:00:ba: 7a:71:93:15:e0:48:2a:4a:fe:75:65:3e:7c:38:4c:a0:9c:21: 17:4b:ea:01:7f:ed:e6:2d:b9:b2:ad:18:d9:44:1e:5d:f9:2b: 79:3f:d5:17:5b:58:3c:35:05:a9:92:b2:56:8e:eb:58:7c:26: 9e:c2:88:bb:e9:dd:dd:be:0d:4a:80:78:16:51:16:7d:4d:f0: 9a:3c:54:7a:ab:07:51:00:46:4c:fc:b6:7b:ff:2f:5a:f0:5c: 72:12:a1:4b:61:b5:61:3f:12:70:8b:b9:a5:38:25:58:4d:10: fe:27:ca:b6:fb:15:29:be:b6:86:68:7a:08:1e:c2:cd:85:71: c8:5a:b2:44:a9:3b:28:c3:bc:3d:fc:d7:0d:13:4f:df:85:d5: fd:47:68:5d:5d:29:52:44:72:a4:f1:ac:ec:ce:91:9d:4c:88: 71:bb:fc:64:d3:43:80:75:a5:67:7b:08:3b:76:3e:85:21:1d: b4:bd:ae:ff:2d:0e:b0:5c:62:6b:f3:51:79:1f:f0:1a:4b:7a: d6:5c:68:66:15:a1:0a:0d:7b:09:f9:59:de:b7:58:e7:f5:30: 8f:33:88:1c:51:74:16:d9:72:9d:7a:da:22:eb:51:c7:fa:d5: 98:29:7f:7f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4lLu0SIn+FmnMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZWYzZjg4Y2QtOGQ4NC00YzhmLTlkZjItODQxZGVlOWMzOGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoul/TFkAYTs+b1VGseREQMA8u8TrK9jl8UE tbh8nNwHNkwalErv7oVRrtsRtlDcr6CBMBgeFs2NURLBrmpOqjRIf4jXj483+AZF HyzfXHFM3MCuUzzcn1B+KmEYNPjaBG3v13WUnj8L/OqluwfhCCRb5M/Z8L9j3aAL vnglv2HCgMmsV2p2PXJbhcvZhWOEI078zHIk+ZebMpyYRIhFPCIPCVn3Wt28ONar RFvC0WTRmQIe/ZYeWarqTUo86kzM+U/4CekXc2+7wXZ7ss5cfEGUu56lTycKMTWW LJC5DNPrNutPXeNE8ELEcsFvk3GY3n7orKJCQca/fYfAmu/x2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJs2czVcLtiZSdsW5PZh6b0U2T1SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGZjOThkODctNTFiMy0z MzE2LTg5NmYtZTBhNDgzYTg1NGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAmfTB5gBuJy9+3uUv6hIDDALp6cZMV4EgqSv51ZT58OEygnCEXS+oB f+3mLbmyrRjZRB5d+St5P9UXW1g8NQWpkrJWjutYfCaewoi76d3dvg1KgHgWURZ9 TfCaPFR6qwdRAEZM/LZ7/y9a8FxyEqFLYbVhPxJwi7mlOCVYTRD+J8q2+xUpvraG aHoIHsLNhXHIWrJEqTsow7w9/NcNE0/fhdX9R2hdXSlSRHKk8azszpGdTIhxu/xk 00OAdaVnewg7dj6FIR20va7/LQ6wXGJr81F5H/AaS3rWXGhmFaEKDXsJ+Vnet1jn 9TCPM4gcUXQW2XKdetoi61HH+tWYKX9/ -----END CERTIFICATE-----Generated at Sun May 11 06:16:19 2025 by rpki-client