$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e09b631f-1eaa-36c6-9856-54d82485ac05.roa File: e09b631f-1eaa-36c6-9856-54d82485ac05.roa (raw, json) Hash identifier: F6rowdddEQNUhvDpTLtYqxHUYGOka3mwSEx4KNy4W/8= Subject key identifier: 6A:B9:2E:03:6F:13:22:3F:DC:B7:B1:D6:C0:76:C7:93:89:6D:33:0B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F83AF2E6A726168418200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e09b631f-1eaa-36c6-9856-54d82485ac05.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396610 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:83:af:2e:6a:72:61:68:41:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=4b37f817-24b5-44ca-9a17-fbefb22b6a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:74:94:1d:42:91:5e:4f:70:44:eb:9a:6b:91: 60:d2:4d:50:3e:4a:b1:d2:0f:0a:3c:ed:5e:75:32: 46:cc:51:2c:1f:bf:da:73:a7:51:84:2b:76:16:9b: 50:ae:7f:3c:9a:44:28:e0:be:6d:80:a9:d0:f4:ef: 8e:50:d9:ed:17:ff:a2:4c:8d:54:68:84:3a:91:74: d4:ed:0c:d9:0c:a8:39:da:ad:75:12:67:61:2c:0d: 31:76:7e:05:a0:86:6f:16:69:f8:df:90:e8:f9:0f: 02:38:c1:ad:6b:39:f6:30:bc:21:49:01:71:55:cf: e9:01:87:a7:ef:4e:5b:63:78:48:1c:d8:1f:e6:1d: 15:19:d2:5d:e8:9b:38:96:f2:c2:2e:35:87:d7:ca: 16:5e:91:58:c7:53:a4:39:58:81:2f:0c:1f:95:22: 89:bd:c0:fc:30:26:b0:ff:ff:9f:2c:f0:c6:ef:32: 22:c1:82:d5:85:b8:be:12:47:ad:b1:e7:7d:d3:79: a2:c0:e5:6a:aa:d0:9d:50:ef:ba:1e:59:0c:6a:35: 32:41:e6:b8:f6:04:49:69:57:92:55:88:d5:66:df: cf:7f:96:87:36:84:06:82:c1:9f:2b:97:10:97:d2: 9c:1b:96:2a:95:7c:4b:8f:d8:9f:b0:a8:50:d6:24: 93:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B9:2E:03:6F:13:22:3F:DC:B7:B1:D6:C0:76:C7:93:89:6D:33:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e09b631f-1eaa-36c6-9856-54d82485ac05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:da:88:bc:3c:45:e8:46:30:7b:b8:b6:cd:a3:65:90:45:14: 3d:86:72:25:f5:f1:ac:46:c5:d7:d3:3a:58:c2:92:51:d5:72: f7:ac:69:3e:38:37:a6:dc:1f:bf:e1:de:0c:69:2f:a7:5d:59: 2a:0b:c5:be:d7:48:0f:1a:31:de:67:24:71:c8:b9:a1:15:0b: 09:a1:cd:0e:cd:a4:d0:3c:74:d5:33:2a:b0:d7:31:a7:d3:64: 64:96:ad:5c:65:43:33:00:ff:ed:dc:18:27:6e:49:b9:9c:8b: 78:6b:92:42:3a:f1:4d:23:97:b0:52:a5:2f:b0:ac:1a:c3:61: f2:b6:69:49:6a:fd:90:12:ff:ed:d0:6b:d1:c7:cf:a2:1d:ad: 78:e8:06:cb:16:d4:32:0f:83:2e:3b:9b:86:22:b5:87:c9:09: 1a:ce:4e:db:fc:38:6a:97:84:79:fc:11:9b:5a:ea:68:07:fb: a8:e0:d8:30:86:03:9e:8a:82:56:4a:32:9d:69:42:ba:79:04: f1:c1:aa:94:40:5b:94:6f:3d:1b:b8:0d:c8:4d:8c:af:bf:52: 7b:9c:fd:91:28:b7:a1:b8:c0:d9:95:ce:bc:05:7c:c0:de:c6: 3d:e9:95:ac:11:8f:b9:ae:12:54:5c:b0:d0:9e:ee:53:a1:6a: 46:1d:f2:5e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4OvLmpyYWhBggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NGIzN2Y4MTctMjRiNS00NGNhLTlhMTctZmJlZmIyMmI2YTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnSUHUKRXk9wROuaa5Fg0k1QPkqx0g8KPO1e dTJGzFEsH7/ac6dRhCt2FptQrn88mkQo4L5tgKnQ9O+OUNntF/+iTI1UaIQ6kXTU 7QzZDKg52q11EmdhLA0xdn4FoIZvFmn435Do+Q8COMGtazn2MLwhSQFxVc/pAYen 705bY3hIHNgf5h0VGdJd6Js4lvLCLjWH18oWXpFYx1OkOViBLwwflSKJvcD8MCaw //+fLPDG7zIiwYLVhbi+Eketsed903miwOVqqtCdUO+6HlkMajUyQea49gRJaVeS VYjVZt/Pf5aHNoQGgsGfK5cQl9KcG5YqlXxLj9ifsKhQ1iSTYQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGq5LgNvEyI/3Lex1sB2x5OJbTMLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTA5YjYzMWYtMWVhYS0z NmM2LTk4NTYtNTRkODI0ODVhYzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAg2oi8PEXoRjB7uLbNo2WQRRQ9hnIl9fGsRsXX0zpYwpJR1XL3rGk+ ODem3B+/4d4MaS+nXVkqC8W+10gPGjHeZyRxyLmhFQsJoc0OzaTQPHTVMyqw1zGn 02Rklq1cZUMzAP/t3Bgnbkm5nIt4a5JCOvFNI5ewUqUvsKwaw2HytmlJav2QEv/t 0GvRx8+iHa146AbLFtQyD4MuO5uGIrWHyQkazk7b/Dhql4R5/BGbWupoB/uo4Ngw hgOeioJWSjKdaUK6eQTxwaqUQFuUbz0buA3ITYyvv1J7nP2RKLehuMDZlc68BXzA 3sY96ZWsEY+5rhJUXLDQnu5ToWpGHfJe -----END CERTIFICATE-----Generated at Sun May 11 08:26:21 2025 by rpki-client