$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e19a749e-8790-3947-ad2c-4ec35be10798.roa File: e19a749e-8790-3947-ad2c-4ec35be10798.roa (raw, json) Hash identifier: L6bbFY1aG00wRFwBq/89ePjNY+PNYYaSmlwmj5UAZn0= Subject key identifier: 88:A3:54:6B:DB:D2:A5:1A:C9:85:2A:D2:CC:9E:FF:A3:D7:D2:6F:3E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F851C85F11CD3345523F0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e19a749e-8790-3947-ad2c-4ec35be10798.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396576 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:85:1c:85:f1:1c:d3:34:55:23:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=bf9a4f30-ed84-47f4-bf66-75a5e51a23ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:ce:6e:6a:3e:d8:41:46:73:bd:12:dd:67: 26:2b:9a:4c:ff:eb:8f:99:4d:3d:bc:ad:1d:ca:35: 94:32:a7:57:39:cc:6c:8b:95:66:c5:99:75:7c:08: 04:f8:3f:57:4a:9d:18:c8:e5:4e:3f:06:29:ac:02: 66:e2:1b:25:ab:d5:2c:05:1b:ee:3f:f1:24:b3:78: d5:d9:49:b8:4e:fb:e4:ba:60:82:6d:0e:06:09:21: 2f:18:66:d6:73:1a:30:93:98:75:ef:60:af:c9:69: 93:d8:0b:94:03:81:58:71:83:54:99:c2:8b:54:3c: 2d:5c:10:61:d3:f3:cc:20:c0:c4:69:39:5d:54:69: 28:5c:d5:2d:ef:e3:99:6e:76:37:26:ae:e6:cc:41: dc:49:0c:f2:79:16:97:f6:2c:bb:a6:d2:2d:66:9b: 06:2d:1d:6c:09:0c:b0:ec:ae:9f:7e:d1:2f:54:ac: 38:62:1e:80:13:21:40:21:25:a3:fa:af:de:7e:16: 93:24:af:e2:5c:6b:3d:38:1a:e2:f5:50:02:29:de: 7b:e2:9c:4d:1c:7e:58:ba:72:b3:fc:e3:a4:3d:e6: 9e:ab:8f:73:98:46:b9:2e:b3:90:d5:1b:00:90:4b: fe:06:df:02:e6:1c:f7:b4:f7:86:ff:8d:35:a1:4e: 27:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A3:54:6B:DB:D2:A5:1A:C9:85:2A:D2:CC:9E:FF:A3:D7:D2:6F:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e19a749e-8790-3947-ad2c-4ec35be10798.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:6f:a0:3e:68:e4:5a:00:4e:3c:19:a0:7c:db:3f:54:61:6f: 66:71:fa:5d:d6:94:92:95:ca:c2:f9:42:66:14:c5:5f:dd:52: 94:a2:c6:39:5d:4c:37:e2:35:f7:f4:4f:2b:bd:fb:37:0e:f0: 5b:7c:0e:9a:f3:d5:b7:0d:e0:f0:70:d8:bc:02:35:9b:39:a4: 0c:b7:82:1d:18:fd:39:a1:de:09:a9:8a:b2:c7:dc:0f:65:62: 64:e9:06:f5:28:0b:10:b5:51:09:7e:5f:4b:99:08:1c:30:14: 72:bb:f5:9f:db:3a:3f:9c:3e:4b:5b:e5:34:37:06:b5:eb:81: ed:56:4e:46:2a:10:e9:81:d2:a1:c8:38:d7:cc:58:06:ff:5c: 6e:a6:3a:f9:6c:5c:64:91:8e:c1:ea:5f:e2:bf:9c:3d:ff:d2: 5c:82:77:23:a4:a0:22:4e:32:f9:69:55:f6:fc:a4:c2:91:12: 57:b6:21:4e:b3:5f:e9:f6:a0:90:b0:a1:3a:0d:5c:57:fe:51: 7e:1b:60:1e:80:d1:e9:1b:0e:8f:ea:f7:51:d6:77:d4:6b:ac: 58:07:ec:65:d4:27:b5:81:34:4c:e5:57:4a:1a:ed:5d:ca:ab: e2:ed:39:10:74:0b:46:09:5b:36:8e:43:44:13:b0:6f:a5:94: 45:bb:69:68 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4UchfEc0zRVI/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YmY5YTRmMzAtZWQ4NC00N2Y0LWJmNjYtNzVhNWU1MWEyM2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaDObmo+2EFGc70S3WcmK5pM/+uPmU09vK0d yjWUMqdXOcxsi5VmxZl1fAgE+D9XSp0YyOVOPwYprAJm4hslq9UsBRvuP/Eks3jV 2Um4TvvkumCCbQ4GCSEvGGbWcxowk5h172CvyWmT2AuUA4FYcYNUmcKLVDwtXBBh 0/PMIMDEaTldVGkoXNUt7+OZbnY3Jq7mzEHcSQzyeRaX9iy7ptItZpsGLR1sCQyw 7K6fftEvVKw4Yh6AEyFAISWj+q/efhaTJK/iXGs9OBri9VACKd574pxNHH5YunKz /OOkPeaeq49zmEa5LrOQ1RsAkEv+Bt8C5hz3tPeG/401oU4nUQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIijVGvb0qUayYUq0sye/6PX0m8+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTE5YTc0OWUtODc5MC0z OTQ3LWFkMmMtNGVjMzViZTEwNzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBCb6A+aORaAE48GaB82z9UYW9mcfpd1pSSlcrC+UJmFMVf3VKUosY5 XUw34jX39E8rvfs3DvBbfA6a89W3DeDwcNi8AjWbOaQMt4IdGP05od4JqYqyx9wP ZWJk6Qb1KAsQtVEJfl9LmQgcMBRyu/Wf2zo/nD5LW+U0Nwa164HtVk5GKhDpgdKh yDjXzFgG/1xupjr5bFxkkY7B6l/iv5w9/9JcgncjpKAiTjL5aVX2/KTCkRJXtiFO s1/p9qCQsKE6DVxX/lF+G2AegNHpGw6P6vdR1nfUa6xYB+xl1Ce1gTRM5VdKGu1d yqvi7TkQdAtGCVs2jkNEE7BvpZRFu2lo -----END CERTIFICATE-----Generated at Sun May 11 08:34:31 2025 by rpki-client