$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e95e5439-f280-3e9e-afb1-4bb48cea0c6e.roa File: e95e5439-f280-3e9e-afb1-4bb48cea0c6e.roa (raw, json) Hash identifier: bpg6Z6RGcPG0BoGv5pi8qgMoJsJuCPdEGsxn37vxTJs= Subject key identifier: 7A:00:08:95:5F:35:BA:CC:2C:AF:87:CB:97:A2:01:4E:EB:91:44:A3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F83693EE87A852A428980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e95e5439-f280-3e9e-afb1-4bb48cea0c6e.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396554 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:83:69:3e:e8:7a:85:2a:42:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=60cbd0a1-9487-419b-9ec7-c8024c65a2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d1:fd:81:2c:97:a0:a7:fc:fc:75:9c:7c:c0: f4:c9:ec:05:85:23:f0:ff:4a:ed:5d:17:fe:fa:88: a0:77:49:6c:5c:30:82:00:9a:12:b4:6b:a7:8d:fa: 64:18:b1:9a:04:27:99:5b:a3:e5:78:75:6a:8b:b1: c0:c2:c2:23:7a:7b:04:23:de:29:ad:b2:48:69:8b: 59:f8:3b:17:fb:ee:d2:b9:74:c4:26:60:a5:e9:69: 68:2c:d7:c5:41:62:08:bd:a6:71:37:9a:20:72:39: 6a:1e:a0:1b:00:19:13:7d:de:ca:30:0a:82:53:22: 87:bb:75:66:0f:c6:76:b6:60:e0:22:f7:32:c9:a9: ac:1a:0e:eb:56:54:7c:00:ed:f6:b8:b4:29:57:09: c3:d6:c2:3b:b8:cc:cf:8e:ff:37:49:ed:09:62:91: 09:7a:d8:8b:79:ac:eb:4d:16:4b:19:ad:9e:cb:08: d0:7b:12:14:f0:19:47:37:c7:95:7f:05:66:2c:d8: b6:e6:45:46:df:47:23:62:d0:95:36:a8:fa:84:69: 84:e2:9e:59:a8:29:96:67:32:1f:2c:8a:be:17:13: e5:d6:42:83:59:a7:6d:aa:10:68:01:33:aa:12:4c: 4e:5a:8b:8c:5b:0f:4b:67:35:ec:c9:a4:5f:ad:47: cf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:00:08:95:5F:35:BA:CC:2C:AF:87:CB:97:A2:01:4E:EB:91:44:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e95e5439-f280-3e9e-afb1-4bb48cea0c6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:52:af:fd:e8:bd:af:65:25:de:96:2e:ce:6b:24:80:a2:3b: fd:9c:58:33:b0:15:ea:dd:4b:b0:d9:46:c7:62:33:b1:75:46: c3:44:49:c3:5b:07:eb:a9:7e:37:a2:2a:c9:44:e5:14:05:e0: 01:bf:cd:86:78:26:3f:2e:80:f2:9e:86:4f:ab:88:15:42:36: 59:f0:3e:2a:3a:72:ef:1c:dc:9f:55:cd:dc:cc:9d:5b:ef:fd: 74:55:96:6b:c7:2f:86:de:d9:25:9e:ef:38:38:6f:b5:43:61: 8d:8e:fe:d0:25:fb:8c:81:22:8f:fc:80:c3:6e:df:82:c9:22: 1e:a8:24:6a:33:ff:e7:33:83:9e:8b:b3:12:0d:c6:20:6e:de: 31:1a:db:90:93:f4:b9:7d:dd:00:c2:98:ad:46:c0:fb:cc:01: 63:0a:2c:57:57:a1:5e:2c:7f:dc:5e:cd:98:9d:0b:32:4d:5d: 07:8f:15:e1:87:af:55:d0:5c:83:62:0e:66:41:81:6b:86:a8: e5:99:44:83:83:2b:a8:06:de:73:38:b8:1a:e3:8c:7a:38:70: 51:91:06:7f:17:d5:01:c0:5f:f6:58:60:7f:ff:e8:df:a0:e4: ab:fb:25:f2:51:f5:03:9b:5e:04:e6:1c:6b:27:11:d0:55:bb: fb:c6:8b:d8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4NpPuh6hSpCiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NjBjYmQwYTEtOTQ4Ny00MTliLTllYzctYzgwMjRjNjVhMmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29H9gSyXoKf8/HWcfMD0yewFhSPw/0rtXRf+ +oigd0lsXDCCAJoStGunjfpkGLGaBCeZW6PleHVqi7HAwsIjensEI94prbJIaYtZ +DsX++7SuXTEJmCl6WloLNfFQWIIvaZxN5ogcjlqHqAbABkTfd7KMAqCUyKHu3Vm D8Z2tmDgIvcyyamsGg7rVlR8AO32uLQpVwnD1sI7uMzPjv83Se0JYpEJetiLeazr TRZLGa2eywjQexIU8BlHN8eVfwVmLNi25kVG30cjYtCVNqj6hGmE4p5ZqCmWZzIf LIq+FxPl1kKDWadtqhBoATOqEkxOWouMWw9LZzXsyaRfrUfPUQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHoACJVfNbrMLK+Hy5eiAU7rkUSjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTk1ZTU0MzktZjI4MC0z ZTllLWFmYjEtNGJiNDhjZWEwYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBBUq/96L2vZSXeli7OaySAojv9nFgzsBXq3Uuw2UbHYjOxdUbDREnD WwfrqX43oirJROUUBeABv82GeCY/LoDynoZPq4gVQjZZ8D4qOnLvHNyfVc3czJ1b 7/10VZZrxy+G3tklnu84OG+1Q2GNjv7QJfuMgSKP/IDDbt+CySIeqCRqM//nM4Oe i7MSDcYgbt4xGtuQk/S5fd0AwpitRsD7zAFjCixXV6FeLH/cXs2YnQsyTV0HjxXh h69V0FyDYg5mQYFrhqjlmUSDgyuoBt5zOLga44x6OHBRkQZ/F9UBwF/2WGB//+jf oOSr+yXyUfUDm14E5hxrJxHQVbv7xovY -----END CERTIFICATE-----Generated at Sun May 11 05:22:32 2025 by rpki-client