$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed6415c4-6910-3a02-97fd-35a1a2d3c454.roa File: ed6415c4-6910-3a02-97fd-35a1a2d3c454.roa (raw, json) Hash identifier: Crf2G6OZGqhLkfRv4ZVDVUdLDBWbX7cwtTMuCKC6OJA= Subject key identifier: B4:F0:48:A6:0A:85:D6:69:CA:B4:DE:E7:A9:FD:45:83:D0:F6:42:A0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8D90A05D3A541466CD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed6415c4-6910-3a02-97fd-35a1a2d3c454.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 397195 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8d:90:a0:5d:3a:54:14:66:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=cf1c6f04-c049-4ea6-8fa6-c98f239cfae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9b:2e:a1:9f:b9:4c:a9:8d:98:84:0e:53:a6: 94:70:81:52:92:85:ba:e5:10:c0:08:c7:2e:91:9a: b5:6e:49:48:2a:99:c8:e1:31:fd:2f:a6:c6:d3:70: 26:c9:a4:68:58:53:60:fd:5e:fd:ea:49:2a:17:a9: 5c:56:12:48:4a:49:f1:a6:93:f2:12:38:f7:33:25: 0a:53:cd:ae:4a:89:1a:de:dd:f9:55:a6:38:98:80: 13:c4:20:11:c4:c5:8a:3b:cc:02:1b:d9:4b:48:98: f0:50:c2:12:bd:87:fa:5b:60:17:fa:d1:7f:ba:95: 3c:b3:36:f5:14:d7:84:67:9c:d8:07:f6:f1:39:58: d0:6d:78:4d:36:76:e3:93:59:32:ec:a6:07:53:d5: cc:ae:bd:d3:a3:0a:a2:e6:cd:12:3f:b2:15:8f:8b: 5a:1f:fb:b3:0d:a5:a7:e0:94:b8:f7:95:cb:0c:05: f4:20:61:5e:18:05:5d:e3:7b:c0:3a:5c:65:c0:7d: 89:2f:c6:73:6a:a2:34:f6:d6:b9:26:2b:17:01:58: c0:d2:25:72:69:7f:c0:e9:14:3b:1b:01:19:76:c9: f0:3c:4e:8b:db:32:2c:7d:0d:3d:6a:c8:53:40:81: f6:eb:d3:64:a8:60:56:8c:1d:f0:d9:b6:fa:23:7e: 6b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F0:48:A6:0A:85:D6:69:CA:B4:DE:E7:A9:FD:45:83:D0:F6:42:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed6415c4-6910-3a02-97fd-35a1a2d3c454.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:5f:72:71:92:8c:4f:d5:28:14:d8:54:71:5a:9f:54:b4:35: 29:a6:f6:28:9e:b2:e6:2c:d0:39:eb:5a:e9:ec:4c:25:f1:a2: a9:77:36:1d:2f:1b:af:7e:c8:db:33:92:ef:7f:38:10:ff:98: 39:1a:23:2e:d7:9d:9d:50:04:e2:18:c6:c5:4d:dd:fa:70:0c: 45:68:fd:8f:03:fc:f8:1c:56:6e:d0:8f:6a:f6:6a:0e:91:2d: 1d:42:dc:d0:42:6f:33:88:4e:08:a3:04:3a:c2:23:70:cc:1d: 3c:77:bb:b4:5d:1d:e1:30:b1:03:82:79:31:6d:51:0b:ab:8f: ec:c5:cb:ba:78:85:42:88:3c:2d:62:8c:95:cd:15:55:28:1f: 69:a5:1f:5b:3a:d7:3b:67:87:18:bc:ab:ff:c9:2b:21:58:79: c9:67:aa:49:fe:db:a0:a8:0e:2a:9f:57:84:26:32:f0:e7:37: ef:59:97:bd:b4:d3:e6:48:39:53:dc:19:da:02:ab:e3:23:ed: 32:67:98:d9:62:70:34:af:2d:bf:1a:13:b8:9c:e8:65:84:6b: e2:1e:a2:5c:48:46:bb:6c:0c:6e:49:09:fd:76:c7:92:75:2d: 13:f6:eb:32:38:0c:1e:12:2d:02:4c:8f:53:5e:11:1b:67:3e: 4d:67:bf:fe -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P42QoF06VBRmzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk Y2YxYzZmMDQtYzA0OS00ZWE2LThmYTYtYzk4ZjIzOWNmYWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZsuoZ+5TKmNmIQOU6aUcIFSkoW65RDACMcu kZq1bklIKpnI4TH9L6bG03AmyaRoWFNg/V796kkqF6lcVhJISknxppPyEjj3MyUK U82uSoka3t35VaY4mIATxCARxMWKO8wCG9lLSJjwUMISvYf6W2AX+tF/upU8szb1 FNeEZ5zYB/bxOVjQbXhNNnbjk1ky7KYHU9XMrr3Towqi5s0SP7IVj4taH/uzDaWn 4JS495XLDAX0IGFeGAVd43vAOlxlwH2JL8ZzaqI09ta5JisXAVjA0iVyaX/A6RQ7 GwEZdsnwPE6L2zIsfQ09ashTQIH269NkqGBWjB3w2bb6I35rMQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLTwSKYKhdZpyrTe56n9RYPQ9kKgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWQ2NDE1YzQtNjkxMC0z YTAyLTk3ZmQtMzVhMWEyZDNjNDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB/X3JxkoxP1SgU2FRxWp9UtDUppvYonrLmLNA561rp7Ewl8aKpdzYd LxuvfsjbM5LvfzgQ/5g5GiMu152dUATiGMbFTd36cAxFaP2PA/z4HFZu0I9q9moO kS0dQtzQQm8ziE4IowQ6wiNwzB08d7u0XR3hMLEDgnkxbVELq4/sxcu6eIVCiDwt YoyVzRVVKB9ppR9bOtc7Z4cYvKv/ySshWHnJZ6pJ/tugqA4qn1eEJjLw5zfvWZe9 tNPmSDlT3BnaAqvjI+0yZ5jZYnA0ry2/GhO4nOhlhGviHqJcSEa7bAxuSQn9dseS dS0T9usyOAweEi0CTI9TXhEbZz5NZ7/+ -----END CERTIFICATE-----Generated at Sun May 11 08:32:10 2025 by rpki-client