$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed988bbb-0109-36b2-9d55-0fb2b7bf2068.roa File: ed988bbb-0109-36b2-9d55-0fb2b7bf2068.roa (raw, json) Hash identifier: tN4EkkHbXkO/nZfiJN6euslfCkw2XNsWtgUE29Fc7v4= Subject key identifier: 0F:7E:1E:D8:5B:AA:32:40:4C:5A:EF:3C:74:4E:74:0F:33:C7:F0:63 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F8AFAB2A6064569ED1D40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed988bbb-0109-36b2-9d55-0fb2b7bf2068.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 396564 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8a:fa:b2:a6:06:45:69:ed:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=6fea94c9-3f32-439e-9a3b-71dbe9decfd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:72:67:0e:1a:c8:c8:1e:46:37:df:39:fc:a6: 78:57:37:21:9b:64:c9:6f:fd:55:11:a2:c7:aa:a3: 15:ea:2b:b8:d7:f0:7f:ab:96:53:81:d9:54:63:c4: eb:92:5e:01:51:db:db:ff:be:81:d7:30:70:32:69: 38:5e:6a:0d:59:2a:a2:3a:0b:01:57:dd:13:7a:1d: 43:af:98:da:6a:d1:8a:10:9b:56:15:f9:5b:6c:d7: e4:c0:29:13:22:a4:fa:67:b9:c7:4d:2c:12:9d:1f: f2:76:ff:f1:7f:92:57:8e:2f:6e:8e:43:11:57:6e: 36:50:6b:36:68:0a:33:a2:f4:d4:37:23:46:bb:ef: 96:ee:cb:e7:e5:e2:6d:49:ed:44:64:1b:09:4e:53: 5e:4d:d4:82:9b:e0:f0:23:4c:f8:4c:67:7c:ee:22: 2d:11:6f:cf:53:4c:a2:71:fb:ec:09:5c:18:24:5b: a1:b4:9e:79:ce:f7:51:a1:35:18:03:ed:6e:0e:b5: 00:bf:82:e4:15:20:de:f1:8a:c1:2e:f2:57:d0:84: e0:5c:72:7a:41:2a:e4:9a:59:54:34:0c:9b:50:78: e8:42:a1:31:88:a4:f7:12:93:01:05:7e:27:01:bc: 7b:d3:17:23:fe:f4:c2:5f:a9:f5:c0:37:00:a5:fb: 88:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7E:1E:D8:5B:AA:32:40:4C:5A:EF:3C:74:4E:74:0F:33:C7:F0:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed988bbb-0109-36b2-9d55-0fb2b7bf2068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:6b:80:56:3f:0b:42:a2:3d:bf:75:28:9b:0f:de:0f:a6:f1: f0:20:e9:85:5a:b3:72:c7:8e:4e:84:63:a1:9d:fd:9f:96:74: cd:ba:6f:d8:58:42:d3:e1:0a:5e:18:0f:e3:fe:cc:59:8b:1d: 66:ef:b2:cb:b5:22:4e:77:e9:11:83:60:e2:72:a1:54:5f:0f: c1:ca:4b:ba:9e:53:3a:1c:75:46:d6:50:ce:7a:cd:f1:5b:36: 57:82:9d:e8:fc:0c:53:82:ac:cb:3a:d0:67:b5:76:51:ab:16: d3:1f:6a:e2:82:6c:ac:9c:28:eb:97:9c:97:7a:d3:3f:48:8d: 71:46:5c:5f:96:db:07:2c:17:fc:8e:a5:6b:f8:c4:2f:69:bc: 93:50:eb:cc:f5:61:80:23:a1:59:ce:f9:d7:0e:78:a6:14:30: 92:04:e5:a7:24:99:c5:3e:dd:4e:35:ff:83:92:7e:3d:a7:7c: b5:25:bb:62:fc:13:05:c2:2b:ee:81:52:85:13:c6:51:fc:e9: 68:78:89:db:3b:62:05:92:a3:1e:9d:91:04:50:a7:fd:59:cb: 80:5a:31:72:ae:bd:af:44:df:1e:5e:36:d2:a1:f4:84:2c:86: 1e:ca:3c:dc:03:84:3a:81:27:f0:79:77:34:d4:29:73:f4:59: 0c:a0:ca:0a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P4r6sqYGRWntHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NmZlYTk0YzktM2YzMi00MzllLTlhM2ItNzFkYmU5ZGVjZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3JnDhrIyB5GN985/KZ4Vzchm2TJb/1VEaLH qqMV6iu41/B/q5ZTgdlUY8Trkl4BUdvb/76B1zBwMmk4XmoNWSqiOgsBV90Teh1D r5jaatGKEJtWFflbbNfkwCkTIqT6Z7nHTSwSnR/ydv/xf5JXji9ujkMRV242UGs2 aAozovTUNyNGu++W7svn5eJtSe1EZBsJTlNeTdSCm+DwI0z4TGd87iItEW/PU0yi cfvsCVwYJFuhtJ55zvdRoTUYA+1uDrUAv4LkFSDe8YrBLvJX0ITgXHJ6QSrkmllU NAybUHjoQqExiKT3EpMBBX4nAbx70xcj/vTCX6n1wDcApfuIYQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA9+HthbqjJATFrvPHROdA8zx/BjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWQ5ODhiYmItMDEwOS0z NmIyLTlkNTUtMGZiMmI3YmYyMDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJa4BWPwtCoj2/dSibD94PpvHwIOmFWrNyx45OhGOhnf2flnTNum/Y WELT4QpeGA/j/sxZix1m77LLtSJOd+kRg2DicqFUXw/Byku6nlM6HHVG1lDOes3x WzZXgp3o/AxTgqzLOtBntXZRqxbTH2rigmysnCjrl5yXetM/SI1xRlxfltsHLBf8 jqVr+MQvabyTUOvM9WGAI6FZzvnXDnimFDCSBOWnJJnFPt1ONf+Dkn49p3y1Jbti /BMFwivugVKFE8ZR/OloeInbO2IFkqMenZEEUKf9WcuAWjFyrr2vRN8eXjbSofSE LIYeyjzcA4Q6gSfweXc01Clz9FkMoMoK -----END CERTIFICATE-----Generated at Sun May 11 05:35:03 2025 by rpki-client