$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49e43c82-0655-3c7b-9b67-9b5cf28a43b0.roa File: 49e43c82-0655-3c7b-9b67-9b5cf28a43b0.roa (raw, json) Hash identifier: LPxHUCUJv+OOSQL2icSJHn0NutVUFgdIpp0k3TJeFww= Subject key identifier: 08:02:0C:79:B8:40:01:18:DE:64:C4:7A:BC:FC:9F:DA:43:A5:29:CD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858471FD5D9510653C1022E29AE40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49e43c82-0655-3c7b-9b67-9b5cf28a43b0.roa Signing time: Fri 06 Sep 2024 13:00:41 +0000 ROA not before: Fri 06 Sep 2024 13:00:41 +0000 ROA not after: Thu 05 Dec 2024 14:00:41 +0000 asID: 36625 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1f:d5:d9:51:06:53:c1:02:2e:29:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 13:00:41 2024 GMT Not After : Dec 5 14:00:41 2024 GMT Subject: CN=6fcffe89-f5c5-430a-a0a5-28fa5b982d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:96:0a:84:44:9a:c4:b0:27:4b:26:0e:f7: bc:d0:4d:94:a9:a1:36:76:66:15:4a:de:20:c5:41: 72:72:ee:38:92:14:1d:4f:40:36:32:fe:36:a4:5d: 96:27:ed:94:fc:90:5d:ff:64:9e:7b:ae:41:d3:8f: 3f:9a:70:c5:0e:da:a8:3f:a6:de:9f:f6:84:bb:8b: 38:d9:35:af:ef:b2:cb:4f:4c:f3:98:29:2b:6e:de: f9:22:b6:25:c6:10:77:ed:19:0d:a6:ad:5e:05:b1: 16:10:7d:0e:f6:52:f0:22:51:68:62:01:18:40:d2: a4:ca:d9:50:56:1f:c1:6a:73:f3:ed:03:0e:51:45: 3f:a9:6e:02:5e:da:3d:28:d0:f2:b5:ba:ad:3a:96: b4:92:f6:b0:c4:da:43:94:44:50:df:b0:5e:fa:b0: 09:7a:a4:24:e8:19:d3:9f:cb:ef:70:77:f9:bb:b0: ca:76:e7:69:92:bf:c4:a9:86:1c:d8:b7:00:80:d0: de:5d:4a:d1:7c:57:0e:d8:80:f8:5d:79:0a:0c:91: 73:01:db:b7:61:6d:69:df:a4:9b:d0:21:b4:27:95: 73:e4:95:50:43:6a:6b:ea:09:5f:c3:15:16:e0:5a: f6:ba:24:14:5d:c8:65:d4:85:53:0d:f2:21:43:84: f7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:02:0C:79:B8:40:01:18:DE:64:C4:7A:BC:FC:9F:DA:43:A5:29:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49e43c82-0655-3c7b-9b67-9b5cf28a43b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:69:0e:28:2e:8e:09:44:3f:72:dc:76:2b:f8:d3:34:39:4d: 7c:9d:c1:f4:c3:c9:5a:1d:38:9a:3d:d1:7e:8b:bb:36:08:f2: 3f:d9:f7:9c:18:0f:e4:9c:ae:58:6b:fb:06:cb:30:5c:53:c5: a2:3c:09:69:75:43:5f:55:92:72:db:5e:cd:68:da:d5:af:b9: 20:de:41:4c:8a:2c:69:92:7e:d0:08:2e:cd:8b:a2:e1:dc:5f: 76:75:2a:5d:3e:4b:fc:22:d1:4a:72:4a:f7:8d:86:76:85:a4: 62:4f:aa:3c:b7:d5:1d:da:0e:13:80:15:90:af:90:16:90:7f: b7:48:b0:5c:f6:f6:5c:62:9a:25:89:36:51:a0:58:1e:3e:6c: 61:4b:7f:be:09:79:dd:f4:1e:bc:62:f5:17:4c:0f:d1:60:d7: 56:a3:d6:bb:67:3f:e6:ea:4d:62:84:5c:6b:5c:d6:89:20:c0: 09:ec:bc:c3:24:a2:ee:00:c8:76:7f:51:92:d5:6e:34:06:31: b6:3f:49:dc:b4:37:0e:93:55:de:64:27:75:8a:96:32:8c:25: 46:26:36:25:55:04:ad:c1:4a:5d:85:bc:a4:c0:6a:67:5a:42: 41:50:a5:04:06:60:34:43:87:c2:00:31:64:c3:49:e7:b5:f3: 5b:c4:27:4f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEcf1dlRBlPBAi4prkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NmZjZmZlODktZjVjNS00MzBhLWEwYTUtMjhmYTViOTgyZDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLaWCoREmsSwJ0smDve80E2UqaE2dmYVSt4g xUFycu44khQdT0A2Mv42pF2WJ+2U/JBd/2See65B048/mnDFDtqoP6ben/aEu4s4 2TWv77LLT0zzmCkrbt75IrYlxhB37RkNpq1eBbEWEH0O9lLwIlFoYgEYQNKkytlQ Vh/BanPz7QMOUUU/qW4CXto9KNDytbqtOpa0kvawxNpDlERQ37Be+rAJeqQk6BnT n8vvcHf5u7DKdudpkr/EqYYc2LcAgNDeXUrRfFcO2ID4XXkKDJFzAdu3YW1p36Sb 0CG0J5Vz5JVQQ2pr6glfwxUW4Fr2uiQUXchl1IVTDfIhQ4T38wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAgCDHm4QAEY3mTEerz8n9pDpSnNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDllNDNjODItMDY1NS0z YzdiLTliNjctOWI1Y2YyOGE0M2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAKaQ4oLo4JRD9y3HYr+NM0OU18ncH0w8laHTiaPdF+i7s2CPI/2fec GA/knK5Ya/sGyzBcU8WiPAlpdUNfVZJy217NaNrVr7kg3kFMiixpkn7QCC7Ni6Lh 3F92dSpdPkv8ItFKckr3jYZ2haRiT6o8t9Ud2g4TgBWQr5AWkH+3SLBc9vZcYpol iTZRoFgePmxhS3++CXnd9B68YvUXTA/RYNdWo9a7Zz/m6k1ihFxrXNaJIMAJ7LzD JKLuAMh2f1GS1W40BjG2P0nctDcOk1XeZCd1ipYyjCVGJjYlVQStwUpdhbykwGpn WkJBUKUEBmA0Q4fCADFkw0nntfNbxCdP -----END CERTIFICATE-----