$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/55aa0d63-d5ec-31ce-ad4c-38aaa2a1be17.roa File: 55aa0d63-d5ec-31ce-ad4c-38aaa2a1be17.roa (raw, json) Hash identifier: qYqT7Y845TzIobrqA6sjASD9bJygF1pgbWjqN0L5pgw= Subject key identifier: 78:52:A7:9E:62:14:22:EF:89:31:6F:AD:20:E2:D6:1D:E9:77:EF:3D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E0067D5D9D98EE65A9D3D5E8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/55aa0d63-d5ec-31ce-ad4c-38aaa2a1be17.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396612 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:7d:5d:9d:98:ee:65:a9:d3:d5:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=0064c24c-f5e9-42d5-85fc-53ff14a7cca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a4:43:a8:13:73:8a:30:77:0c:0a:31:0e:2d: c4:55:97:74:7c:0e:53:79:e0:74:ae:73:23:86:f4: bc:9e:16:9c:9d:ac:d3:ab:3b:9f:cf:69:91:42:84: f3:92:78:5a:1c:0f:c9:cf:43:85:99:d5:54:8b:8c: c1:79:6f:a3:c2:92:fe:68:c2:1f:64:54:a9:42:4d: 83:2f:f0:53:13:c2:6e:71:e7:83:97:78:6b:ba:87: 24:c5:0a:82:bc:1e:93:5c:eb:33:45:a8:13:df:47: 04:b0:23:f7:8f:bb:0f:8d:27:d3:c0:f4:19:20:06: e0:9c:75:ee:f2:5a:40:02:f9:8e:3c:2a:25:8c:9d: 4f:99:96:9c:66:b6:af:18:84:e6:54:f9:35:b1:b4: 7e:0c:ee:c3:b5:02:d4:f7:80:81:d5:c3:1a:34:6a: 90:09:1d:af:91:70:01:99:9d:d6:65:cc:48:1c:58: 37:a9:7e:a9:c2:3d:39:10:09:d7:b0:21:11:32:56: 92:8b:c2:8a:95:87:17:32:0a:eb:07:fb:14:da:4a: 28:fc:7f:fc:fd:3d:50:2e:00:6c:84:cd:f5:0f:d2: 88:b2:c2:6f:e8:bd:09:b0:fa:a2:19:d3:e3:71:08: 8b:2e:c8:1c:f4:2c:d4:5c:23:c5:64:f6:69:c0:40: b3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:52:A7:9E:62:14:22:EF:89:31:6F:AD:20:E2:D6:1D:E9:77:EF:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/55aa0d63-d5ec-31ce-ad4c-38aaa2a1be17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:95:b7:38:90:35:c5:e8:b3:1a:40:6e:bb:96:6b:26:f7:1c: ae:d1:30:06:49:b4:03:1a:38:b3:c0:0f:a1:cb:7d:b9:92:96: 5f:4b:f5:48:9c:61:84:0c:bc:3b:e6:be:85:df:a7:02:41:d6: 36:0e:92:8f:a5:69:ff:b7:0a:7b:02:be:df:c1:b1:8a:46:f5: c9:62:20:1d:96:66:b0:32:4c:8b:a4:00:c9:d5:c2:38:39:ec: ea:49:5b:79:2d:62:74:a5:e5:77:da:3e:27:f7:5f:32:07:00: 98:f2:13:ae:09:17:5f:7c:60:8e:90:95:f9:c3:65:0a:94:09: fb:16:62:0c:f8:05:d4:ba:06:9f:9f:c2:8d:d2:06:2d:46:97: ce:4b:a8:a2:df:14:7d:d3:e9:dd:36:6f:99:f7:61:26:38:4b: 33:07:97:c3:32:c2:a6:fa:eb:cb:2b:dd:ec:be:13:7d:25:04: 10:32:27:9b:8d:b1:83:fb:6f:20:35:4d:48:03:72:35:c6:0c: 0d:f6:74:9b:d3:92:1e:16:d1:80:d8:20:9b:fd:2e:3b:63:0b: 7b:9c:74:f8:42:80:23:d1:8b:1b:13:4d:43:34:5b:a9:ab:e1: 4f:aa:bc:bc:4c:02:d1:ae:d8:8b:a5:1e:ac:df:5e:f4:3d:3b: 33:88:54:d3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBn1dnZjuZanT1egwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk MDA2NGMyNGMtZjVlOS00MmQ1LTg1ZmMtNTNmZjE0YTdjY2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaRDqBNzijB3DAoxDi3EVZd0fA5TeeB0rnMj hvS8nhacnazTqzufz2mRQoTzknhaHA/Jz0OFmdVUi4zBeW+jwpL+aMIfZFSpQk2D L/BTE8JuceeDl3hruockxQqCvB6TXOszRagT30cEsCP3j7sPjSfTwPQZIAbgnHXu 8lpAAvmOPColjJ1PmZacZravGITmVPk1sbR+DO7DtQLU94CB1cMaNGqQCR2vkXAB mZ3WZcxIHFg3qX6pwj05EAnXsCERMlaSi8KKlYcXMgrrB/sU2koo/H/8/T1QLgBs hM31D9KIssJv6L0JsPqiGdPjcQiLLsgc9CzUXCPFZPZpwECzCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHhSp55iFCLviTFvrSDi1h3pd+89MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTVhYTBkNjMtZDVlYy0z MWNlLWFkNGMtMzhhYWEyYTFiZTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBBlbc4kDXF6LMaQG67lmsm9xyu0TAGSbQDGjizwA+hy325kpZfS/VI nGGEDLw75r6F36cCQdY2DpKPpWn/twp7Ar7fwbGKRvXJYiAdlmawMkyLpADJ1cI4 OezqSVt5LWJ0peV32j4n918yBwCY8hOuCRdffGCOkJX5w2UKlAn7FmIM+AXUugaf n8KN0gYtRpfOS6ii3xR90+ndNm+Z92EmOEszB5fDMsKm+uvLK93svhN9JQQQMieb jbGD+28gNU1IA3I1xgwN9nSb05IeFtGA2CCb/S47Ywt7nHT4QoAj0YsbE01DNFup q+FPqry8TALRrtiLpR6s3170PTsziFTT -----END CERTIFICATE-----Generated at Fri Apr 11 23:45:46 2025 by rpki-client