$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/574a93c6-a18f-3df5-a131-c283150c7482.roa File: 574a93c6-a18f-3df5-a131-c283150c7482.roa (raw, json) Hash identifier: fXpSv8TZ0O0hHmZ/uBo8dRGhd6DanazJCNvEbLT93K8= Subject key identifier: A1:54:AC:A9:D3:08:81:67:4C:93:3D:15:6C:A5:1E:F4:2A:6B:87:B3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E0067C773B3CF57CD686EC40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/574a93c6-a18f-3df5-a131-c283150c7482.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396594 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:7c:77:3b:3c:f5:7c:d6:86:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=667bc69d-a47c-45a5-b0c9-8cbdca16127b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:7c:fb:95:34:0c:55:5a:60:ff:06:57:a2: 58:61:57:08:54:83:17:ad:b2:a6:0e:73:30:a7:a8: f8:64:67:23:63:49:1e:86:80:11:1f:c7:46:32:e0: 10:ca:21:d8:37:2d:1e:49:1e:16:bb:b6:9a:7b:73: e2:eb:5d:27:74:f9:eb:20:13:8d:27:1b:98:4c:76: 2b:fb:92:00:06:4f:b6:2d:0a:c0:82:70:74:92:45: 3b:c1:a6:62:fb:54:63:d8:91:b1:85:48:cc:d2:98: 4e:77:6c:4c:cb:5b:6c:ed:4e:51:41:65:af:3e:a4: 5c:ce:1e:73:67:29:fc:a2:56:47:26:04:18:ed:60: 6b:e7:b3:33:31:d9:ca:18:19:f3:1e:05:b6:0e:1b: 18:5e:52:8b:cb:79:03:25:26:45:a1:c2:a0:95:6b: 41:07:06:28:21:ff:75:e6:d0:08:b7:31:fe:55:41: f2:24:24:bb:0b:d8:ad:3c:48:08:4a:73:0a:0d:65: 2a:75:11:62:01:fe:c3:b3:3d:08:49:db:78:74:c0: 23:33:eb:12:8b:d9:c6:f1:fa:b7:b2:82:4b:02:0e: 72:af:1d:d7:97:2a:8b:07:46:7b:33:82:40:94:30: 83:4d:32:ee:36:9e:a7:a0:fb:83:e9:ef:29:fd:b2: bb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:54:AC:A9:D3:08:81:67:4C:93:3D:15:6C:A5:1E:F4:2A:6B:87:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/574a93c6-a18f-3df5-a131-c283150c7482.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:1f:b8:c3:01:42:b0:d4:5d:cd:da:46:8c:de:cf:b2:d3:3b: 56:96:81:a5:7e:fa:05:9d:36:5a:a8:a1:ff:c9:c6:0d:4c:fa: b4:29:62:31:7d:cc:a0:66:b3:f8:1f:e3:2a:98:2e:75:90:60: cb:ac:ee:12:47:2e:9b:72:a3:5d:5b:66:29:9f:89:d8:7f:c2: a7:2a:aa:eb:d8:cb:14:23:3a:2f:d4:7a:64:5e:21:fe:0c:5b: 9e:c4:3f:99:d9:f1:a9:da:f4:57:3c:49:45:24:fd:fa:85:81: 4b:77:6e:7d:be:29:47:d2:52:bf:24:60:21:fa:c1:40:53:14: 92:07:65:17:e6:a4:94:d6:64:c5:bf:ef:6e:5a:66:f6:c1:1e: 0c:4a:0c:50:ee:87:12:8e:e4:c8:10:4f:74:84:bd:fb:f8:68: 95:5a:9a:06:57:d5:10:d4:c3:2e:27:a0:8b:cb:b0:ec:b5:db: c8:f8:af:80:4a:9b:43:40:78:37:1c:ad:9c:69:b8:24:83:52: 28:3b:19:dd:65:a1:c0:f0:b7:92:92:12:a1:0e:91:d7:c8:b7: 49:77:16:89:d5:06:69:9d:8e:2e:b2:a2:07:2e:d6:cd:89:15: 69:16:31:f5:51:6a:f8:51:95:8c:2d:1e:38:e9:64:58:52:d0: 67:3c:b6:77 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBnx3Ozz1fNaG7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk NjY3YmM2OWQtYTQ3Yy00NWE1LWIwYzktOGNiZGNhMTYxMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJV8+5U0DFVaYP8GV6JYYVcIVIMXrbKmDnMw p6j4ZGcjY0kehoARH8dGMuAQyiHYNy0eSR4Wu7aae3Pi610ndPnrIBONJxuYTHYr +5IABk+2LQrAgnB0kkU7waZi+1Rj2JGxhUjM0phOd2xMy1ts7U5RQWWvPqRczh5z Zyn8olZHJgQY7WBr57MzMdnKGBnzHgW2DhsYXlKLy3kDJSZFocKglWtBBwYoIf91 5tAItzH+VUHyJCS7C9itPEgISnMKDWUqdRFiAf7Dsz0ISdt4dMAjM+sSi9nG8fq3 soJLAg5yrx3XlyqLB0Z7M4JAlDCDTTLuNp6noPuD6e8p/bK7sQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKFUrKnTCIFnTJM9FWylHvQqa4ezMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTc0YTkzYzYtYTE4Zi0z ZGY1LWExMzEtYzI4MzE1MGM3NDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAyH7jDAUKw1F3N2kaM3s+y0ztWloGlfvoFnTZaqKH/ycYNTPq0KWIx fcygZrP4H+MqmC51kGDLrO4SRy6bcqNdW2Ypn4nYf8KnKqrr2MsUIzov1HpkXiH+ DFuexD+Z2fGp2vRXPElFJP36hYFLd259vilH0lK/JGAh+sFAUxSSB2UX5qSU1mTF v+9uWmb2wR4MSgxQ7ocSjuTIEE90hL37+GiVWpoGV9UQ1MMuJ6CLy7DstdvI+K+A SptDQHg3HK2cabgkg1IoOxndZaHA8LeSkhKhDpHXyLdJdxaJ1QZpnY4usqIHLtbN iRVpFjH1UWr4UZWMLR446WRYUtBnPLZ3 -----END CERTIFICATE-----Generated at Fri Apr 11 23:37:57 2025 by rpki-client