$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa4817d-b49c-314b-a92d-17a0633781f1.roa File: 5aa4817d-b49c-314b-a92d-17a0633781f1.roa (raw, json) Hash identifier: zm7kXVjzsJH66y9JBytYl98wMsy+aNgqQVg5MqrURhg= Subject key identifier: B6:57:0E:D4:98:C2:10:EC:42:F3:87:BC:FF:76:5D:50:EC:86:39:D8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E0067F20AEB0DDB5E8221C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa4817d-b49c-314b-a92d-17a0633781f1.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396549 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:7f:20:ae:b0:dd:b5:e8:22:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=349a5be7-36dd-4c77-aca6-b923dae966c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:3e:0c:ff:c9:d2:27:54:96:0c:a8:c5:e8:07: ce:96:f6:90:5f:35:cc:32:bd:57:01:45:90:67:94: 62:c9:46:34:25:17:be:4c:42:e8:81:20:f2:91:fc: 6e:22:a8:f3:08:85:41:09:97:2e:0f:00:ad:c5:93: 1b:10:80:3d:f5:33:da:c2:d5:2a:29:4c:ae:3c:6a: 02:2d:96:bf:c0:67:f7:98:dc:b9:65:f3:71:e5:41: 89:a0:7c:83:7a:67:d9:1d:76:9a:33:b5:8c:c5:2c: af:47:48:3f:cd:aa:9d:24:90:ad:34:8d:fb:95:30: 16:ef:eb:1a:46:57:16:8e:d9:1b:54:fe:eb:39:a2: 0d:21:fd:e3:47:f7:4a:39:c8:35:f7:02:f3:7a:37: eb:1b:26:64:8d:4e:35:5d:fb:f5:c0:75:4d:e3:8b: d3:2f:53:a8:a1:a8:65:70:24:69:9c:85:87:27:87: 4a:93:ba:74:fe:f0:46:6a:09:85:41:7a:50:d2:52: 2e:0f:bf:15:5a:86:55:bd:4e:48:2f:9e:3e:12:53: 20:0a:e6:5d:05:05:77:44:6e:da:91:d3:dc:0b:6e: 36:c9:fc:d3:14:09:39:f5:ac:29:06:e4:1a:32:d3: 2a:c5:f5:b5:96:91:f3:3c:70:6a:ec:ef:9e:ed:76: 6f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:57:0E:D4:98:C2:10:EC:42:F3:87:BC:FF:76:5D:50:EC:86:39:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5aa4817d-b49c-314b-a92d-17a0633781f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:99:b0:5b:b1:a7:33:bc:0c:44:64:aa:49:66:18:a5:d6:95: 26:98:cc:30:ca:04:73:e4:e8:d9:0a:f0:70:c5:20:b5:7b:02: 87:ec:11:9a:0a:a5:6e:ba:2c:b5:a9:a7:48:91:5e:ac:e8:9b: 1a:41:d0:cb:a3:d6:2e:af:99:39:74:cc:1a:63:6f:a6:eb:ab: 9e:3d:99:52:81:f2:78:67:1a:7f:57:fa:9d:24:77:4c:91:0c: 16:b2:a1:0a:94:33:31:ef:6b:ec:6d:82:80:3c:f1:19:4e:ad: 19:fd:74:fb:4f:83:f5:58:7c:b7:04:5f:d6:06:03:03:90:2a: 8f:da:34:0a:a3:e7:bf:4b:2d:01:f2:17:c4:cf:18:ab:4e:0e: e8:57:36:69:30:73:98:f0:4e:02:b3:11:80:ac:3d:d3:af:55: 77:6b:c2:da:f9:64:e8:18:55:5d:1a:61:fe:7f:45:a0:32:3b: e8:a2:57:1c:50:64:37:76:10:fd:c4:7d:fa:27:9e:09:66:15: 1d:78:c2:a7:e0:46:00:3d:90:2a:cb:e9:99:17:67:84:93:8a: bb:ed:2b:3a:26:ed:f3:70:9b:db:09:70:96:5d:d4:81:5e:87: 8b:75:b2:73:54:aa:ff:f3:07:87:6f:87:3f:6c:52:85:34:5f: ab:72:7a:84 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBn8grrDdtegiHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk MzQ5YTViZTctMzZkZC00Yzc3LWFjYTYtYjkyM2RhZTk2NmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8j4M/8nSJ1SWDKjF6AfOlvaQXzXMMr1XAUWQ Z5RiyUY0JRe+TELogSDykfxuIqjzCIVBCZcuDwCtxZMbEIA99TPawtUqKUyuPGoC LZa/wGf3mNy5ZfNx5UGJoHyDemfZHXaaM7WMxSyvR0g/zaqdJJCtNI37lTAW7+sa RlcWjtkbVP7rOaINIf3jR/dKOcg19wLzejfrGyZkjU41Xfv1wHVN44vTL1Oooahl cCRpnIWHJ4dKk7p0/vBGagmFQXpQ0lIuD78VWoZVvU5IL54+ElMgCuZdBQV3RG7a kdPcC242yfzTFAk59awpBuQaMtMqxfW1lpHzPHBq7O+e7XZvTQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLZXDtSYwhDsQvOHvP92XVDshjnYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWFhNDgxN2QtYjQ5Yy0z MTRiLWE5MmQtMTdhMDYzMzc4MWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB8mbBbsaczvAxEZKpJZhil1pUmmMwwygRz5OjZCvBwxSC1ewKH7BGa CqVuuiy1qadIkV6s6JsaQdDLo9Yur5k5dMwaY2+m66uePZlSgfJ4Zxp/V/qdJHdM kQwWsqEKlDMx72vsbYKAPPEZTq0Z/XT7T4P1WHy3BF/WBgMDkCqP2jQKo+e/Sy0B 8hfEzxirTg7oVzZpMHOY8E4CsxGArD3Tr1V3a8La+WToGFVdGmH+f0WgMjvoolcc UGQ3dhD9xH36J54JZhUdeMKn4EYAPZAqy+mZF2eEk4q77Ss6Ju3zcJvbCXCWXdSB XoeLdbJzVKr/8weHb4c/bFKFNF+rcnqE -----END CERTIFICATE-----Generated at Fri Apr 11 23:43:06 2025 by rpki-client