$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/69011358-0e85-381c-baf2-e85ccc1ed625.roa File: 69011358-0e85-381c-baf2-e85ccc1ed625.roa (raw, json) Hash identifier: 5fGlPA7APDg61jNyn/dWNeyAz3mX32bWgd0xXLqHu/8= Subject key identifier: 57:26:23:EA:1A:81:47:58:69:E7:9C:70:82:02:CE:8B:EB:7A:95:68 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E0068029C7BBF06FB21A2400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/69011358-0e85-381c-baf2-e85ccc1ed625.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396596 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:80:29:c7:bb:f0:6f:b2:1a:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=28102d0b-c230-40b8-916c-5597d4941914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fd:4e:65:9c:b8:0a:8f:55:23:bf:23:0f:da: c1:7e:f7:ee:da:b5:ce:64:82:d4:fe:9d:ad:f3:06: 21:17:7e:21:d1:f1:26:c8:28:6c:ed:ae:24:6f:41: c1:c0:a2:c8:c4:47:9d:e8:20:8e:02:49:a6:0b:05: 88:01:a0:9f:2b:8a:0a:a7:c6:3c:1a:7a:0e:e1:57: 57:6d:07:31:9d:a3:a2:82:dc:5c:24:ab:fb:bd:3c: c0:7e:75:d6:bc:ac:ed:05:66:8d:65:12:fb:7b:3c: d5:94:5d:44:7c:a8:c7:28:27:88:53:1a:ff:d4:d0: bb:d1:b2:36:a8:23:90:dc:13:2d:ae:33:02:2e:88: 16:f2:e8:c8:2c:cc:4d:f9:26:8a:20:4e:18:7b:22: b9:1f:38:5a:63:55:e8:e1:20:5a:f0:90:17:bc:04: 5a:24:bd:4d:2c:59:7a:74:af:7a:89:ba:f8:1f:a1: e0:39:c1:9b:a4:9e:ef:9c:34:f7:70:a3:8d:33:9b: 1f:d4:aa:86:13:cd:be:71:83:b0:4a:b2:75:ce:66: 4f:07:58:47:25:19:8c:92:59:26:34:43:ed:1f:85: 74:09:47:fa:d3:13:68:eb:99:ae:c2:63:eb:2b:de: 53:6d:77:98:1e:5f:8a:c2:41:c3:19:71:c4:d0:7f: b8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:26:23:EA:1A:81:47:58:69:E7:9C:70:82:02:CE:8B:EB:7A:95:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/69011358-0e85-381c-baf2-e85ccc1ed625.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:f9:ef:9a:f2:5f:64:3e:fd:54:39:41:e1:a3:f2:65:6f:18: e8:37:d9:47:69:fb:7e:76:e2:b6:5c:94:4a:00:8c:96:ee:9f: 85:29:51:67:1e:d1:8c:53:53:2c:c2:73:69:9e:0e:d3:bb:1c: dc:fe:75:29:9c:18:14:b4:66:9f:bd:0c:f2:66:45:7b:3c:57: 08:13:6c:86:71:66:51:04:2b:0c:b7:10:5e:f5:a0:d2:a0:d1: 07:84:30:3f:21:68:5e:7b:4d:2a:21:26:9f:68:ad:d3:29:5f: b8:cb:41:bc:61:07:9b:e4:af:ac:2f:58:c1:03:e8:6a:65:68: 6c:d7:af:2a:a1:9e:76:32:cd:ee:ec:31:c3:dd:0e:ee:f6:74: 65:82:e0:3d:46:d2:77:3f:fa:b6:43:95:fc:2e:f8:5a:52:01: 57:12:8b:3f:cb:3d:84:92:1b:06:79:58:89:67:78:a6:79:09: 8e:b1:16:5c:3b:5f:f9:f9:af:55:61:c3:88:3f:ca:40:7e:89: f4:5b:e4:97:64:91:51:91:05:0c:e5:bc:da:d6:5b:df:63:80: 46:52:bb:b1:17:eb:70:7f:ad:01:ad:07:77:f4:76:ba:80:30: da:81:84:04:76:eb:19:3e:0f:44:5f:f3:c0:e2:ab:91:c6:86: 21:10:97:67 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBoApx7vwb7IaJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk MjgxMDJkMGItYzIzMC00MGI4LTkxNmMtNTU5N2Q0OTQxOTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv1OZZy4Co9VI78jD9rBfvfu2rXOZILU/p2t 8wYhF34h0fEmyChs7a4kb0HBwKLIxEed6CCOAkmmCwWIAaCfK4oKp8Y8GnoO4VdX bQcxnaOigtxcJKv7vTzAfnXWvKztBWaNZRL7ezzVlF1EfKjHKCeIUxr/1NC70bI2 qCOQ3BMtrjMCLogW8ujILMxN+SaKIE4YeyK5HzhaY1Xo4SBa8JAXvARaJL1NLFl6 dK96ibr4H6HgOcGbpJ7vnDT3cKONM5sf1KqGE82+cYOwSrJ1zmZPB1hHJRmMklkm NEPtH4V0CUf60xNo65muwmPrK95TbXeYHl+KwkHDGXHE0H+49wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFcmI+oagUdYaeeccIICzovrepVoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjkwMTEzNTgtMGU4NS0z ODFjLWJhZjItZTg1Y2NjMWVkNjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAt+e+a8l9kPv1UOUHho/JlbxjoN9lHaft+duK2XJRKAIyW7p+FKVFn HtGMU1MswnNpng7Tuxzc/nUpnBgUtGafvQzyZkV7PFcIE2yGcWZRBCsMtxBe9aDS oNEHhDA/IWhee00qISafaK3TKV+4y0G8YQeb5K+sL1jBA+hqZWhs168qoZ52Ms3u 7DHD3Q7u9nRlguA9RtJ3P/q2Q5X8LvhaUgFXEos/yz2EkhsGeViJZ3imeQmOsRZc O1/5+a9VYcOIP8pAfon0W+SXZJFRkQUM5bza1lvfY4BGUruxF+twf60BrQd39Ha6 gDDagYQEdusZPg9EX/PA4quRxoYhEJdn -----END CERTIFICATE-----Generated at Sat Apr 12 00:57:30 2025 by rpki-client