$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a7f50e5-86af-3059-9cf4-51814035a7f8.roa File: 6a7f50e5-86af-3059-9cf4-51814035a7f8.roa (raw, json) Hash identifier: wzlx7X2BzOE+6AQ+MrFSd5mWouh/NrufCRiH2zrKiZU= Subject key identifier: 9A:88:0C:0D:1E:44:31:92:89:5C:A6:75:BD:38:AC:CC:FD:07:F2:D4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E00684A07A9231FA7BEEF3AE Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a7f50e5-86af-3059-9cf4-51814035a7f8.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396588 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:84:a0:7a:92:31:fa:7b:ee:f3:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=926ec633-31d7-4bff-b916-031b8b3369f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:aa:f5:fb:2f:d0:20:35:ce:62:21:96:69:ec: e9:05:c9:77:e0:f8:cb:eb:0a:41:9f:24:5c:13:d9: 54:89:8b:f9:4b:48:42:22:af:79:44:22:67:c5:b9: 05:6a:43:a0:a6:c2:c7:30:55:d2:e3:96:59:e4:09: 54:ca:95:f2:db:a0:5f:ad:ed:14:b7:80:03:a7:61: 73:d9:19:16:d0:76:57:c9:24:12:74:45:4c:df:76: 4b:a8:5d:04:05:45:e7:8c:9a:8b:24:3e:6f:19:35: 69:6a:6d:3c:f1:84:4c:8a:3e:e2:78:1a:c9:f3:94: 27:56:e4:1c:fe:79:e2:b7:7e:57:11:e7:0c:6c:e9: af:91:14:b7:25:a0:36:b6:74:cc:85:f5:7d:90:fb: c9:4f:18:5d:3c:c4:0c:d3:99:86:dd:64:ee:9d:47: a4:23:3d:7a:24:f8:2b:35:25:26:da:ae:fd:af:1e: 51:ac:f6:ca:76:83:c0:5b:1d:d6:2f:59:48:16:b2: f8:99:bc:ad:c4:14:5a:9b:cc:08:ff:19:2c:eb:12: 17:8d:db:c8:21:ea:22:72:80:8c:5c:fd:66:e2:aa: 06:5f:d2:4f:b5:a3:db:b0:16:76:d9:4d:31:3a:46: 2b:32:4b:59:c5:9c:fe:8b:1f:bc:79:c4:77:92:d0: 62:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:88:0C:0D:1E:44:31:92:89:5C:A6:75:BD:38:AC:CC:FD:07:F2:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a7f50e5-86af-3059-9cf4-51814035a7f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:62:b8:c7:9c:c1:d7:d7:02:9a:3f:ac:fa:b7:41:7a:60:7e: a5:eb:c8:9e:ac:0a:19:46:04:56:4c:17:8a:da:75:8e:9f:5d: 54:7c:e7:68:67:29:6c:f5:a4:37:e5:5c:16:b8:da:6f:6e:2d: 55:96:3d:e2:d1:d1:48:95:3d:ba:e0:86:8b:6c:de:4e:46:11: c5:1e:ab:fb:e9:14:60:0c:46:9a:c8:49:43:7c:ed:f9:8d:29: f1:2e:5f:00:6a:09:6e:b6:50:c4:20:cd:1d:e6:d4:92:a7:ba: 3c:cf:e8:eb:21:10:61:52:b0:79:34:3c:72:1b:3b:32:57:af: 0c:28:17:16:8a:12:ef:56:64:4e:85:fd:08:e9:9f:25:44:0d: e9:bb:dc:43:fa:f5:d9:3d:69:ba:10:68:77:7f:75:4f:6e:ca: 4b:5d:72:bd:fa:00:5e:fe:65:76:65:11:e9:17:ac:a2:b9:e5: 95:ad:be:3a:26:d5:85:09:27:5e:d9:a6:d9:c3:d3:b8:18:01: 51:90:a4:e2:3d:6f:19:80:f5:67:32:bb:fe:e6:65:af:47:d4: 95:33:d2:c7:96:6a:4a:2d:40:37:28:ed:c2:29:5f:eb:79:ba: f8:b4:8a:b6:f4:36:36:c3:60:d4:a8:82:e7:24:df:04:ec:b3: 08:a9:2b:74 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBoSgepIx+nvu864wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk OTI2ZWM2MzMtMzFkNy00YmZmLWI5MTYtMDMxYjhiMzM2OWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqr1+y/QIDXOYiGWaezpBcl34PjL6wpBnyRc E9lUiYv5S0hCIq95RCJnxbkFakOgpsLHMFXS45ZZ5AlUypXy26Bfre0Ut4ADp2Fz 2RkW0HZXySQSdEVM33ZLqF0EBUXnjJqLJD5vGTVpam088YRMij7ieBrJ85QnVuQc /nnit35XEecMbOmvkRS3JaA2tnTMhfV9kPvJTxhdPMQM05mG3WTunUekIz16JPgr NSUm2q79rx5RrPbKdoPAWx3WL1lIFrL4mbytxBRam8wI/xks6xIXjdvIIeoicoCM XP1m4qoGX9JPtaPbsBZ22U0xOkYrMktZxZz+ix+8ecR3ktBi2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJqIDA0eRDGSiVymdb04rMz9B/LUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmE3ZjUwZTUtODZhZi0z MDU5LTljZjQtNTE4MTQwMzVhN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBmYrjHnMHX1wKaP6z6t0F6YH6l68ierAoZRgRWTBeK2nWOn11UfOdo Zyls9aQ35VwWuNpvbi1Vlj3i0dFIlT264IaLbN5ORhHFHqv76RRgDEaayElDfO35 jSnxLl8AaglutlDEIM0d5tSSp7o8z+jrIRBhUrB5NDxyGzsyV68MKBcWihLvVmRO hf0I6Z8lRA3pu9xD+vXZPWm6EGh3f3VPbspLXXK9+gBe/mV2ZRHpF6yiueWVrb46 JtWFCSde2abZw9O4GAFRkKTiPW8ZgPVnMrv+5mWvR9SVM9LHlmpKLUA3KO3CKV/r ebr4tIq29DY2w2DUqILnJN8E7LMIqSt0 -----END CERTIFICATE-----Generated at Sat Apr 12 00:21:25 2025 by rpki-client