$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c6268e2-5157-3f34-af90-a5e9a9da11e3.roa File: 6c6268e2-5157-3f34-af90-a5e9a9da11e3.roa (raw, json) Hash identifier: A571Bs6CO9siIEto3AkxcF6/nKbOvgI1wh67v3G2LsI= Subject key identifier: 5E:CE:EB:F3:BB:2B:C7:85:D7:56:04:77:1D:72:89:52:13:8C:16:D8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E0067DA27E141F09044E4100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c6268e2-5157-3f34-af90-a5e9a9da11e3.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 397203 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:7d:a2:7e:14:1f:09:04:4e:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=349aceac-ffbb-4eff-8286-41e043c048ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ae:9f:f2:ea:c1:e2:b1:bb:9f:73:a2:85:f9: 73:23:9d:b7:4a:92:df:8a:19:f9:7b:d8:f7:16:ed: 59:a1:34:09:b8:61:80:2c:ca:ea:67:d8:5b:99:9b: 20:5f:d8:7d:7a:ab:01:8e:4c:79:93:fe:95:ac:b4: a3:f7:c5:f3:bb:2b:55:70:3b:0f:a4:46:23:12:4d: b3:71:42:6b:41:1b:fd:74:6f:f1:8a:f8:a1:e8:c5: c5:1f:ad:c6:a6:7f:24:16:37:ca:04:a8:44:bb:28: 4a:e4:e0:b5:37:b0:a7:49:cc:a2:fe:0e:98:32:11: 9c:e4:b6:64:08:95:e2:8a:4e:f1:7a:0c:65:c1:f8: f1:cb:ff:b1:bc:fe:83:22:89:d0:ab:7c:de:26:d7: cf:1a:0e:ec:cd:4d:42:80:6c:35:f0:fa:ad:21:9e: e6:a6:fe:2f:1c:5f:ad:78:18:16:82:ad:66:92:36: 48:8e:2d:91:48:e5:b7:b4:d7:95:e6:d9:a3:13:32: b4:1d:a6:ef:e8:a2:dc:4f:b4:93:de:ed:c3:c0:b4: 83:05:a1:03:a4:0e:9e:ff:b5:53:dc:4a:02:af:45: de:ea:17:61:b9:b2:e2:14:1f:59:e8:15:e2:76:72: 26:ac:1b:4b:eb:ca:0d:2b:c5:09:7a:66:93:6c:2f: 63:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CE:EB:F3:BB:2B:C7:85:D7:56:04:77:1D:72:89:52:13:8C:16:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c6268e2-5157-3f34-af90-a5e9a9da11e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:96:5c:e2:12:d3:86:8a:f1:60:20:89:ab:08:a5:15:45:01: 04:4b:af:81:61:02:b7:d6:27:cd:ba:4e:71:80:26:99:c5:33: 3c:db:71:94:83:43:16:74:63:b9:12:24:e5:80:7a:49:c4:52: b1:5e:71:7f:25:fa:7f:44:9c:4a:60:42:f8:63:15:01:e1:95: ce:07:02:22:07:b2:82:fb:86:5c:9d:45:d1:f4:08:65:48:6a: 2a:b0:d6:4a:cf:36:c7:8f:10:2c:d0:8b:a6:fa:ab:56:2a:31: 65:95:8f:d3:31:47:4d:ef:89:4b:19:d9:40:81:e4:5c:1c:5d: 7f:c8:8c:78:29:9c:4f:54:d7:ec:62:c6:55:7b:13:ea:6d:ab: a6:ca:12:35:8b:ee:b2:ce:d4:48:3c:00:50:a7:f2:eb:3d:20: 80:0d:53:9f:26:37:3e:2e:e5:bb:c1:88:22:23:e9:1c:e3:ca: 32:33:37:f4:e2:07:98:e4:35:40:68:0c:51:6c:06:38:8a:02: 8f:7d:f2:7c:ae:00:17:ee:d2:55:5a:e8:a6:7c:89:8a:24:59: de:4b:38:94:55:26:07:4e:6b:c0:69:5e:40:f3:d1:85:08:ba: 0c:1e:5c:1a:95:98:50:05:04:24:c6:7e:99:89:56:81:41:29: ca:e0:9b:fd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBn2ifhQfCQROQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk MzQ5YWNlYWMtZmZiYi00ZWZmLTgyODYtNDFlMDQzYzA0OGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK6f8urB4rG7n3OihflzI523SpLfihn5e9j3 Fu1ZoTQJuGGALMrqZ9hbmZsgX9h9eqsBjkx5k/6VrLSj98XzuytVcDsPpEYjEk2z cUJrQRv9dG/xivih6MXFH63Gpn8kFjfKBKhEuyhK5OC1N7CnScyi/g6YMhGc5LZk CJXiik7xegxlwfjxy/+xvP6DIonQq3zeJtfPGg7szU1CgGw18PqtIZ7mpv4vHF+t eBgWgq1mkjZIji2RSOW3tNeV5tmjEzK0Habv6KLcT7ST3u3DwLSDBaEDpA6e/7VT 3EoCr0Xe6hdhubLiFB9Z6BXidnImrBtL68oNK8UJemaTbC9jNQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF7O6/O7K8eF11YEdx1yiVITjBbYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmM2MjY4ZTItNTE1Ny0z ZjM0LWFmOTAtYTVlOWE5ZGExMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB9llziEtOGivFgIImrCKUVRQEES6+BYQK31ifNuk5xgCaZxTM823GU g0MWdGO5EiTlgHpJxFKxXnF/Jfp/RJxKYEL4YxUB4ZXOBwIiB7KC+4ZcnUXR9Ahl SGoqsNZKzzbHjxAs0Ium+qtWKjFllY/TMUdN74lLGdlAgeRcHF1/yIx4KZxPVNfs YsZVexPqbaumyhI1i+6yztRIPABQp/LrPSCADVOfJjc+LuW7wYgiI+kc48oyMzf0 4geY5DVAaAxRbAY4igKPffJ8rgAX7tJVWuimfImKJFneSziUVSYHTmvAaV5A89GF CLoMHlwalZhQBQQkxn6ZiVaBQSnK4Jv9 -----END CERTIFICATE-----Generated at Tue Apr 15 18:40:19 2025 by rpki-client