$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78b240b6-9633-344f-9d5e-58a36b9bbc21.roa File: 78b240b6-9633-344f-9d5e-58a36b9bbc21.roa (raw, json) Hash identifier: qGV0aL00gyL713PdAyJdMVQI16S+lgLjX780Gs4v864= Subject key identifier: 2F:05:17:ED:03:2C:2F:0C:58:F4:1B:FC:41:6F:32:5A:F0:0E:E4:C3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E006793F4549E251222AC400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78b240b6-9633-344f-9d5e-58a36b9bbc21.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396608 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:79:3f:45:49:e2:51:22:2a:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=c663c296-7aa4-4969-8f3d-e5c9ed7e6a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9a:f7:19:6c:0d:c8:4f:f8:94:a7:ad:9b:b4: 08:44:4f:8c:29:d8:73:1e:3c:40:36:c1:ff:9f:77: c8:85:0a:58:af:d6:f6:24:2f:38:54:08:e6:65:73: e9:6d:93:32:61:01:eb:8f:01:15:6a:a2:e3:65:8c: a8:34:02:98:ae:a7:02:6c:43:fd:ed:5a:ce:91:80: 09:2f:a3:4d:a4:b4:3b:43:24:e9:37:64:c3:4b:03: 4b:cd:c0:54:1b:77:d0:8a:5d:8d:e5:6c:75:dd:30: 71:c9:10:68:7d:d0:70:89:d3:7a:59:1c:a4:30:3e: 02:dd:1c:e8:0a:c7:36:48:03:a1:df:90:94:d2:11: b4:41:76:c5:c6:42:af:31:e5:1f:24:3e:79:3f:09: 5c:b5:91:41:3e:6f:39:06:b8:21:78:a7:ec:1a:77: f4:1b:77:43:f2:39:29:06:86:f6:fb:37:b1:e1:28: 16:35:bf:e5:2e:bd:6a:58:67:ca:8d:d0:94:7d:1a: bd:d9:cb:3d:d6:69:f6:ac:2e:b3:c1:d9:c0:5f:ad: ec:b1:0f:a2:cb:6d:be:aa:ff:66:47:7f:45:74:9d: 27:f9:25:83:89:43:27:d7:cb:66:69:5e:b9:71:74: 29:02:09:b7:0e:a5:3b:32:02:47:b8:09:52:f5:de: 04:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:05:17:ED:03:2C:2F:0C:58:F4:1B:FC:41:6F:32:5A:F0:0E:E4:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78b240b6-9633-344f-9d5e-58a36b9bbc21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:fc:92:8f:11:67:40:bd:ea:4e:6b:66:f8:1f:17:cd:63:79: 99:d0:d1:af:3a:03:47:cc:19:a0:f8:ca:aa:f4:ba:bc:6f:83: 0e:40:0b:54:0c:7c:49:9e:89:10:74:73:18:e9:e6:2b:fe:ac: 43:a8:4c:51:cf:2e:12:b6:18:7c:cc:71:36:f6:df:72:e7:32: 5e:f7:38:9d:56:5f:39:0a:61:70:61:97:de:6b:9f:04:cc:1f: 52:30:34:09:65:e4:a5:da:5b:73:de:0f:6b:c9:b6:58:9e:0a: 99:f2:c4:01:ac:54:cf:b8:32:6d:18:25:94:7d:dc:77:f6:01: 26:b9:58:87:d0:97:69:28:b2:7b:21:38:82:52:b2:68:ed:2d: fe:91:6f:99:ac:f0:98:cf:e6:47:73:7b:c7:0e:98:34:1e:e6: ec:c7:a5:04:ec:90:1a:52:9c:3d:32:ea:91:15:55:86:ba:f3: b5:4c:af:a8:f4:24:33:55:8a:82:cd:ff:7b:8d:eb:cf:78:5c: 12:52:bb:a1:ea:26:ff:fd:f4:dc:d8:cf:c9:2d:71:51:ff:c0: f6:fa:1e:fd:3e:be:aa:1d:d5:8b:3d:06:70:fd:22:18:a0:2b: 53:26:89:20:0c:de:ae:56:12:be:00:18:ac:84:f6:58:34:c3: 72:76:bd:f4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBnk/RUniUSIqxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk YzY2M2MyOTYtN2FhNC00OTY5LThmM2QtZTVjOWVkN2U2YTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpr3GWwNyE/4lKetm7QIRE+MKdhzHjxANsH/ n3fIhQpYr9b2JC84VAjmZXPpbZMyYQHrjwEVaqLjZYyoNAKYrqcCbEP97VrOkYAJ L6NNpLQ7QyTpN2TDSwNLzcBUG3fQil2N5Wx13TBxyRBofdBwidN6WRykMD4C3Rzo Csc2SAOh35CU0hG0QXbFxkKvMeUfJD55PwlctZFBPm85BrgheKfsGnf0G3dD8jkp Bob2+zex4SgWNb/lLr1qWGfKjdCUfRq92cs91mn2rC6zwdnAX63ssQ+iy22+qv9m R39FdJ0n+SWDiUMn18tmaV65cXQpAgm3DqU7MgJHuAlS9d4EIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC8FF+0DLC8MWPQb/EFvMlrwDuTDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzhiMjQwYjYtOTYzMy0z NDRmLTlkNWUtNThhMzZiOWJiYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA3/JKPEWdAvepOa2b4HxfNY3mZ0NGvOgNHzBmg+Mqq9Lq8b4MOQAtU DHxJnokQdHMY6eYr/qxDqExRzy4Sthh8zHE29t9y5zJe9zidVl85CmFwYZfea58E zB9SMDQJZeSl2ltz3g9rybZYngqZ8sQBrFTPuDJtGCWUfdx39gEmuViH0JdpKLJ7 ITiCUrJo7S3+kW+ZrPCYz+ZHc3vHDpg0Hubsx6UE7JAaUpw9MuqRFVWGuvO1TK+o 9CQzVYqCzf97jevPeFwSUruh6ib//fTc2M/JLXFR/8D2+h79Pr6qHdWLPQZw/SIY oCtTJokgDN6uVhK+ABishPZYNMNydr30 -----END CERTIFICATE-----Generated at Fri Apr 11 22:30:56 2025 by rpki-client