$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/94258bd5-44af-3a3e-92ca-f06065466271.roa File: 94258bd5-44af-3a3e-92ca-f06065466271.roa (raw, json) Hash identifier: mBN/Sos/SBPmR/ILs4phiZuxELpWXWVp2oZ24NknKIE= Subject key identifier: 3A:62:79:23:80:60:2D:92:6A:63:C0:D9:F5:AB:56:86:E0:3E:DF:15 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E00678AD6D50C8F5018ECF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/94258bd5-44af-3a3e-92ca-f06065466271.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396577 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:78:ad:6d:50:c8:f5:01:8e:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=b3a0860e-9526-413f-9b92-81c34c6258ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:13:25:0c:6c:cd:9b:a0:a3:dd:ea:88:22:c1: 38:5f:e5:58:fa:40:3c:9d:3e:3a:02:1d:79:66:3b: a7:bb:0e:e2:4b:94:f8:e0:12:b0:64:64:f4:5d:8e: 8b:42:0e:6c:a8:cb:2f:3f:43:3d:07:e5:e9:31:30: 66:88:59:58:31:b2:64:87:7d:38:3c:9d:3b:d4:66: 85:0b:b7:2b:61:9a:c1:98:41:80:d6:a8:86:de:93: 6a:5b:d3:1a:ce:55:71:b4:11:b2:5a:cf:2d:56:60: a4:9f:d7:09:ff:af:70:c7:99:a1:51:b4:06:59:fe: 5e:a9:d1:be:d7:a7:d0:e0:41:18:8b:c7:0b:0c:5b: 80:6c:49:d8:70:99:a3:de:8a:5f:9b:73:b2:71:1a: 15:22:9a:6d:fc:a5:85:de:6e:de:5c:a7:6b:15:bc: 12:81:97:77:23:16:e9:62:5b:56:61:07:66:61:b8: a7:65:09:20:52:3c:77:30:62:f2:15:ae:cd:cb:bb: 76:ce:e2:37:db:e9:0c:00:85:74:0e:f7:78:7f:ec: 5d:f6:7c:c4:04:a4:b2:e6:66:40:40:f2:4a:b2:7d: 18:b7:d7:c5:a1:a8:4a:7b:05:0a:38:65:4e:53:f6: 41:70:13:e9:6c:e2:f1:b5:51:a1:5b:b9:0a:88:3d: 9a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:62:79:23:80:60:2D:92:6A:63:C0:D9:F5:AB:56:86:E0:3E:DF:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/94258bd5-44af-3a3e-92ca-f06065466271.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:bc:fb:9f:34:d3:cb:64:dc:00:c6:d8:16:0e:bd:3f:be:80: 8d:62:67:96:72:a9:01:21:9b:3e:db:25:1f:db:14:2f:9e:bf: bb:9a:5c:2e:5f:80:08:bf:1c:bf:02:43:d5:d8:fe:55:4d:f4: 65:1e:05:aa:8e:5b:7d:c6:15:7c:df:ab:92:5d:a3:56:3f:19: a5:57:1a:aa:f2:ec:80:cc:bd:35:89:8b:d2:d6:81:2c:62:92: a3:c9:74:37:30:87:d4:ed:d5:42:7d:40:4f:0e:ff:47:0d:0b: ac:e4:74:cd:8e:d5:cd:08:aa:12:ba:09:42:bf:15:43:e9:02: f4:34:af:4a:1e:5f:7f:b4:23:51:ce:2a:70:ef:c9:31:64:91: 08:c8:c0:d3:90:f6:16:a3:5f:43:67:d6:72:72:cf:c4:60:7f: c7:76:4b:cc:f5:d8:e6:c3:64:c4:f1:df:02:93:3b:d3:13:61: 65:8b:fc:c5:db:42:61:04:3f:33:c4:91:8e:0a:05:31:b8:f9: 21:8b:ed:6e:10:b5:d1:9f:9c:a1:cc:1a:3b:da:6d:a4:ca:aa: f7:05:10:fb:d2:33:55:8f:38:3d:32:2c:27:bb:e5:97:59:e7: ae:5b:82:fa:55:de:e8:d4:46:c5:74:3b:36:34:71:17:6b:dd: 7d:65:7c:9b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBnitbVDI9QGOz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk YjNhMDg2MGUtOTUyNi00MTNmLTliOTItODFjMzRjNjI1OGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhMlDGzNm6Cj3eqIIsE4X+VY+kA8nT46Ah15 Zjunuw7iS5T44BKwZGT0XY6LQg5sqMsvP0M9B+XpMTBmiFlYMbJkh304PJ071GaF C7crYZrBmEGA1qiG3pNqW9MazlVxtBGyWs8tVmCkn9cJ/69wx5mhUbQGWf5eqdG+ 16fQ4EEYi8cLDFuAbEnYcJmj3opfm3OycRoVIppt/KWF3m7eXKdrFbwSgZd3Ixbp YltWYQdmYbinZQkgUjx3MGLyFa7Ny7t2zuI32+kMAIV0Dvd4f+xd9nzEBKSy5mZA QPJKsn0Yt9fFoahKewUKOGVOU/ZBcBPpbOLxtVGhW7kKiD2aLQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDpieSOAYC2SamPA2fWrVobgPt8VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTQyNThiZDUtNDRhZi0z YTNlLTkyY2EtZjA2MDY1NDY2MjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBivPufNNPLZNwAxtgWDr0/voCNYmeWcqkBIZs+2yUf2xQvnr+7mlwu X4AIvxy/AkPV2P5VTfRlHgWqjlt9xhV836uSXaNWPxmlVxqq8uyAzL01iYvS1oEs YpKjyXQ3MIfU7dVCfUBPDv9HDQus5HTNjtXNCKoSuglCvxVD6QL0NK9KHl9/tCNR zipw78kxZJEIyMDTkPYWo19DZ9Zycs/EYH/HdkvM9djmw2TE8d8CkzvTE2Fli/zF 20JhBD8zxJGOCgUxuPkhi+1uELXRn5yhzBo72m2kyqr3BRD70jNVjzg9Miwnu+WX WeeuW4L6Vd7o1EbFdDs2NHEXa919ZXyb -----END CERTIFICATE-----Generated at Fri Apr 11 22:44:32 2025 by rpki-client