$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9cb4987d-c75d-3bd7-897f-3ec573392edf.roa File: 9cb4987d-c75d-3bd7-897f-3ec573392edf.roa (raw, json) Hash identifier: 4lUiqVOVeRTvXouaCHDiYg0BS5+nu+o3OEO8fgJx26U= Subject key identifier: 0B:82:41:62:70:17:F6:BC:FD:AE:09:6A:B5:E7:79:6F:E4:6F:F9:C1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E006800D8F08616BE946C900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9cb4987d-c75d-3bd7-897f-3ec573392edf.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 36619 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:80:0d:8f:08:61:6b:e9:46:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=42757646-5eab-4ab3-a16c-8c45ffcb45ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:47:11:5d:29:4d:4a:f6:e8:94:f3:40:4b:63: ab:c9:d1:b5:9e:fc:d1:03:19:ee:05:ac:ef:4d:e6: e3:bf:02:5a:af:99:b6:40:8d:24:b8:d4:2f:87:a6: a8:1d:61:21:03:20:7e:53:01:fc:39:b3:0f:99:4c: 88:51:8f:17:1b:b9:55:65:37:25:f1:04:4d:1e:22: 00:8f:91:9e:85:29:92:bb:f2:f1:04:55:86:f6:08: b3:d9:1c:fe:41:cc:f7:01:26:e5:ee:a8:ae:35:c1: 39:f6:7a:ba:61:88:0b:90:37:ca:48:13:09:b5:6b: aa:f8:03:04:5f:f1:ba:82:5a:b3:14:e8:c5:ea:61: 04:1c:f8:2c:4d:8f:f9:ef:63:1b:d8:d8:be:98:ea: 71:13:0d:f5:ee:68:d7:03:6c:77:8d:1f:ad:89:97: 70:0d:df:2c:00:77:77:a9:55:bd:a4:be:18:d9:d6: dc:eb:ef:e4:96:1a:31:5d:7d:06:1b:4d:2a:73:58: db:64:f7:78:0b:7f:6d:21:9c:04:da:7e:b6:c5:73: 02:32:af:e8:7d:06:e6:c9:d1:7e:c6:fd:83:f9:0e: 3b:d6:2d:62:9b:89:c1:65:49:c5:da:f4:be:a8:cb: 6b:a6:f2:1c:bd:4d:76:09:9b:36:e4:9c:69:43:58: 90:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:82:41:62:70:17:F6:BC:FD:AE:09:6A:B5:E7:79:6F:E4:6F:F9:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9cb4987d-c75d-3bd7-897f-3ec573392edf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:ad:53:b2:5c:96:77:49:ae:5c:d9:6b:b8:3d:82:40:bd:25: 1b:f8:e7:af:ed:8c:48:70:fb:7c:55:54:83:37:41:4d:66:2b: 66:7c:16:75:bf:e4:cd:ac:f3:6c:a6:ed:06:ec:c4:4f:b2:02: 5e:c7:62:43:98:a9:0f:ed:13:2f:82:5a:38:60:c5:ca:4d:0e: f6:c7:b0:d7:d3:64:72:37:62:9b:96:52:e1:d5:0b:00:42:df: 1d:e3:5a:e2:2e:15:72:62:03:9c:5a:04:40:0c:ae:20:71:07: 9d:91:f7:6d:27:57:5d:6f:f2:c3:07:a9:4b:28:ba:59:27:ba: 6d:73:39:57:61:25:e5:e4:4a:73:9d:64:02:4f:bf:09:7f:f6: 5d:6a:5b:2f:78:75:97:44:5c:fc:21:dc:3d:7b:bf:ac:b7:5b: 8c:f8:ed:39:46:4e:c5:ca:ca:db:c2:3b:68:0d:72:7f:97:43: ee:c4:88:7e:2e:7b:aa:2d:c8:cc:a3:0c:6b:c9:aa:28:c9:b0: df:78:ed:2a:7a:54:08:69:80:f2:e7:83:ea:d2:c6:6c:11:3e: d2:fe:dc:72:e1:69:97:c1:b8:3c:2f:64:dd:2c:65:f9:ea:b3: ea:62:f5:a7:e4:a3:c2:c1:c4:e3:f9:65:5b:5a:2c:52:3a:49: 11:a2:f4:c0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBoANjwhha+lGyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk NDI3NTc2NDYtNWVhYi00YWIzLWExNmMtOGM0NWZmY2I0NWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEcRXSlNSvbolPNAS2OrydG1nvzRAxnuBazv TebjvwJar5m2QI0kuNQvh6aoHWEhAyB+UwH8ObMPmUyIUY8XG7lVZTcl8QRNHiIA j5GehSmSu/LxBFWG9giz2Rz+Qcz3ASbl7qiuNcE59nq6YYgLkDfKSBMJtWuq+AME X/G6glqzFOjF6mEEHPgsTY/572Mb2Ni+mOpxEw317mjXA2x3jR+tiZdwDd8sAHd3 qVW9pL4Y2dbc6+/klhoxXX0GG00qc1jbZPd4C39tIZwE2n62xXMCMq/ofQbmydF+ xv2D+Q471i1im4nBZUnF2vS+qMtrpvIcvU12CZs25JxpQ1iQBwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAuCQWJwF/a8/a4JarXneW/kb/nBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWNiNDk4N2QtYzc1ZC0z YmQ3LTg5N2YtM2VjNTczMzkyZWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAIrVOyXJZ3Sa5c2Wu4PYJAvSUb+Oev7YxIcPt8VVSDN0FNZitmfBZ1 v+TNrPNspu0G7MRPsgJex2JDmKkP7RMvglo4YMXKTQ72x7DX02RyN2KbllLh1QsA Qt8d41riLhVyYgOcWgRADK4gcQedkfdtJ1ddb/LDB6lLKLpZJ7ptczlXYSXl5Epz nWQCT78Jf/ZdalsveHWXRFz8Idw9e7+st1uM+O05Rk7FysrbwjtoDXJ/l0PuxIh+ LnuqLcjMowxryaooybDfeO0qelQIaYDy54Pq0sZsET7S/txy4WmXwbg8L2TdLGX5 6rPqYvWn5KPCwcTj+WVbWixSOkkRovTA -----END CERTIFICATE-----Generated at Fri Apr 11 23:43:56 2025 by rpki-client