$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b56f7d81-9051-36a6-8a45-aa2311e3df96.roa File: b56f7d81-9051-36a6-8a45-aa2311e3df96.roa (raw, json) Hash identifier: 0axAnEviAggMu5klAJRoiZFgGDMAcNYmujEyHYck8zg= Subject key identifier: A4:7C:CB:A6:53:21:B6:0F:1A:11:12:1E:3E:BA:B3:0B:E8:64:34:D5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E0067A5F1F317B48C3C7CD00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b56f7d81-9051-36a6-8a45-aa2311e3df96.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396582 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:7a:5f:1f:31:7b:48:c3:c7:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=db5bae4e-8a4e-463e-a425-71423cd23a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:e2:cd:ee:83:70:a2:8e:45:a5:6b:46:3d: 1d:ae:f6:17:f8:37:0f:73:ae:06:a3:b6:67:63:68: 0f:b9:a8:1f:aa:9e:a8:f3:24:f7:e1:23:b0:78:41: 9f:c7:08:aa:35:8b:66:89:e6:0a:43:f0:47:d7:39: 8b:ad:b9:a2:53:26:3a:bb:6d:f5:2f:0e:88:96:38: b0:ac:83:60:86:58:e1:9d:e8:ea:c0:a5:5e:c8:b8: 24:3f:0d:89:43:c1:27:69:c4:75:a6:69:b0:77:ac: 6a:67:a4:d6:c4:0e:54:6b:08:f7:b6:d5:1a:bd:e7: 23:36:57:96:15:39:84:fc:cb:30:30:64:94:cd:2b: fe:fb:0f:be:fa:4c:86:b7:79:7c:d5:37:2b:77:57: bd:4f:0a:97:f8:20:ac:87:e9:31:ab:d5:12:74:f4: 7a:1e:a0:0c:7c:e2:46:71:b7:3c:f8:92:72:96:b9: 5b:06:24:b5:7a:cf:bc:2e:db:77:9e:29:1c:99:80: c7:42:53:d2:1f:8d:c8:40:56:18:1a:88:bb:bd:aa: c8:e0:fa:c1:2a:70:c0:ba:b8:72:1f:3b:22:f7:69: 2a:29:93:08:d8:52:b4:06:44:19:48:15:84:8f:f4: a2:b9:7f:3e:f5:03:a2:33:9f:c8:96:3c:55:ca:c4: a6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7C:CB:A6:53:21:B6:0F:1A:11:12:1E:3E:BA:B3:0B:E8:64:34:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b56f7d81-9051-36a6-8a45-aa2311e3df96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:81:6b:c9:fe:84:1f:6f:88:40:4e:72:00:0d:45:69:92:bb: f3:04:c4:5a:07:7d:68:18:82:3e:58:40:ab:13:64:cd:c5:c7: f3:bf:8d:d3:96:11:2d:38:e6:c0:ae:8a:75:4a:ae:fd:43:03: d4:37:92:95:34:a6:47:6d:46:b4:88:91:72:a3:19:f5:ac:a5: 04:3f:6f:bf:6b:ce:be:ba:bd:10:3c:4b:75:7f:85:06:b1:d5: a7:4d:6c:21:7a:cd:2c:f9:fd:da:30:cf:6d:22:db:d8:3e:07: 8f:19:a9:9c:0d:86:80:be:92:7a:ad:9e:8b:eb:af:8d:dd:a1: 40:6c:93:0a:2c:2f:1c:58:4f:91:6e:1f:c2:cc:a2:30:12:6a: 7f:08:9b:7e:85:4d:f6:9f:81:e0:69:f5:d7:c7:94:2e:71:8a: d6:9a:43:f2:c2:02:1e:35:26:77:29:25:d6:f0:6e:05:1f:90: 0c:e8:26:13:79:60:96:b3:de:f5:0e:5a:71:74:86:98:2d:0f: 1c:5b:64:af:0b:9b:99:8f:53:ca:4a:44:35:19:f7:ce:f5:5a: 2a:f8:05:91:b7:b2:a1:f1:1d:c0:07:82:38:8e:42:75:44:ee: 27:1a:20:d2:4d:f8:19:2d:00:cd:e3:b9:e7:4b:ab:72:92:22: d1:98:86:10 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBnpfHzF7SMPHzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZGI1YmFlNGUtOGE0ZS00NjNlLWE0MjUtNzE0MjNjZDIzYTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvXize6DcKKORaVrRj0drvYX+DcPc64Go7Zn Y2gPuagfqp6o8yT34SOweEGfxwiqNYtmieYKQ/BH1zmLrbmiUyY6u231Lw6Iljiw rINghljhnejqwKVeyLgkPw2JQ8EnacR1pmmwd6xqZ6TWxA5Uawj3ttUavecjNleW FTmE/MswMGSUzSv++w+++kyGt3l81Tcrd1e9TwqX+CCsh+kxq9USdPR6HqAMfOJG cbc8+JJylrlbBiS1es+8Ltt3nikcmYDHQlPSH43IQFYYGoi7varI4PrBKnDAurhy Hzsi92kqKZMI2FK0BkQZSBWEj/SiuX8+9QOiM5/IljxVysSmoQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKR8y6ZTIbYPGhESHj66swvoZDTVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjU2ZjdkODEtOTA1MS0z NmE2LThhNDUtYWEyMzExZTNkZjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCDgWvJ/oQfb4hATnIADUVpkrvzBMRaB31oGII+WECrE2TNxcfzv43T lhEtOObArop1Sq79QwPUN5KVNKZHbUa0iJFyoxn1rKUEP2+/a86+ur0QPEt1f4UG sdWnTWwhes0s+f3aMM9tItvYPgePGamcDYaAvpJ6rZ6L66+N3aFAbJMKLC8cWE+R bh/CzKIwEmp/CJt+hU32n4HgafXXx5QucYrWmkPywgIeNSZ3KSXW8G4FH5AM6CYT eWCWs971DlpxdIaYLQ8cW2SvC5uZj1PKSkQ1GffO9Voq+AWRt7Kh8R3AB4I4jkJ1 RO4nGiDSTfgZLQDN47nnS6tykiLRmIYQ -----END CERTIFICATE-----Generated at Sat Apr 12 00:05:25 2025 by rpki-client