$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9bdb552-3747-3060-8c91-220dceab6cf6.roa File: c9bdb552-3747-3060-8c91-220dceab6cf6.roa (raw, json) Hash identifier: AetJ9BzPCNnmSHB1bMvbXb8GwappYYMJmSf7tYgqH9g= Subject key identifier: 80:8B:0F:66:E9:35:F3:1B:E0:B8:C6:98:E9:2C:81:68:55:90:B0:2C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849BF3F7FB96E945CF707D83040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9bdb552-3747-3060-8c91-220dceab6cf6.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 397196 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:7f:b9:6e:94:5c:f7:07:d8:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=2a32d00a-a910-4c4f-a239-6c0abee22104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:33:12:9f:9a:ad:f5:64:46:8d:2d:97:e8:f8: 43:bf:b4:8a:8d:d0:12:61:c0:68:bc:51:78:64:c8: 2c:36:5c:4d:d1:77:c8:83:9c:cd:18:3d:a4:ca:8e: 37:1a:76:09:8e:f0:e5:17:2a:eb:9f:50:38:1c:89: b8:83:1e:d8:69:6c:ca:f9:21:64:fc:1c:4e:00:2e: a6:9d:af:48:fb:58:08:6d:ab:b6:50:37:49:11:c3: f0:d2:89:b6:e5:13:8e:74:78:c8:f6:d5:f8:f3:86: 7d:6a:a0:4a:b0:43:66:c5:90:c1:86:57:33:d6:4d: 3a:c3:ca:04:5b:df:50:a4:ea:a7:67:10:c1:33:90: ca:ca:3a:e8:07:c6:55:12:ef:be:98:b0:17:72:11: 1c:07:b4:34:e0:eb:6c:e6:3e:dc:c3:03:0e:5c:a4: f1:21:a7:cf:4b:b5:12:3d:1d:75:77:29:b0:8b:35: c8:8d:f6:83:b1:e2:c7:55:f1:3b:f4:82:0f:b6:0f: 3b:20:50:18:21:73:f3:1e:f1:a4:fe:96:cd:0e:14: d7:08:b0:0d:69:d3:ea:61:94:35:47:dd:24:e1:7b: 46:8a:78:79:8e:bb:f2:7a:5e:04:01:c3:4a:c5:9b: 32:62:5a:71:db:3e:df:c9:4a:28:89:15:2f:5b:41: 0f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8B:0F:66:E9:35:F3:1B:E0:B8:C6:98:E9:2C:81:68:55:90:B0:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9bdb552-3747-3060-8c91-220dceab6cf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:18:52:9a:7e:e5:5f:75:29:8b:48:94:10:36:93:ee:57:ea: 46:9e:ae:ba:63:0b:ff:b9:c7:a3:14:bc:d0:f4:9c:e0:59:3d: ae:2d:43:27:37:23:33:a8:9c:64:49:52:57:d7:4b:b8:7b:56: a4:3a:16:e5:44:4f:67:fc:2d:57:20:22:2a:60:47:64:e1:7c: 07:66:61:5e:3c:35:30:e4:d0:9c:8f:9b:cf:e8:63:6a:ae:ae: fd:d0:68:93:2c:35:91:eb:b0:f0:3f:d0:39:a7:fb:69:54:6c: e7:fa:32:69:d2:63:0d:78:9c:19:7e:75:42:09:8b:ae:4f:b6: cf:7d:82:41:7c:bc:75:cb:d1:5e:b4:80:b5:a1:67:37:f6:4c: 7c:93:41:d6:e4:1b:b5:0c:1f:00:11:02:62:f0:71:1e:0a:e9: bc:e0:3d:b9:a4:a4:fc:c0:fa:33:4f:ee:97:60:b4:17:93:63: 37:3d:be:4b:19:22:03:7b:79:f1:8b:00:41:e6:0b:41:4e:06: 4b:95:ac:25:60:3a:ea:a4:14:03:a7:7a:61:fd:68:e5:70:e7: e7:f8:1d:e8:57:b0:56:72:7f:90:2e:31:fe:fa:3d:2e:e7:53: 8a:8f:19:07:62:e6:b4:12:73:b5:01:07:10:1d:15:2a:87:e1: a7:da:0c:14 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P3+5bpRc9wfYMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MmEzMmQwMGEtYTkxMC00YzRmLWEyMzktNmMwYWJlZTIyMTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzMSn5qt9WRGjS2X6PhDv7SKjdASYcBovFF4 ZMgsNlxN0XfIg5zNGD2kyo43GnYJjvDlFyrrn1A4HIm4gx7YaWzK+SFk/BxOAC6m na9I+1gIbau2UDdJEcPw0om25ROOdHjI9tX484Z9aqBKsENmxZDBhlcz1k06w8oE W99QpOqnZxDBM5DKyjroB8ZVEu++mLAXchEcB7Q04Ots5j7cwwMOXKTxIafPS7US PR11dymwizXIjfaDseLHVfE79IIPtg87IFAYIXPzHvGk/pbNDhTXCLANadPqYZQ1 R90k4XtGinh5jrvyel4EAcNKxZsyYlpx2z7fyUooiRUvW0EPQQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFICLD2bpNfMb4LjGmOksgWhVkLAsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzliZGI1NTItMzc0Ny0z MDYwLThjOTEtMjIwZGNlYWI2Y2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBgGFKafuVfdSmLSJQQNpPuV+pGnq66Ywv/ucejFLzQ9JzgWT2uLUMn NyMzqJxkSVJX10u4e1akOhblRE9n/C1XICIqYEdk4XwHZmFePDUw5NCcj5vP6GNq rq790GiTLDWR67DwP9A5p/tpVGzn+jJp0mMNeJwZfnVCCYuuT7bPfYJBfLx1y9Fe tIC1oWc39kx8k0HW5Bu1DB8AEQJi8HEeCum84D25pKT8wPozT+6XYLQXk2M3Pb5L GSIDe3nxiwBB5gtBTgZLlawlYDrqpBQDp3ph/WjlcOfn+B3oV7BWcn+QLjH++j0u 51OKjxkHYua0EnO1AQcQHRUqh+Gn2gwU -----END CERTIFICATE-----Generated at Fri Jun 6 19:38:32 2025 by rpki-client