$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa File: cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa (raw, json) Hash identifier: r1XR5W/Zp1X+TP6YQKL/Vn+/FcTtudMN7rkrbWp/8fI= Subject key identifier: 52:22:12:EA:41:31:69:80:35:26:1C:A7:42:D3:E4:11:14:5E:5B:79 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E006785E4764A03C60711640 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 397200 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:78:5e:47:64:a0:3c:60:71:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=5da723b4-4d9c-46a8-8442-6b5ba4cf03c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:39:a4:53:ef:1d:a8:c6:f9:69:f9:d0:96:76: 79:95:57:3b:3c:0f:75:17:64:8b:95:58:03:60:47: 88:97:66:42:bf:9e:98:7e:bb:ae:59:ca:cc:d3:77: 47:fb:41:c9:4e:10:3b:e2:24:4e:f9:02:8a:58:b1: ba:e3:36:e3:5a:2f:76:fc:f3:5d:7f:b9:53:fb:0f: 35:ab:f1:2d:4a:f2:91:5d:07:25:01:84:39:a8:42: 36:f3:a0:64:83:4e:5b:8b:9a:1a:ce:d6:08:9d:ca: ba:96:3a:cf:ef:a7:7b:68:7d:99:e1:5b:95:32:4c: 7b:ae:7f:c4:af:74:b3:88:d1:39:3e:8b:9e:b0:40: a4:0f:5a:d5:88:9b:e9:04:88:17:91:ac:ba:12:72: 5d:4b:31:44:e9:23:2c:92:fc:b3:97:59:c5:cb:a5: 39:cd:4a:b8:bb:50:bf:fe:d9:67:8b:9b:97:51:c6: 99:fb:d1:18:2b:14:85:c1:75:a8:f5:9c:1b:ee:15: e2:72:00:8c:06:e7:5c:01:db:54:17:27:b6:0e:f9: ae:4b:ba:f7:77:09:74:26:7c:36:c6:8c:8a:23:fb: e6:fc:07:e8:00:b2:dd:c2:02:d5:dd:08:ac:c0:38: cc:ad:86:c3:92:8c:32:46:50:c7:58:e7:b9:32:8e: 58:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:22:12:EA:41:31:69:80:35:26:1C:A7:42:D3:E4:11:14:5E:5B:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb8e74f8-7a2f-3d85-945a-d3e1590bbb6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b4:3c:8f:cc:b4:4e:d2:ad:ba:89:1b:50:76:ff:58:f0:03: 16:e8:13:f2:d7:85:1c:2a:ba:50:8c:d6:59:2d:e9:c1:2c:1b: 10:86:f1:bd:15:06:1c:e8:d3:dd:6c:46:85:9a:ee:ab:07:b4: 08:a4:0d:bc:f3:32:fd:02:f3:e1:ba:cd:7a:a4:e6:8c:15:8f: b9:f6:d3:43:86:bb:05:aa:7c:90:0a:d2:a6:ae:e4:e1:0a:3b: a4:e4:fe:4f:ab:3d:c7:0f:a8:c1:f3:6f:d7:57:82:b1:11:f8: 75:57:9e:b5:23:9e:53:82:08:ce:2c:63:c1:d3:23:9e:86:50: bc:bc:2a:c8:aa:0e:e8:08:78:66:16:ee:74:77:7a:b6:ed:f3: b2:1e:db:a9:03:76:42:12:24:68:d2:54:07:2e:d3:ba:50:7e: 50:16:66:c3:b2:14:15:34:bf:3c:ae:39:78:40:5f:29:cb:60: 56:22:3f:b4:e7:71:0a:73:3e:74:39:a5:a9:ca:1d:fa:75:e6: eb:ee:f6:72:00:e8:64:61:b9:d9:91:b1:b8:66:61:78:fe:f2: ac:9f:a5:b5:a1:ff:f1:e4:81:8e:4a:19:e2:e5:c4:18:37:5f: 6e:0e:c5:45:87:96:3c:e9:b7:5b:d0:7b:aa:c3:b0:0a:70:6c: 51:59:db:0d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBnheR2SgPGBxFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk NWRhNzIzYjQtNGQ5Yy00NmE4LTg0NDItNmI1YmE0Y2YwM2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDmkU+8dqMb5afnQlnZ5lVc7PA91F2SLlVgD YEeIl2ZCv56YfruuWcrM03dH+0HJThA74iRO+QKKWLG64zbjWi92/PNdf7lT+w81 q/EtSvKRXQclAYQ5qEI286Bkg05bi5oaztYIncq6ljrP76d7aH2Z4VuVMkx7rn/E r3SziNE5PouesECkD1rViJvpBIgXkay6EnJdSzFE6SMskvyzl1nFy6U5zUq4u1C/ /tlni5uXUcaZ+9EYKxSFwXWo9Zwb7hXicgCMBudcAdtUFye2DvmuS7r3dwl0Jnw2 xoyKI/vm/AfoALLdwgLV3QiswDjMrYbDkowyRlDHWOe5Mo5Y/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFIiEupBMWmANSYcp0LT5BEUXlt5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2I4ZTc0ZjgtN2EyZi0z ZDg1LTk0NWEtZDNlMTU5MGJiYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBptDyPzLRO0q26iRtQdv9Y8AMW6BPy14UcKrpQjNZZLenBLBsQhvG9 FQYc6NPdbEaFmu6rB7QIpA288zL9AvPhus16pOaMFY+59tNDhrsFqnyQCtKmruTh Cjuk5P5Pqz3HD6jB82/XV4KxEfh1V561I55TggjOLGPB0yOehlC8vCrIqg7oCHhm Fu50d3q27fOyHtupA3ZCEiRo0lQHLtO6UH5QFmbDshQVNL88rjl4QF8py2BWIj+0 53EKcz50OaWpyh36debr7vZyAOhkYbnZkbG4ZmF4/vKsn6W1of/x5IGOShni5cQY N19uDsVFh5Y86bdb0Huqw7AKcGxRWdsN -----END CERTIFICATE-----Generated at Fri Apr 11 23:39:44 2025 by rpki-client