$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbae136a-600c-3ec1-8570-5618e3baf9b7.roa File: dbae136a-600c-3ec1-8570-5618e3baf9b7.roa (raw, json) Hash identifier: yXEfcz1pExVUAHUv0VxyaIpREhLNQP5JtQzIpvIHWM4= Subject key identifier: F8:C5:76:59:4B:D9:89:68:CE:A9:25:25:D2:5B:01:BC:D3:A9:CD:8F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E0068301C5E02EAF5A77BA88 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbae136a-600c-3ec1-8570-5618e3baf9b7.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 36631 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:83:01:c5:e0:2e:af:5a:77:ba:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=d86cfe11-4b92-468c-8c9b-2210f42b88ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d2:d4:32:b9:09:86:c3:49:52:a5:c6:1e:5a: d8:c9:e9:b5:0a:d8:cf:ca:62:da:17:8e:47:d8:bb: 4b:42:d9:37:28:d7:d0:0d:55:af:2d:de:f7:8a:0d: ee:55:84:c9:6c:66:0c:4f:26:79:6b:bc:19:15:7b: 91:48:2e:51:aa:eb:4c:9d:80:70:72:75:89:12:52: 4e:47:31:09:6c:42:5d:a1:fe:67:b2:59:47:42:0d: 7d:5a:b0:37:f4:5d:ba:2e:25:de:46:c1:4e:36:15: 04:08:af:9d:b9:1b:f8:6c:bf:ba:71:e6:39:74:3d: b9:9a:b1:a5:26:00:2c:a8:25:83:11:11:b6:ea:9c: 50:84:48:23:26:10:90:d8:7c:8a:1d:30:c3:4d:d8: 46:d1:d7:1f:59:a0:08:11:89:fa:ce:0b:ed:ff:a4: 1a:f9:f2:37:7f:be:a2:80:08:23:bc:35:d7:b2:de: 51:17:a8:d5:83:bc:a0:5a:6c:8d:02:f2:4c:34:07: 65:cf:23:e6:32:d2:08:7b:04:93:9d:21:14:43:69: 1f:53:ff:50:ee:2c:86:31:d3:26:f7:70:0d:3c:27: 06:b4:0d:b2:3c:db:39:61:88:cd:35:13:83:75:47: 49:dd:bb:f5:66:44:3c:43:1c:ce:3f:68:89:16:0e: dd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C5:76:59:4B:D9:89:68:CE:A9:25:25:D2:5B:01:BC:D3:A9:CD:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbae136a-600c-3ec1-8570-5618e3baf9b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:e7:ca:48:b8:d3:b3:82:c5:69:d9:79:af:f1:0a:a8:65:0a: fb:fb:15:51:82:b6:24:78:71:16:0c:a1:48:c3:d2:bd:46:0f: ec:ae:11:fd:fe:93:44:d3:b6:86:c3:29:2b:f9:15:18:cc:d4: c8:0c:c1:4f:3e:eb:2e:ef:cc:95:06:90:68:6f:99:82:72:b3: ca:ff:00:b1:5c:cc:c4:bb:03:6f:9f:40:cb:a7:c3:35:1e:a8: 2c:38:c6:34:25:1d:90:4d:31:48:af:56:51:cc:12:60:66:c1: fc:13:0a:bf:d4:cd:d3:64:26:28:47:6b:5a:c9:db:cd:7c:c9: 41:cc:f6:a4:f1:c3:41:27:f8:a5:22:70:c8:18:62:04:95:97: f6:69:c1:fa:fb:c4:f1:1a:9f:ec:44:cd:57:eb:61:8a:2c:34: 87:0c:d4:88:db:3c:63:fb:12:e2:89:5f:81:3a:83:2f:99:a4: 7d:7a:f6:52:49:e4:10:4e:83:07:cc:63:9f:e7:ff:27:66:aa: 55:7f:ee:36:67:8e:96:35:6b:4c:f5:f8:81:81:06:5c:a8:a2: b2:38:df:55:32:cd:5d:3e:70:e3:5d:ab:ce:ec:06:bc:da:72: 7c:06:77:c0:3c:9d:fb:45:84:00:de:e5:cb:75:6b:4c:44:b3: f4:a4:8e:78 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBoMBxeAur1p3uogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZDg2Y2ZlMTEtNGI5Mi00NjhjLThjOWItMjIxMGY0MmI4OGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndLUMrkJhsNJUqXGHlrYyem1CtjPymLaF45H 2LtLQtk3KNfQDVWvLd73ig3uVYTJbGYMTyZ5a7wZFXuRSC5RqutMnYBwcnWJElJO RzEJbEJdof5nsllHQg19WrA39F26LiXeRsFONhUECK+duRv4bL+6ceY5dD25mrGl JgAsqCWDERG26pxQhEgjJhCQ2HyKHTDDTdhG0dcfWaAIEYn6zgvt/6Qa+fI3f76i gAgjvDXXst5RF6jVg7ygWmyNAvJMNAdlzyPmMtIIewSTnSEUQ2kfU/9Q7iyGMdMm 93ANPCcGtA2yPNs5YYjNNRODdUdJ3bv1ZkQ8QxzOP2iJFg7dhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPjFdllL2YlozqklJdJbAbzTqc2PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGJhZTEzNmEtNjAwYy0z ZWMxLTg1NzAtNTYxOGUzYmFmOWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBi58pIuNOzgsVp2Xmv8QqoZQr7+xVRgrYkeHEWDKFIw9K9Rg/srhH9 /pNE07aGwykr+RUYzNTIDMFPPusu78yVBpBob5mCcrPK/wCxXMzEuwNvn0DLp8M1 HqgsOMY0JR2QTTFIr1ZRzBJgZsH8Ewq/1M3TZCYoR2taydvNfMlBzPak8cNBJ/il InDIGGIElZf2acH6+8TxGp/sRM1X62GKLDSHDNSI2zxj+xLiiV+BOoMvmaR9evZS SeQQToMHzGOf5/8nZqpVf+42Z46WNWtM9fiBgQZcqKKyON9VMs1dPnDjXavO7Aa8 2nJ8BnfAPJ37RYQA3uXLdWtMRLP0pI54 -----END CERTIFICATE-----Generated at Fri Apr 11 23:45:25 2025 by rpki-client