$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd4c72a8-5672-3004-8b49-d08829b1d2eb.roa File: dd4c72a8-5672-3004-8b49-d08829b1d2eb.roa (raw, json) Hash identifier: cxXiSTYQRUy8CHzgPqepCRBEJD9vtY1PvrxvEF3SK9U= Subject key identifier: 71:D2:A8:6A:95:33:38:08:8A:ED:21:AE:A5:D8:A4:46:F7:09:A4:4A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E00679D67CF45258C6E0E820 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd4c72a8-5672-3004-8b49-d08829b1d2eb.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396541 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:79:d6:7c:f4:52:58:c6:e0:e8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=d56d814e-1e6e-4b7e-927c-c8810e92180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d8:e1:41:c4:82:65:d5:5c:8f:d3:a0:34:a0: be:44:56:8e:d6:00:aa:e7:21:ec:03:51:0d:e5:08: 52:cb:c9:c2:53:8e:40:97:df:d9:c3:a4:10:3a:80: 0e:21:03:b7:52:b0:ba:89:99:b3:58:f4:3e:3b:d2: 05:f7:26:36:c6:5a:62:f2:f6:4d:e4:f4:0c:a3:84: d3:98:18:19:04:47:9a:81:80:b3:4b:db:99:99:44: 8a:a9:51:c5:7e:4d:45:5b:95:19:88:a2:10:44:1b: 57:9f:b8:f3:cd:d2:58:1c:fb:39:06:13:81:e5:1d: 18:e7:c6:bb:5a:fb:e5:17:9d:40:5e:de:e1:62:7e: 39:27:29:74:5f:f0:0a:93:85:ce:61:e3:d1:f3:4e: 90:e3:3c:c2:62:4a:61:aa:f4:a7:d0:32:15:38:43: 46:d0:f4:c0:c4:03:44:6a:6b:99:47:22:b5:1c:c4: 9a:33:7d:04:be:9d:fe:ea:85:f4:37:43:9e:41:ce: f0:26:8f:38:5e:66:92:cc:4d:d9:2a:de:36:51:c0: 05:d6:f9:08:c9:50:ee:77:95:e2:50:ac:c4:86:7d: 62:d7:1c:b2:bd:47:1b:47:52:1b:60:17:de:f4:51: bd:68:78:bd:73:5b:7c:4e:07:b8:5d:cf:c9:15:04: ba:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D2:A8:6A:95:33:38:08:8A:ED:21:AE:A5:D8:A4:46:F7:09:A4:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd4c72a8-5672-3004-8b49-d08829b1d2eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:d9:75:4b:24:15:34:e4:37:53:a1:52:95:0a:f5:e4:8f:9c: 85:6b:80:95:3c:7e:4c:48:9e:1f:03:72:22:b3:68:e6:2a:cc: ae:bb:d1:4c:be:b4:14:66:3e:5c:9d:9b:1b:56:03:65:4f:91: 89:2b:21:2a:37:92:43:52:02:bb:bb:e3:20:50:0c:30:8a:c7: c6:2a:ee:e6:4e:21:cc:19:45:df:90:a9:7e:e4:a4:62:b9:0b: ac:ed:4d:48:27:b4:37:45:d6:0a:0c:17:97:8e:47:54:59:de: 34:bf:21:02:a2:e9:31:89:dd:d9:9b:07:26:96:6b:52:36:91: ea:e9:e6:8b:70:c4:94:04:86:9b:fe:3d:76:5a:48:c3:1e:e7: 29:55:ff:7f:2a:c5:b3:9c:ba:3d:3e:19:26:99:4c:f8:15:68: 6e:f7:e5:e7:55:af:da:f5:f6:ad:6e:a9:9f:0e:86:04:58:04: 8d:b2:29:41:8f:03:7b:9f:99:0b:40:c3:b7:17:37:be:59:0b: 64:02:ab:7e:8a:cc:dc:6c:92:e1:53:1a:fb:71:dc:da:17:69: 27:7b:8c:a3:88:c9:db:45:3f:29:8b:5d:2a:3b:90:78:dd:16: 99:19:bf:df:c8:7c:4f:3d:19:48:02:70:e3:82:b7:55:1c:52: 46:48:4a:d2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBnnWfPRSWMbg6CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZDU2ZDgxNGUtMWU2ZS00YjdlLTkyN2MtYzg4MTBlOTIxODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9jhQcSCZdVcj9OgNKC+RFaO1gCq5yHsA1EN 5QhSy8nCU45Al9/Zw6QQOoAOIQO3UrC6iZmzWPQ+O9IF9yY2xlpi8vZN5PQMo4TT mBgZBEeagYCzS9uZmUSKqVHFfk1FW5UZiKIQRBtXn7jzzdJYHPs5BhOB5R0Y58a7 WvvlF51AXt7hYn45Jyl0X/AKk4XOYePR806Q4zzCYkphqvSn0DIVOENG0PTAxANE amuZRyK1HMSaM30Evp3+6oX0N0OeQc7wJo84XmaSzE3ZKt42UcAF1vkIyVDud5Xi UKzEhn1i1xyyvUcbR1IbYBfe9FG9aHi9c1t8Tge4Xc/JFQS64QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHHSqGqVMzgIiu0hrqXYpEb3CaRKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGQ0YzcyYTgtNTY3Mi0z MDA0LThiNDktZDA4ODI5YjFkMmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCO2XVLJBU05DdToVKVCvXkj5yFa4CVPH5MSJ4fA3Iis2jmKsyuu9FM vrQUZj5cnZsbVgNlT5GJKyEqN5JDUgK7u+MgUAwwisfGKu7mTiHMGUXfkKl+5KRi uQus7U1IJ7Q3RdYKDBeXjkdUWd40vyECoukxid3ZmwcmlmtSNpHq6eaLcMSUBIab /j12WkjDHucpVf9/KsWznLo9PhkmmUz4FWhu9+XnVa/a9fatbqmfDoYEWASNsilB jwN7n5kLQMO3Fze+WQtkAqt+iszcbJLhUxr7cdzaF2kne4yjiMnbRT8pi10qO5B4 3RaZGb/fyHxPPRlIAnDjgrdVHFJGSErS -----END CERTIFICATE-----Generated at Fri Apr 11 23:54:13 2025 by rpki-client