$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed6415c4-6910-3a02-97fd-35a1a2d3c454.roa File: ed6415c4-6910-3a02-97fd-35a1a2d3c454.roa (raw, json) Hash identifier: XOzBSfVhLh2dEG/OxtwE6bpah6Zh0q+EKPsK5N+Uj5I= Subject key identifier: 63:BE:97:65:29:ED:C2:FB:C6:7A:64:7A:C6:F0:47:1A:D2:89:30:F0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E00684F8520588498751F280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed6415c4-6910-3a02-97fd-35a1a2d3c454.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 397195 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:84:f8:52:05:88:49:87:51:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=be6bfd44-2949-4929-b98e-1ca345e662e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6a:d9:9d:59:69:47:0b:a3:63:86:05:ee:fc: bb:c8:6c:89:e8:41:67:4b:6b:a7:9b:9c:24:10:b2: a1:f8:44:f0:2e:51:66:c9:35:6d:55:2c:c4:26:6f: b9:e8:0e:31:b6:6b:36:f1:b5:e5:dc:49:0d:d3:bc: ba:94:87:ae:11:f3:32:da:bb:7b:d0:2d:39:db:06: 48:53:61:e9:59:a7:a9:c2:5b:6e:16:55:b9:74:99: 33:18:23:11:02:a1:27:61:57:8b:3b:9c:8d:2f:1a: 14:b0:a4:c1:4e:97:ab:06:c1:df:5c:0f:ad:9a:9c: 0b:ae:c0:f6:c4:cb:3e:f9:f3:ef:a8:7f:c6:77:b7: e8:a0:6e:e1:e8:28:25:21:c5:79:6c:58:57:f8:12: 3c:f1:2e:4a:3a:83:2d:0f:69:f2:6d:0e:4a:3d:5b: f4:c5:40:ed:3c:fd:6a:05:4a:ee:f3:44:e5:d8:bf: ea:fe:e1:4a:38:ad:a7:53:a6:2c:22:ba:ae:b8:f8: c8:3c:6e:c6:8c:8f:9a:57:76:ac:be:b9:2d:f4:47: 71:e0:a7:ff:cb:ba:f4:6c:dc:8e:f1:ff:c2:e7:ee: 4c:95:49:78:39:56:5c:67:dd:49:8b:35:86:86:82: c9:25:a4:92:2e:23:76:29:cd:af:c6:42:61:6d:40: f9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BE:97:65:29:ED:C2:FB:C6:7A:64:7A:C6:F0:47:1A:D2:89:30:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed6415c4-6910-3a02-97fd-35a1a2d3c454.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:bd:6d:ee:a2:38:f2:8b:b5:fc:ca:4a:37:74:b3:97:a2:4c: 1b:a4:24:e0:d1:b0:c1:ca:53:5d:96:a6:b1:c7:e1:bb:fe:38: 04:eb:ec:d8:c7:b4:e5:5d:5c:07:4c:8a:40:5f:56:f5:01:cf: 06:84:17:1d:6d:71:10:a4:47:15:16:15:f0:65:a3:c6:9d:44: 09:a1:00:d1:78:86:db:b7:87:e0:6f:42:da:8c:9d:7e:6f:08: b9:4f:d0:31:d5:75:e2:4b:2d:6e:14:67:26:7b:d4:af:9f:2c: c9:89:1e:b3:fa:a2:fe:f1:d7:46:bc:ae:25:d8:6c:a6:21:f6: 33:28:55:31:3f:64:e6:36:80:1c:b5:58:c6:64:f2:47:92:63: d0:cc:87:7b:77:29:93:0e:25:d2:91:ab:76:d9:e7:7c:e3:a7: dd:3a:0f:86:ee:06:24:d7:51:c1:df:95:4e:b8:b6:d3:cd:2d: 22:78:7f:e3:03:17:59:ba:2e:f4:56:4b:b3:1d:e2:3d:9a:62: 05:b2:3e:c2:3e:1e:e0:70:ff:02:dc:c5:7d:ff:49:a7:0d:b4: f4:8b:2f:1c:43:ba:57:c6:1b:67:d1:ae:eb:3a:d2:98:c3:c4: a8:0c:27:02:ce:72:4c:60:37:79:96:39:3e:f8:39:cf:a9:b1: f3:34:06:1f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBoT4UgWISYdR8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk YmU2YmZkNDQtMjk0OS00OTI5LWI5OGUtMWNhMzQ1ZTY2MmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGrZnVlpRwujY4YF7vy7yGyJ6EFnS2unm5wk ELKh+ETwLlFmyTVtVSzEJm+56A4xtms28bXl3EkN07y6lIeuEfMy2rt70C052wZI U2HpWaepwltuFlW5dJkzGCMRAqEnYVeLO5yNLxoUsKTBTperBsHfXA+tmpwLrsD2 xMs++fPvqH/Gd7fooG7h6CglIcV5bFhX+BI88S5KOoMtD2nybQ5KPVv0xUDtPP1q BUru80Tl2L/q/uFKOK2nU6YsIrquuPjIPG7GjI+aV3asvrkt9Edx4Kf/y7r0bNyO 8f/C5+5MlUl4OVZcZ91JizWGhoLJJaSSLiN2Kc2vxkJhbUD5NQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGO+l2Up7cL7xnpkesbwRxrSiTDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWQ2NDE1YzQtNjkxMC0z YTAyLTk3ZmQtMzVhMWEyZDNjNDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB/vW3uojjyi7X8yko3dLOXokwbpCTg0bDBylNdlqaxx+G7/jgE6+zY x7TlXVwHTIpAX1b1Ac8GhBcdbXEQpEcVFhXwZaPGnUQJoQDReIbbt4fgb0LajJ1+ bwi5T9Ax1XXiSy1uFGcme9SvnyzJiR6z+qL+8ddGvK4l2GymIfYzKFUxP2TmNoAc tVjGZPJHkmPQzId7dymTDiXSkat22ed846fdOg+G7gYk11HB35VOuLbTzS0ieH/j AxdZui70VkuzHeI9mmIFsj7CPh7gcP8C3MV9/0mnDbT0iy8cQ7pXxhtn0a7rOtKY w8SoDCcCznJMYDd5ljk++DnPqbHzNAYf -----END CERTIFICATE-----Generated at Sat Apr 12 00:03:14 2025 by rpki-client