$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21c8994c-b7a9-3921-a776-411828754690.roa File: 21c8994c-b7a9-3921-a776-411828754690.roa (raw, json) Hash identifier: BgqPwIhxluENrWut1l83+qbbbbnwh0FQsQN3jUx/7fY= Subject key identifier: 7C:66:7D:54:76:D4:78:96:75:76:D5:E2:8E:2E:87:CB:6E:AD:5F:83 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E00680F13CFE732C3A5E5040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21c8994c-b7a9-3921-a776-411828754690.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396614 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:80:f1:3c:fe:73:2c:3a:5e:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=72f52ed8-575d-489d-b9ec-486ce10953f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:54:8f:dd:45:30:6b:4f:e7:19:42:07:f5:ce: d3:11:b0:91:4e:5d:52:32:ce:a4:72:ba:4f:2a:c8: 7f:3f:24:48:5d:f1:1b:e5:01:29:9f:2e:98:49:35: 94:ce:23:c8:34:a7:93:36:84:50:b4:a3:4b:ff:d9: 99:e8:45:76:63:b5:9a:69:9e:c0:07:19:4d:88:d1: b1:bb:57:30:6f:44:42:4e:37:f0:1c:9b:77:92:36: a4:90:15:0f:75:ad:21:55:34:c0:6a:b0:aa:a7:54: e5:3a:17:5d:fd:c8:2f:17:16:e1:9c:47:63:bc:e0: 68:4f:63:7c:6d:a8:21:5b:03:19:9e:a2:59:25:1d: 00:0c:7e:e2:4a:a4:9e:19:d3:b3:c4:c9:6e:66:86: 40:20:c5:b1:81:5a:f1:a1:3e:3f:a8:cf:58:08:b0: f4:34:ef:0e:8f:0e:1e:fc:35:0d:79:e1:8d:74:e1: 11:e5:f9:66:02:6e:48:46:84:44:00:7f:5c:a0:32: eb:0f:53:50:3e:38:74:4d:84:7b:05:91:b9:b5:86: 43:4a:59:8a:14:ba:d4:a3:d5:4f:46:9b:51:a3:ff: 57:b0:24:60:b7:50:66:4e:e0:f4:10:82:67:68:9d: a8:ff:ad:a7:b4:d6:a1:8f:ac:f6:0c:3c:80:7f:95: f6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:66:7D:54:76:D4:78:96:75:76:D5:E2:8E:2E:87:CB:6E:AD:5F:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21c8994c-b7a9-3921-a776-411828754690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:9e:31:fa:14:86:0e:d8:1b:2d:e4:3d:a1:65:49:26:36:e7: fd:a1:81:7a:07:7a:0b:16:f4:44:18:2f:c0:7f:6d:39:d4:b2: 3d:c2:b4:98:c5:36:7f:27:3c:fe:28:a1:53:15:4c:6f:cb:7f: 36:53:cb:df:0d:13:8a:c0:59:a0:4f:aa:1d:cb:53:29:af:69: ab:02:8d:8f:2a:4f:8a:ce:75:36:11:1b:87:44:80:68:6f:01: 81:7f:1f:2b:58:60:12:73:4e:62:82:f7:46:d4:4e:fa:f0:1a: dc:4b:51:6a:08:b1:0c:52:61:21:88:64:70:00:54:28:96:49: d4:d0:12:28:7a:73:3c:b9:63:6f:c7:5c:b0:2b:10:2a:23:89: 87:8e:d0:35:ae:5d:2e:9c:4b:e5:1a:02:1d:f2:23:f2:f7:8c: c0:6b:14:c7:d9:b4:f3:aa:7e:7f:38:18:30:e2:cb:bd:32:31: 25:b2:b4:42:52:f8:ef:49:53:b0:bf:99:f2:a2:3b:ba:38:48: 05:d3:78:b5:ae:f3:33:e9:59:ae:d3:98:07:d0:1b:97:fc:6f: f7:80:be:89:09:b4:dc:bf:9c:72:1e:62:86:59:de:b2:83:ce: d4:56:d4:f3:05:e4:46:02:71:89:90:9c:61:9b:ad:f5:83:ac: fb:a4:3f:a6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBoDxPP5zLDpeUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk NzJmNTJlZDgtNTc1ZC00ODlkLWI5ZWMtNDg2Y2UxMDk1M2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFSP3UUwa0/nGUIH9c7TEbCRTl1SMs6kcrpP Ksh/PyRIXfEb5QEpny6YSTWUziPINKeTNoRQtKNL/9mZ6EV2Y7WaaZ7ABxlNiNGx u1cwb0RCTjfwHJt3kjakkBUPda0hVTTAarCqp1TlOhdd/cgvFxbhnEdjvOBoT2N8 baghWwMZnqJZJR0ADH7iSqSeGdOzxMluZoZAIMWxgVrxoT4/qM9YCLD0NO8Ojw4e /DUNeeGNdOER5flmAm5IRoREAH9coDLrD1NQPjh0TYR7BZG5tYZDSlmKFLrUo9VP RptRo/9XsCRgt1BmTuD0EIJnaJ2o/62ntNahj6z2DDyAf5X2PwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHxmfVR21HiWdXbV4o4uh8turV+DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjFjODk5NGMtYjdhOS0z OTIxLWE3NzYtNDExODI4NzU0NjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCAnjH6FIYO2Bst5D2hZUkmNuf9oYF6B3oLFvREGC/Af2051LI9wrSY xTZ/Jzz+KKFTFUxvy382U8vfDROKwFmgT6ody1Mpr2mrAo2PKk+KznU2ERuHRIBo bwGBfx8rWGASc05igvdG1E768BrcS1FqCLEMUmEhiGRwAFQolknU0BIoenM8uWNv x1ywKxAqI4mHjtA1rl0unEvlGgId8iPy94zAaxTH2bTzqn5/OBgw4su9MjElsrRC UvjvSVOwv5nyoju6OEgF03i1rvMz6Vmu05gH0BuX/G/3gL6JCbTcv5xyHmKGWd6y g87UVtTzBeRGAnGJkJxhm631g6z7pD+m -----END CERTIFICATE-----Generated at Sun Apr 27 19:05:01 2025 by rpki-client