$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3635bacf-d73e-3f47-8a82-a8a92a109fac.roa File: 3635bacf-d73e-3f47-8a82-a8a92a109fac.roa (raw, json) Hash identifier: 1ciIihz/gx4uufWJ26MChoyOk8xgs2qMsFD/i+GPnLM= Subject key identifier: 54:A8:A3:78:7C:63:59:4C:42:08:6D:15:4E:F6:83:12:B8:E5:E2:0B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E0067EA9F0C3694011C5DAC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3635bacf-d73e-3f47-8a82-a8a92a109fac.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396613 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:7e:a9:f0:c3:69:40:11:c5:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=99826593-57fd-46d8-9910-bc113a3ff66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:01:04:ed:b6:19:03:23:4c:87:d9:17:98:fb: 0f:66:5c:92:ed:ac:b1:76:66:ac:eb:35:53:e7:ba: 7b:ca:a1:5c:ce:b0:38:20:19:1f:1e:2d:6b:dc:96: 63:6f:9c:47:d4:44:f9:77:ca:70:1f:a3:7e:33:2e: 60:5e:fb:07:02:57:1c:c4:c9:4e:97:13:a6:d2:15: 7e:97:04:23:d5:f7:24:e0:6d:e3:47:ae:dc:b1:78: 2d:45:07:6a:fb:0a:97:20:c0:34:09:44:b8:3f:38: 92:fc:3f:9f:46:49:ba:30:95:c0:1e:45:d3:64:74: 18:80:ef:d2:f1:a4:cc:45:18:d3:ef:7d:11:fc:02: d8:55:fe:9c:d4:a8:cf:ff:1b:71:7c:9c:e9:65:66: ba:82:a6:a3:b6:25:6e:75:a6:5f:4a:d6:ef:77:be: 38:ac:5d:6e:1d:4c:ca:1b:cb:43:12:cf:58:bd:38: 2a:1b:52:52:52:a3:a3:b7:ab:93:d9:16:b5:5f:ad: 04:ef:4f:bf:01:2e:50:18:a5:e2:85:a4:4c:01:94: b6:34:8b:78:51:95:2d:e6:8a:c7:e8:d3:34:43:b8: c2:12:7c:54:0e:12:df:74:35:ba:01:c7:26:33:dc: 05:8f:6d:ab:1f:35:e3:78:3b:80:47:0e:88:ae:48: fc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A8:A3:78:7C:63:59:4C:42:08:6D:15:4E:F6:83:12:B8:E5:E2:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3635bacf-d73e-3f47-8a82-a8a92a109fac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:9b:85:51:64:44:f4:6b:96:bd:ff:e4:51:14:cd:9d:45:b8: 8b:df:6a:76:ac:66:ed:29:48:bf:8f:e4:a3:be:ec:c3:0d:df: 63:1d:bf:7b:df:cf:d5:98:e6:3d:76:de:1f:55:67:b7:32:95: 19:90:bd:5f:04:9b:c1:3c:16:8c:27:db:ab:9e:70:54:a4:40: 0c:9e:11:76:92:05:85:05:bb:f2:42:46:fd:6e:67:08:1e:31: f4:bc:8a:c1:2f:a0:92:ce:22:f5:89:d0:10:3d:84:05:45:8d: 9c:45:fc:f8:c0:9d:06:a8:00:11:28:2d:3f:d9:46:c5:b7:4d: be:24:12:fc:f2:88:ff:d8:67:4d:f7:c9:88:2a:d4:09:55:43: 6a:04:45:d1:0c:7b:36:8a:90:53:85:e2:20:fe:2c:fe:da:59: 9e:81:d3:39:b4:3b:ac:38:9d:4a:af:01:71:a1:66:e2:b1:d3: 20:c1:42:11:72:71:c6:7c:21:3b:38:eb:87:4e:12:40:1b:db: 37:67:c7:7b:56:55:f9:3c:54:5a:bf:b1:0b:83:6f:cb:e1:5d: 20:fb:3c:d0:c5:ab:a5:f3:92:4d:a9:5d:b5:a4:80:40:22:7b: 07:50:9b:1f:42:cf:c6:e6:b6:bf:2a:1c:4d:4f:5d:8e:8e:11: 8b:be:24:97 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBn6p8MNpQBHF2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk OTk4MjY1OTMtNTdmZC00NmQ4LTk5MTAtYmMxMTNhM2ZmNjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQEE7bYZAyNMh9kXmPsPZlyS7ayxdmas6zVT 57p7yqFczrA4IBkfHi1r3JZjb5xH1ET5d8pwH6N+My5gXvsHAlccxMlOlxOm0hV+ lwQj1fck4G3jR67csXgtRQdq+wqXIMA0CUS4PziS/D+fRkm6MJXAHkXTZHQYgO/S 8aTMRRjT730R/ALYVf6c1KjP/xtxfJzpZWa6gqajtiVudaZfStbvd744rF1uHUzK G8tDEs9YvTgqG1JSUqOjt6uT2Ra1X60E70+/AS5QGKXihaRMAZS2NIt4UZUt5orH 6NM0Q7jCEnxUDhLfdDW6AccmM9wFj22rHzXjeDuARw6Irkj8YQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFSoo3h8Y1lMQghtFU72gxK45eILMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzYzNWJhY2YtZDczZS0z ZjQ3LThhODItYThhOTJhMTA5ZmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBIm4VRZET0a5a9/+RRFM2dRbiL32p2rGbtKUi/j+SjvuzDDd9jHb97 38/VmOY9dt4fVWe3MpUZkL1fBJvBPBaMJ9urnnBUpEAMnhF2kgWFBbvyQkb9bmcI HjH0vIrBL6CSziL1idAQPYQFRY2cRfz4wJ0GqAARKC0/2UbFt02+JBL88oj/2GdN 98mIKtQJVUNqBEXRDHs2ipBTheIg/iz+2lmegdM5tDusOJ1KrwFxoWbisdMgwUIR cnHGfCE7OOuHThJAG9s3Z8d7VlX5PFRav7ELg2/L4V0g+zzQxaul85JNqV21pIBA InsHUJsfQs/G5ra/KhxNT12OjhGLviSX -----END CERTIFICATE-----Generated at Sun Apr 27 23:50:37 2025 by rpki-client