$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6837e9c9-6960-3261-b176-603c90a4b0e4.roa File: 6837e9c9-6960-3261-b176-603c90a4b0e4.roa (raw, json) Hash identifier: RF2eoWAHOro7rjnH2aaXoxax7/gMhOxtUj+0w/OkFEw= Subject key identifier: C6:D9:7A:05:57:70:38:08:00:D6:E3:D3:B0:24:B2:C4:88:2A:DA:D9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E0067E9216157EDAA38E1940 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6837e9c9-6960-3261-b176-603c90a4b0e4.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396562 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:7e:92:16:15:7e:da:a3:8e:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=42696aa8-73a3-432e-9757-4e15d97fd6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:af:d6:ec:c0:f4:3e:a6:e9:1c:9c:fe:7c:e7: 8d:b6:ba:62:9b:ad:dd:63:a3:1e:aa:3a:a0:74:54: 17:6b:d5:81:29:19:5f:b6:0e:3b:4e:3a:a4:6d:8c: 4b:68:b4:e0:bd:81:0f:40:7e:99:1e:ac:40:db:f5: 65:b7:8f:25:31:e7:fa:45:4b:97:55:9d:cc:da:7e: dd:bc:21:00:fa:26:d7:79:cd:cb:3b:4c:84:42:6a: 61:c4:a8:f5:b3:28:8b:b6:bc:24:ce:c9:9f:25:9f: af:d1:78:3f:e1:1b:c3:98:a5:bb:82:4f:88:1a:b0: 04:a0:57:0f:8b:50:64:6e:84:e6:05:56:4d:c9:05: c9:a0:db:07:c3:08:d3:e4:19:e8:54:4a:78:06:ac: 47:dd:eb:5a:34:7a:d4:9c:6a:8d:5a:c8:38:4b:4e: 82:90:ca:99:ba:57:dd:8c:ef:e2:ec:98:89:ab:fd: 3e:38:eb:7d:85:1b:ad:21:ea:cd:86:10:c2:ce:ec: c4:63:b4:84:8a:ba:3b:4d:0b:dc:23:d2:b9:0b:0e: ff:58:c1:10:f0:3c:b9:e8:ef:88:a2:92:ef:f5:4a: 97:8c:60:f5:48:4f:54:8a:6c:45:08:d2:93:a0:b4: e5:0c:a3:90:6b:8c:c9:69:13:88:58:fe:be:9c:ce: 27:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D9:7A:05:57:70:38:08:00:D6:E3:D3:B0:24:B2:C4:88:2A:DA:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6837e9c9-6960-3261-b176-603c90a4b0e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:1d:f8:e8:e2:58:02:69:1b:ed:90:bc:29:04:09:ef:6e:75: 7e:40:b0:54:31:97:98:75:a4:be:c5:7e:d7:72:e6:67:2d:61: 32:f4:6c:7b:de:47:ba:a2:b1:5b:35:df:12:7f:9a:fe:3d:3f: 7e:43:9d:ef:08:c9:d0:15:11:ab:e3:8c:96:c8:dc:45:ff:d8: 3a:48:03:0c:45:31:13:ef:96:09:fe:37:8d:d6:38:c9:a0:58: be:83:c2:1d:d9:7f:2a:90:8a:d2:5f:24:ce:bf:67:0e:4f:ca: 8e:bb:c3:e0:12:b8:9b:69:a5:4d:7f:e1:28:e5:48:bd:6b:35: 02:9d:ea:00:28:84:93:56:1b:3d:5c:92:fc:63:c9:7d:b6:43: 56:a2:7b:fb:d4:c4:c5:8d:fa:d1:83:2b:8a:52:3b:aa:b6:29: cd:53:97:18:8f:ec:01:7b:8d:b6:d4:6b:c1:f5:17:fa:fe:ae: ff:98:55:f8:1d:af:86:07:99:b2:ed:b9:12:03:83:d5:89:08: ea:44:9b:8c:27:86:81:92:fa:90:9b:be:a2:07:2a:0f:1a:c6: e0:70:9d:54:a8:c4:4d:44:98:84:9d:06:61:73:fd:32:8b:6b: 90:a0:4a:5c:10:e4:4e:8b:f5:3c:c1:a3:06:62:af:e6:a8:c1: 7a:2c:19:4a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBn6SFhV+2qOOGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk NDI2OTZhYTgtNzNhMy00MzJlLTk3NTctNGUxNWQ5N2ZkNmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6/W7MD0PqbpHJz+fOeNtrpim63dY6Meqjqg dFQXa9WBKRlftg47TjqkbYxLaLTgvYEPQH6ZHqxA2/Vlt48lMef6RUuXVZ3M2n7d vCEA+ibXec3LO0yEQmphxKj1syiLtrwkzsmfJZ+v0Xg/4RvDmKW7gk+IGrAEoFcP i1BkboTmBVZNyQXJoNsHwwjT5BnoVEp4BqxH3etaNHrUnGqNWsg4S06CkMqZulfd jO/i7JiJq/0+OOt9hRutIerNhhDCzuzEY7SEiro7TQvcI9K5Cw7/WMEQ8Dy56O+I opLv9UqXjGD1SE9UimxFCNKToLTlDKOQa4zJaROIWP6+nM4nHwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMbZegVXcDgIANbj07AkssSIKtrZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjgzN2U5YzktNjk2MC0z MjYxLWIxNzYtNjAzYzkwYTRiMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBzHfjo4lgCaRvtkLwpBAnvbnV+QLBUMZeYdaS+xX7XcuZnLWEy9Gx7 3ke6orFbNd8Sf5r+PT9+Q53vCMnQFRGr44yWyNxF/9g6SAMMRTET75YJ/jeN1jjJ oFi+g8Id2X8qkIrSXyTOv2cOT8qOu8PgEribaaVNf+Eo5Ui9azUCneoAKISTVhs9 XJL8Y8l9tkNWonv71MTFjfrRgyuKUjuqtinNU5cYj+wBe4221GvB9Rf6/q7/mFX4 Ha+GB5my7bkSA4PViQjqRJuMJ4aBkvqQm76iByoPGsbgcJ1UqMRNRJiEnQZhc/0y i2uQoEpcEOROi/U8waMGYq/mqMF6LBlK -----END CERTIFICATE-----Generated at Sun Apr 27 22:12:52 2025 by rpki-client