$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c527dbe5-7a37-352d-8d4c-0d22cd0bf035.roa File: c527dbe5-7a37-352d-8d4c-0d22cd0bf035.roa (raw, json) Hash identifier: 4zZt95YxN/twrbVjHBLSxltPOBwUFoWR88J5acgcj4M= Subject key identifier: BD:42:26:97:C2:08:8F:45:9F:57:3C:A9:54:DD:8E:1B:05:C2:8C:25 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E00679109C75FDEB7274C3D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c527dbe5-7a37-352d-8d4c-0d22cd0bf035.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396557 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:79:10:9c:75:fd:eb:72:74:c3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=e7cacd72-0245-4e22-b819-6bcec4bf809c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:07:b9:23:d5:5d:92:3b:c8:d9:c5:8d:96:0e: 23:c3:74:31:db:05:65:cf:6b:eb:55:c1:67:cd:23: e1:18:61:77:7f:b9:6b:16:32:0c:12:08:21:25:5d: 85:ed:85:1e:bf:e3:bc:10:1a:dd:73:0b:b6:f4:11: b9:1a:a6:91:a9:47:1f:9d:1a:de:bc:66:67:f0:1f: 1c:ac:9e:25:9b:e4:7f:f6:43:ce:ee:dd:4f:2b:fa: e1:4d:68:e9:b1:4c:98:19:a9:f5:cc:35:8f:28:34: ea:03:3d:0d:b3:80:e6:2f:7e:b2:a7:c7:ab:19:01: 01:c2:36:3f:aa:de:bf:71:95:8b:16:41:31:bc:f4: b4:9c:14:31:d8:38:42:a4:c3:57:4a:76:4a:d0:3b: 8b:f2:1d:6f:69:27:73:99:46:e9:96:9c:bd:b4:3e: c8:8f:71:1c:6c:77:77:8a:1c:4a:b1:59:f8:42:94: bf:29:f4:3a:cb:4c:7f:93:da:73:bb:61:e9:1d:72: 7c:6a:1c:23:52:c5:d5:14:8e:71:eb:2a:67:64:b1: 9d:b5:f5:f4:27:fa:a3:35:44:fd:83:30:26:a0:ff: 63:f0:7c:8c:57:a0:2e:a6:18:9a:4f:7e:aa:e2:ef: 4d:df:fd:3d:ec:8f:75:55:d3:9e:02:63:4a:32:4e: 7a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:42:26:97:C2:08:8F:45:9F:57:3C:A9:54:DD:8E:1B:05:C2:8C:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c527dbe5-7a37-352d-8d4c-0d22cd0bf035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:26:5d:16:10:0b:0b:08:3c:a2:7e:d1:d1:46:22:22:45:15: 2d:58:8f:8d:22:dd:67:69:ae:a1:1f:c0:c1:92:00:7c:5b:05: 16:8a:32:8e:15:fd:ca:b2:37:4c:6d:75:5f:4e:a9:ff:1b:73: 71:22:73:b3:07:f3:90:b1:24:cb:c9:c9:58:e1:c6:ad:94:f5: 4a:d9:8a:76:67:91:89:22:e3:a1:d9:fb:c2:89:f9:de:53:64: 6e:c2:90:13:48:71:3a:17:a8:e1:70:e0:48:f0:82:79:7a:37: 8b:3b:2c:c5:e0:1d:eb:ad:31:60:f2:c3:fb:de:9c:dd:1c:16: 13:3c:55:2b:24:7f:e8:20:ec:16:5e:4c:91:e9:c9:0f:09:e4: 5e:a1:e7:9f:ef:97:7c:90:c3:65:ca:37:27:aa:ea:82:08:88: 23:71:2d:f2:1a:7c:bc:9b:42:fc:5b:41:3d:be:1f:fa:ed:40: 5e:db:2c:f1:b2:83:02:66:8a:0c:4b:9f:b9:c1:8e:42:15:87: 9e:57:26:85:c2:49:95:82:35:b9:e4:e7:a8:8b:cf:2f:18:0a: 00:8b:15:cd:61:de:49:db:c7:ae:bc:23:a5:7f:c2:ae:af:5b: 48:44:fd:e3:a1:0e:0b:48:01:83:38:16:bc:8c:99:da:d9:b0: a2:3f:5a:0b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBnkQnHX963J0w9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZTdjYWNkNzItMDI0NS00ZTIyLWI4MTktNmJjZWM0YmY4MDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQe5I9VdkjvI2cWNlg4jw3Qx2wVlz2vrVcFn zSPhGGF3f7lrFjIMEgghJV2F7YUev+O8EBrdcwu29BG5GqaRqUcfnRrevGZn8B8c rJ4lm+R/9kPO7t1PK/rhTWjpsUyYGan1zDWPKDTqAz0Ns4DmL36yp8erGQEBwjY/ qt6/cZWLFkExvPS0nBQx2DhCpMNXSnZK0DuL8h1vaSdzmUbplpy9tD7Ij3EcbHd3 ihxKsVn4QpS/KfQ6y0x/k9pzu2HpHXJ8ahwjUsXVFI5x6ypnZLGdtfX0J/qjNUT9 gzAmoP9j8HyMV6AuphiaT36q4u9N3/097I91VdOeAmNKMk56aQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL1CJpfCCI9Fn1c8qVTdjhsFwowlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzUyN2RiZTUtN2EzNy0z NTJkLThkNGMtMGQyMmNkMGJmMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB9Jl0WEAsLCDyiftHRRiIiRRUtWI+NIt1naa6hH8DBkgB8WwUWijKO Ff3KsjdMbXVfTqn/G3NxInOzB/OQsSTLyclY4catlPVK2Yp2Z5GJIuOh2fvCifne U2RuwpATSHE6F6jhcOBI8IJ5ejeLOyzF4B3rrTFg8sP73pzdHBYTPFUrJH/oIOwW XkyR6ckPCeReoeef75d8kMNlyjcnquqCCIgjcS3yGny8m0L8W0E9vh/67UBe2yzx soMCZooMS5+5wY5CFYeeVyaFwkmVgjW55Oeoi88vGAoAixXNYd5J28euvCOlf8Ku r1tIRP3joQ4LSAGDOBa8jJna2bCiP1oL -----END CERTIFICATE-----Generated at Mon Apr 28 06:13:16 2025 by rpki-client