$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5521b7b-5f32-3762-9366-9c7f948e9eac.roa File: c5521b7b-5f32-3762-9366-9c7f948e9eac.roa (raw, json) Hash identifier: +cFPigmw90IeENyr4DVYOaEx9DXNs/Mx4jU+LFpyoxk= Subject key identifier: 06:5C:A4:2D:13:D5:AB:3F:18:9B:02:5F:3A:0D:A0:67:0D:42:D5:E5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E00678EE77F5FFC6B745DD20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5521b7b-5f32-3762-9366-9c7f948e9eac.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 36627 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:78:ee:77:f5:ff:c6:b7:45:dd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=1edc5913-c3f0-481d-9349-37d2a7fbaa72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:45:58:cf:ac:bb:e3:3a:54:31:ef:e8:f2:55: 24:c4:f7:28:4d:03:03:6d:b5:0b:60:06:47:18:d7: 81:32:99:e0:16:ca:e0:90:cd:17:69:53:8a:41:03: e0:19:57:89:e9:3a:81:7c:f8:eb:e6:42:0e:97:3f: 15:dd:41:17:9b:ce:a0:6d:a3:0c:85:06:3c:a4:40: d0:83:6f:03:63:97:ee:3d:63:9f:29:86:ce:cc:3a: cd:f3:7f:db:89:1d:e1:50:de:ed:e1:4d:43:11:3a: 38:f8:5f:10:77:f6:a4:b0:0b:da:bb:8d:29:22:51: 4f:d8:6e:13:df:ea:87:c8:76:37:48:9c:a9:3d:e8: b9:5c:bb:7c:b3:c8:19:7f:56:80:0c:05:f6:6c:53: da:c2:f8:1c:92:c5:7b:5c:9b:cd:31:4b:62:28:ea: c5:6b:a0:8c:f7:05:34:46:89:fb:34:2e:48:15:9d: b6:ab:19:d5:fd:e3:d7:46:09:12:79:f2:aa:1a:d8: 37:28:64:32:de:c4:e6:59:53:6f:b5:cd:2e:de:11: 95:a6:68:84:25:ac:61:4f:a2:54:18:47:15:42:a6: d7:38:3e:69:d6:8a:9a:fc:5e:75:58:fb:5e:d9:82: 56:04:a5:49:b7:6d:03:7a:d4:5b:00:69:bf:d9:1e: dc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5C:A4:2D:13:D5:AB:3F:18:9B:02:5F:3A:0D:A0:67:0D:42:D5:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5521b7b-5f32-3762-9366-9c7f948e9eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a5:a9:2e:2c:35:5d:29:e7:0e:93:fc:f0:0b:44:76:6d:31: 30:19:78:4b:db:0d:4f:62:20:08:96:cc:25:ad:3f:42:1e:bb: b4:90:cf:30:df:af:16:cd:36:63:b7:85:37:30:22:07:05:cf: 7e:2f:28:37:41:e2:66:a4:f8:c2:1c:08:e0:51:fb:1f:41:fa: 61:86:c2:33:a0:f1:34:9b:55:21:db:74:fe:65:00:ad:3e:e3: c7:28:83:a1:53:d8:75:be:28:7e:5a:f2:ae:55:3b:a5:81:a1: 6b:81:18:33:8e:9e:0d:9e:a3:28:53:cf:d1:55:75:de:6c:19: 28:48:7a:fa:db:40:40:cd:44:57:4e:01:83:d6:5f:3f:43:08: 59:d4:e2:6c:63:78:f5:6a:78:05:e2:f6:1a:52:da:4b:eb:cf: 43:f9:17:11:69:84:eb:d1:c0:cb:50:ff:7e:ef:8d:d3:bc:66: 80:7f:d7:60:11:db:33:2e:80:bf:72:33:7d:7b:51:56:a7:9f: 89:2a:a1:8e:14:e1:d4:7a:bc:a0:a1:1a:c3:1d:84:b7:eb:69: 82:c7:70:68:95:f4:52:54:e8:c1:16:b5:7e:9d:ec:1e:a3:31: fd:87:bc:85:a6:8b:1d:27:7b:33:39:4a:6e:61:05:3f:10:6d: 83:7f:3c:9a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBnjud/X/xrdF3SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk MWVkYzU5MTMtYzNmMC00ODFkLTkzNDktMzdkMmE3ZmJhYTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUVYz6y74zpUMe/o8lUkxPcoTQMDbbULYAZH GNeBMpngFsrgkM0XaVOKQQPgGVeJ6TqBfPjr5kIOlz8V3UEXm86gbaMMhQY8pEDQ g28DY5fuPWOfKYbOzDrN83/biR3hUN7t4U1DETo4+F8Qd/aksAvau40pIlFP2G4T 3+qHyHY3SJypPei5XLt8s8gZf1aADAX2bFPawvgcksV7XJvNMUtiKOrFa6CM9wU0 Ron7NC5IFZ22qxnV/ePXRgkSefKqGtg3KGQy3sTmWVNvtc0u3hGVpmiEJaxhT6JU GEcVQqbXOD5p1oqa/F51WPte2YJWBKVJt20DetRbAGm/2R7cIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAZcpC0T1as/GJsCXzoNoGcNQtXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzU1MjFiN2ItNWYzMi0z NzYyLTkzNjYtOWM3Zjk0OGU5ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBhpakuLDVdKecOk/zwC0R2bTEwGXhL2w1PYiAIlswlrT9CHru0kM8w 368WzTZjt4U3MCIHBc9+Lyg3QeJmpPjCHAjgUfsfQfphhsIzoPE0m1Uh23T+ZQCt PuPHKIOhU9h1vih+WvKuVTulgaFrgRgzjp4NnqMoU8/RVXXebBkoSHr620BAzURX TgGD1l8/QwhZ1OJsY3j1angF4vYaUtpL689D+RcRaYTr0cDLUP9+743TvGaAf9dg EdszLoC/cjN9e1FWp5+JKqGOFOHUerygoRrDHYS362mCx3BolfRSVOjBFrV+newe ozH9h7yFposdJ3szOUpuYQU/EG2Dfzya -----END CERTIFICATE-----Generated at Sun Apr 27 16:38:54 2025 by rpki-client