$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df54cf30-734d-3baa-8c6e-dcfac4bc2e2d.roa File: df54cf30-734d-3baa-8c6e-dcfac4bc2e2d.roa (raw, json) Hash identifier: K17TRvpn5OU2ZJIHtDzdjrcqosr67I12W/wLvjRmo48= Subject key identifier: 78:1D:AD:39:AE:8D:4C:06:28:BD:17:0E:05:14:EF:1D:55:70:1C:87 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E0067D24B1CE6B3359850424 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df54cf30-734d-3baa-8c6e-dcfac4bc2e2d.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 396574 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:7d:24:b1:ce:6b:33:59:85:04:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=f72a47d7-ee11-44c7-8425-b2e540512525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b7:d2:d9:5b:dd:47:11:6d:3b:93:66:2d:11: be:59:55:8a:03:56:64:9d:82:b7:96:28:68:bf:e7: d0:3e:08:8f:e3:9d:5c:2b:e5:5e:ad:60:00:7b:0e: 83:73:54:d5:b9:88:c4:28:08:3b:f2:94:b2:0e:08: 75:96:a3:2e:3c:1e:3c:95:af:6c:ec:7a:c1:34:ff: 68:ce:85:b3:d3:3b:52:ed:0c:bb:88:16:70:70:c1: a1:9f:35:0e:c7:14:79:06:88:06:67:95:c4:fc:a4: 69:45:63:c5:76:e5:0b:95:08:b8:98:7e:9c:df:f6: 6d:68:a2:d7:a6:f9:60:bb:a1:10:a8:bd:ef:a4:b9: 20:10:01:af:44:31:6b:d4:b6:da:ac:7e:6a:65:04: 09:a3:5c:5d:aa:55:26:51:21:93:45:3c:59:34:7b: 2b:32:01:49:16:70:53:6c:6e:b5:4d:20:13:c7:e8: 5f:15:1b:99:14:fa:fe:77:d5:d2:6a:fb:06:14:42: a5:c1:66:6d:ca:ab:0d:e4:9c:ff:ee:cd:65:f2:a6: 85:36:f8:da:e3:35:1f:4e:60:06:da:57:6c:5d:ae: 23:52:74:91:47:97:de:28:e0:45:c2:5f:7b:40:8b: fe:ab:9c:67:fe:16:d9:3f:e2:7c:0f:bd:78:a7:25: 3a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1D:AD:39:AE:8D:4C:06:28:BD:17:0E:05:14:EF:1D:55:70:1C:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df54cf30-734d-3baa-8c6e-dcfac4bc2e2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:81:75:43:0b:2c:ce:9e:95:98:0a:7d:54:19:d6:8e:25:e4: 42:54:55:df:6a:f3:3c:c8:43:42:cb:3c:a4:dc:33:24:a8:0d: af:3d:6b:5b:6c:2b:12:f8:00:f3:67:f4:d4:53:39:82:5f:4d: f5:b3:1a:57:69:09:d1:f8:1b:91:ff:c1:5a:79:1c:fb:be:dc: 1a:ec:19:99:e8:2c:65:64:0c:f4:f1:34:75:34:7a:05:da:f3: e0:e9:ff:aa:d3:d8:90:d3:1e:1a:43:77:5b:ab:d8:6c:99:83: 3e:f3:7b:af:6d:54:da:56:25:a0:df:21:66:6c:1b:c1:0a:bd: 81:58:22:1f:d5:ba:89:04:ca:70:46:ef:49:41:bb:70:bb:7e: d9:ff:f1:12:9b:24:74:48:b9:6b:5e:62:64:dd:c6:4f:30:a5: c0:cd:19:c8:4a:d6:64:ee:66:a5:11:54:b6:b9:63:38:22:71: 14:f5:5a:15:f7:94:8e:fa:94:86:b0:96:0b:47:c1:63:56:84: 28:7f:e8:04:37:2e:7b:61:28:39:8a:23:96:60:66:b7:b3:f2: ef:fd:92:aa:f2:34:07:ed:9e:17:f0:a0:37:8e:23:69:7d:6d: 4e:c8:6a:02:4f:4e:c3:5d:11:84:28:47:01:91:e4:c2:30:87: b1:f7:79:96 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBn0ksc5rM1mFBCQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZjcyYTQ3ZDctZWUxMS00NGM3LTg0MjUtYjJlNTQwNTEyNTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7fS2VvdRxFtO5NmLRG+WVWKA1ZknYK3liho v+fQPgiP451cK+VerWAAew6Dc1TVuYjEKAg78pSyDgh1lqMuPB48la9s7HrBNP9o zoWz0ztS7Qy7iBZwcMGhnzUOxxR5BogGZ5XE/KRpRWPFduULlQi4mH6c3/ZtaKLX pvlgu6EQqL3vpLkgEAGvRDFr1LbarH5qZQQJo1xdqlUmUSGTRTxZNHsrMgFJFnBT bG61TSATx+hfFRuZFPr+d9XSavsGFEKlwWZtyqsN5Jz/7s1l8qaFNvja4zUfTmAG 2ldsXa4jUnSRR5feKOBFwl97QIv+q5xn/hbZP+J8D714pyU6DQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHgdrTmujUwGKL0XDgUU7x1VcByHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGY1NGNmMzAtNzM0ZC0z YmFhLThjNmUtZGNmYWM0YmMyZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB2gXVDCyzOnpWYCn1UGdaOJeRCVFXfavM8yENCyzyk3DMkqA2vPWtb bCsS+ADzZ/TUUzmCX031sxpXaQnR+BuR/8FaeRz7vtwa7BmZ6CxlZAz08TR1NHoF 2vPg6f+q09iQ0x4aQ3dbq9hsmYM+83uvbVTaViWg3yFmbBvBCr2BWCIf1bqJBMpw Ru9JQbtwu37Z//ESmyR0SLlrXmJk3cZPMKXAzRnIStZk7malEVS2uWM4InEU9VoV 95SO+pSGsJYLR8FjVoQof+gENy57YSg5iiOWYGa3s/Lv/ZKq8jQH7Z4X8KA3jiNp fW1OyGoCT07DXRGEKEcBkeTCMIex93mW -----END CERTIFICATE-----Generated at Mon Apr 28 12:30:14 2025 by rpki-client