$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/f6a4a867-0e14-3e5a-b328-a4f8e9602aa6.roa File: f6a4a867-0e14-3e5a-b328-a4f8e9602aa6.roa (raw, json) Hash identifier: s0uoEGr7qL5tUMvQKKtdx7wkorPIceOb3TpRkbrLYe4= Subject key identifier: FA:AE:17:0F:62:F8:43:45:03:0C:43:E0:0F:3A:BE:2E:14:A9:0E:30 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285849287E5D616D0D1484AC063B60 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/f6a4a867-0e14-3e5a-b328-a4f8e9602aa6.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 32787 IP address blocks: 209.8.50.0/24 maxlen: 24 209.8.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:5d:61:6d:0d:14:84:ac:06:3b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=7ee833b8-8da6-4136-a7e9-e157ff60b4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fc:e3:3b:88:c2:fa:a3:b9:2a:a7:fb:e2:8d: 74:cc:cf:bb:e7:a8:c7:35:2b:14:0a:85:d8:73:22: f4:06:25:20:f9:7f:ca:ea:3c:b9:9d:99:4e:99:6c: b6:b0:97:53:11:0b:dd:c3:29:3b:23:4d:3a:11:df: 7e:3c:8e:f5:fa:66:bf:f6:74:5f:c8:2d:5c:69:21: 9b:1a:30:b2:8b:88:6c:08:7f:d7:df:03:54:d4:4a: 60:33:c3:ea:a9:f2:6c:1f:99:17:1e:00:e5:a0:2f: bc:b8:78:70:c9:78:15:cf:85:b1:e1:51:09:10:8c: 0b:3e:bc:a7:5f:06:b2:6f:bd:5e:b0:9b:36:0e:a2: 63:4c:f7:ea:cd:46:00:d7:79:4f:ec:86:36:2a:c4: 68:5e:dd:77:46:34:22:06:f0:e1:91:fa:fd:ec:41: 66:87:16:c7:d0:4b:c3:3f:e4:bf:44:a2:94:24:c0: ac:f7:4a:75:fb:47:36:29:20:28:1b:67:94:59:1e: ab:0a:d5:22:e0:0f:07:ca:5f:5a:a0:29:cd:e9:5d: 5d:e0:9c:13:a5:d2:81:04:de:39:9f:a6:69:4d:0c: d5:9a:e6:06:47:a4:22:92:c3:fc:95:59:e6:24:4e: f2:00:d5:8a:f8:7e:ec:ef:71:7f:0e:a1:f1:f2:94: 05:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AE:17:0F:62:F8:43:45:03:0C:43:E0:0F:3A:BE:2E:14:A9:0E:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/f6a4a867-0e14-3e5a-b328-a4f8e9602aa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 209.8.50.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:35:86:68:47:5d:79:e3:6f:ea:ed:c8:69:08:10:55:d9:60: 6a:31:71:1b:15:4a:42:79:35:55:b5:fa:97:94:73:d0:36:a1: 9e:a5:1c:47:7d:6f:f7:b7:04:f0:ad:b4:35:dc:43:f0:66:55: 97:86:93:b7:6a:36:32:5c:b7:02:db:08:de:8b:ee:6a:57:a4: 93:00:89:4b:49:78:cb:49:90:a0:ad:c5:4a:8a:b6:c6:85:b1: f4:98:46:8c:2f:bb:72:86:e7:b5:f4:97:bf:aa:b3:e1:a7:e8: 80:f8:2d:2f:73:12:07:4c:7a:56:8d:54:1a:13:ea:54:37:0c: 34:82:29:0c:57:fa:9d:00:95:41:e2:10:8f:db:ff:b5:c8:ad: af:b8:4f:e3:1a:52:8c:1b:f8:e4:7c:23:48:63:4b:3e:c9:97: 83:08:b3:a4:94:f8:66:53:6e:0b:0e:7c:2d:d9:32:41:34:67: 1e:16:55:e2:24:05:5c:76:b0:b1:91:03:1a:02:3a:72:3b:c5: 3f:0f:f2:6d:55:ff:0e:03:15:70:bd:90:8f:7c:59:16:04:49: 24:a7:a3:b8:04:55:86:f9:ca:5d:44:e4:0d:7f:60:a1:13:63: 6a:bb:c2:c2:f1:54:d6:f8:b1:15:4a:3f:9a:16:ff:c5:d7:9f: dd:c0:cf:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofl1hbQ0UhKwGO2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk N2VlODMzYjgtOGRhNi00MTM2LWE3ZTktZTE1N2ZmNjBiNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfzjO4jC+qO5Kqf74o10zM+756jHNSsUCoXY cyL0BiUg+X/K6jy5nZlOmWy2sJdTEQvdwyk7I006Ed9+PI71+ma/9nRfyC1caSGb GjCyi4hsCH/X3wNU1EpgM8PqqfJsH5kXHgDloC+8uHhwyXgVz4Wx4VEJEIwLPryn Xwayb71esJs2DqJjTPfqzUYA13lP7IY2KsRoXt13RjQiBvDhkfr97EFmhxbH0EvD P+S/RKKUJMCs90p1+0c2KSAoG2eUWR6rCtUi4A8Hyl9aoCnN6V1d4JwTpdKBBN45 n6ZpTQzVmuYGR6QiksP8lVnmJE7yANWK+H7s73F/DqHx8pQF0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPquFw9i+ENFAwxD4A86vi4UqQ4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvZjZhNGE4NjctMGUxNC0z ZTVhLWIzMjgtYTRmOGU5NjAyYWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0QgyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHw1hmhHXXnjb+rtyGkIEFXZYGoxcRsVSkJ5NVW1+peUc9A2oZ6lHEd9 b/e3BPCttDXcQ/BmVZeGk7dqNjJctwLbCN6L7mpXpJMAiUtJeMtJkKCtxUqKtsaF sfSYRowvu3KG57X0l7+qs+Gn6ID4LS9zEgdMelaNVBoT6lQ3DDSCKQxX+p0AlUHi EI/b/7XIra+4T+MaUowb+OR8I0hjSz7Jl4MIs6SU+GZTbgsOfC3ZMkE0Zx4WVeIk BVx2sLGRAxoCOnI7xT8P8m1V/w4DFXC9kI98WRYESSSno7gEVYb5yl1E5A1/YKET Y2q7wsLxVNb4sRVKP5oW/8XXn93Az+8= -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:09 2025 by rpki-client